<%
require_once "backroom/config.txt";

$gooddata = 1;

require_once($store[backroom_dir]."/validate_email.php");
require($store[backroom_dir]."/stripslashes.php");

function get_order_num () {
	global $store;
	
	$ordernum_file = $store[backroom_dir]."/ordernum.txt";
	if (!file_exists($ordernum_file)) return 1000;
	$fd = fopen ($ordernum_file, "r");
	$maxorder = fgets($fd, 4096);
	fclose ($fd);
	return ($maxorder + 1);
}

function make_order_file() {
	$date = date("Ymd");
	$ordernum = get_order_num();
	$filename = sprintf("%06d-%8d.txt",$ordernum,$date);
	return $filename;
}

function getIDS () {
	global $input, $IDS;
	
	$quantity_array = preg_grep("/^quantity\:/",array_keys($input));
	$IDS = array();
	foreach ($quantity_array as $val) {
		$key = preg_replace("/^quantity\:/","",$val);
		if ($input[$val] > 0) {
			array_push($IDS,$key);
		}
	}
}

function write_order ($secure=false,$order_url="") {
	global $input, $IDS, $total, $store, $shipping, $order_number;

	$date = date("M d, Y");
	$time = date("h:i a T");
	require_once($store[backroom_dir]."/wraptext.php");
	
	if (!empty($order_number)) $content = "Order: $order_number\n";
	$content = "$date at $time\n";

	if (!empty($order_url)) {
		$content .= "\nSecure Order: $order_url\n";
	}

$content .= "
*** Contact Information ***

Name: $input[name]
Address: $input[address]
City: $input[city]
State: $input[state]
Zip Code: $input[zip]

Phone: $input[phone]
Email: $input[email]

Comments:
";
	$comments = wraptext($input[comments],72);
	for ($i=0; $i<sizeof($comments); $i++) {
		$content .= $comments[$i]."\n";
	}

		$content .= "
*** Payment Information ***

We accept checks and money orders only. Please mail payment in full to the address below.\n\n";
$content .= $store["company"]."\n";
$content .= $store["address1"]."\n";
$content .= $store["city"].", ".$store["state"]." ".$store["zip"]."\n";
	
	$content .= "
*** Order Information ***
";
	$divider ='------------------------------------------------------------------------';
	$content .= "\n$divider\n";
	$content .= sprintf ("|    ID    | Product Name                    |Qty|  Price   |  Total   |\n");
	$content .= "$divider\n";
	$subtotal = 0;
	$total = 0;

	foreach ($IDS as $ID) {
		$subtotal = $input['quantity:'.$ID] * $input['price:'.$ID];
		$total += $subtotal;
		$name = array();
		$name = wraptext($input['name:'.$ID],30);
	
		$content .= sprintf ("|%-10s|%-32s |%3d|%1s%5.2f |%1s%5.2f |\n",
			$ID, $name[0], $input['quantity:'.$ID], $store[currency],
			$input['price:'.$ID], $store[currency], $subtotal);
		if (sizeof($name) > 1) {
			for ($line=1;$line<=sizeof($name);$line++) {
				$content .= sprintf ("|%10s|  %-30s |   |%10s|%10s|\n",
					'',$name[$line],'','');
			}
		}
		$content .= sprintf ("|%10s|  %-30s |   |%10s|%10s|\n",'','','','');
	}
	
	$content .= "$divider\n";
	if (in_array($input[state],$store[states_to_tax])) {
		$content .= sprintf ("|%58s |%1s%5.2f |\n",'Sub-total',$currency,$total);
		$tax = $total * $store[tax]/100;
		$total += $tax;
		$tax_string = sprintf("%.2f",$store[tax]);
		$content .= sprintf ("|%58s |%1s%5.2f |\n",
			$tax_string.'% State Tax',$currency,$tax);
	}
	
	$ship_per_total = 0;
	$ship_overall_total = 0;
	
	foreach ($IDS as $ID) {
		$ship_per_total += $input['quantity:'.$ID] * $input['shipping:'.$ID];
	}

	if ($ship_per_total > 0) {
		$content .= sprintf ("|%58s |%1s%5.2f |\n","Per Item Shipping Costs",
			$store[currency], $ship_per_total);
	}

	if (isset($input[shipmethod])) {
		$ship_overall_total = $shipping[amount][$input[shipmethod]];
		$content .= sprintf ("|%58s |%1s%5.2f |\n",$shipping[name][$input[shipmethod]],
			$store[currency], $ship_overall_total);
	}

	$total += $ship_per_total + $ship_overall_total;
	
	$content .= sprintf ("|%58s |%1s%5.2f |\n",'TOTAL',$store[currency],$total);
	$content .= "$divider\n";
	
	return $content;

}

if (isset($confirm)) {
	getIDS();
	require_once($store[backroom_dir]."/ccval.php");
	if (
	 empty($input[name]) || empty($input[address]) || empty($input[city])
	 || empty($input[state]) || empty($input[country]) || empty($input[zip])
	 || !validate_email($input[email])
	 || !CCVal($input[ccnum],$input[cctype])
	 || empty($IDS)
	 ) {
		$gooddata = 0;
		unset($confirm);
	}
}

if (isset($sendorder)) {

	getIDS();
	require($store[backroom_dir]."/n_mail.php");

	$order_number = get_order_num();
	$email_subject = $store[email_subject]." - Order $order_number";

	$content = write_order(true);
	$order_filename = make_order_file();
	$order_path_file = $store[order_dir]."/".$order_filename;
	$fp = fopen($order_path_file,"w");
	fwrite($fp,$content);
	fclose($fp);
	$order_url = $store[backroom_url]."?V=".$order_number;

	$order_counter = $store[backroom_dir]."/ordernum.txt";
	$fp = fopen($order_counter,"w");
	fwrite($fp,$order_number);
	fclose($fp);

	$message = write_order(false, $order_url);
// email shop	
	n_mail($input[email], $store[email], $email_subject, $message, "Content-type: text/plain\nMime-Version: 1.0");
	$message = write_order(false);
// email buyer
	n_mail($store[email], $input[email], $email_subject, $message, "Content-type: text/plain\nMime-Version: 1.0");

}
%>
<html>

<head>
<title><%echo $store[page_title]%></title>
<link rel="stylesheet" type="text/css" href="/includes/style.css">
<%
include $_SERVER['DOCUMENT_ROOT']."/includes/metas.txt";
%>
</HEAD>
<%
include $_SERVER['DOCUMENT_ROOT']."/includes/header.inc";
%>

<%
if (!isset($confirm) && !isset($sendorder)) {
%>
<h2><%echo $store[page_title]%></h2>
<%
if ($gooddata == 0) {
%>
<p><font color=red>Some required information is missing or incorrect. Please see the notes marked in red below.</font></p>
<%
}
%>

<p>
Feel free to contact us at <%echo $store[phone]%> with questions regarding this order form.
Required fields are marked with a red asterisk (<font color="#FF0000">*</font>). 
We only accept checks and money orders in US Dollars. After you place your 
order, you will be provided with information about where to mail your payment.
</p>

<form method=post action="<%echo $PHP_SELF%>">

<table border=1 cellpadding=3 cellspacing=1 align=center>
    <tr>
      <th>Quantity</th>
      <th>Item</th>
      <th>Price</th>
      <th>+S&amp;H</th>
      <th>= Total</th>
    </tr>
<%
if ($gooddata == 0 && empty($IDS)) {
	print "<tr>
		<td colspan=5><font color=red size=1>Please enter a quantity for the products you wish to order.</font></td>
	</tr>\n";
}
%>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:201]" value="<%print $input["quantity:201"]%>"></td>
      <td>Original Portfolio<input type="hidden" name="input[name:201]" value="Original Portfolio and All Supplements"> 
      &amp;<br>
      Supplements I - V</td>
      <td align="right">$ 79.95<input type="hidden" name="input[price:201]" value="79.95"></td>
      <td align="right">free<input type="hidden" name="input[shipping:201]" value="0.00"></td>
      <td align="right">$ 79.95</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:101]" value="<%print $input["quantity:101"]%>"></td>
      <td>Original Portfolio<input type="hidden" name="input[name:101]" value="Original Portfolio"></td>
      <td align="right">$ 17.50<input type="hidden" name="input[price:101]" value="17.50"></td>
      <td align="right">free<input type="hidden" name="input[shipping:101]" value="0.00"></td>
      <td align="right">$ 17.50</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:111]" value="<%print $input["quantity:111"]%>"></td>
      <td>Supplement I<input type="hidden" name="input[name:111]" value="Supplement I"></td>
      <td align="right">$ 6.50<input type="hidden" name="input[price:111]" value="6.50"></td>
      <td align="right">free<input type="hidden" name="input[shipping:111]" value="0.00"></td>
      <td align="right">$ 6.50</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:112]" value="<%print $input["quantity:112"]%>"></td>
      <td>Supplement II<input type="hidden" name="input[name:112]" value="Supplement II"></td>
      <td align="right">$ 12.95<input type="hidden" name="input[price:112]" value="12.95"></td>
      <td align="right">free<input type="hidden" name="input[shipping:112]" value="0.00"></td>
      <td align="right">$ 12.95</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:113]" value="<%print $input["quantity:113"]%>"></td>
      <td>Supplement III<input type="hidden" name="input[name:113]" value="Supplement III"></td>
      <td align="right">$ 19.50<input type="hidden" name="input[price:113]" value="19.50"></td>
      <td align="right">free<input type="hidden" name="input[shipping:113]" value="0.00"></td>
      <td align="right">$ 19.50</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:114]" value="<%print $input["quantity:114"]%>"></td>
      <td>Supplement IV<input type="hidden" name="input[name:114]" value="Supplement IV"></td>
      <td align="right">$ 12.95<input type="hidden" name="input[price:114]" value="12.95"></td>
      <td align="right">free<input type="hidden" name="input[shipping:114]" value="0.00"></td>
      <td align="right">$ 12.95</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:115]" value="<%print $input["quantity:115"]%>"></td>
      <td>Supplement V<input type="hidden" name="input[name:115]" value="Supplement V"></td>
      <td align="right">$ 12.95<input type="hidden" name="input[price:115]" value="12.95"></td>
      <td align="right">free<input type="hidden" name="input[shipping:115]" value="0.00"></td>
      <td align="right">$ 12.95</td>
    </tr>
    <tr>
      <td align="center"><input type="text" size="4" maxlength="4" name="input[quantity:202]" value="<%print $input["quantity:202"]%>"></td>
      <td>Documentary Video<input type="hidden" name="input[name:202]" value="Documentary Video"></td>
      <td align="right">$ 49.95<input type="hidden" name="input[price:202]" value="49.95"></td>
      <td align="right">$ 3.00<input type="hidden" name="input[shipping:202]" value="3.00"></td>
      <td align="right">$ 52.95</td>
    </tr>
  </table>

 <!--input type="hidden" name="input[shipmethod]" value="0"-->

<h3>Purchaser/Shipping Information</h3>
<table border=0 cellspacing=1 align=center>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Your Name:</td>
    <td><%
    if ($gooddata == 0 && empty($input[name]))
    	print "<font size=1 color=red>Please enter your name.</font><br>\n";
    %><input size="30" name="input[name]" value="<%echo $input[name]%>"></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Address:</td>
    <td><%
    if ($gooddata == 0 && empty($input[address]))
    	print "<font size=1 color=red>Please enter your shipping address.</font><br>\n";
    %><input size="30" name="input[address]" value="<%echo $input[address]%>"></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>City:</td>
    <td><%
    if ($gooddata == 0 && empty($input[city]))
    	print "<font size=1 color=red>Please enter your city.</font><br>\n";
    %><input size="30" name="input[city]" value="<%echo $input[city]%>"></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>State:</td>
    <td><%
    if ($gooddata == 0 && empty($input[state]))
    	print "<font size=1 color=red>Please enter your state.</font><br>\n";
    %><select name="input[state]" size="1">
      <option value="" selected></option>
<%
$desired_length = 25;

$states = file($store[backroom_dir]."/states.txt");

for ($i=0;$i<sizeof($states);$i++) {
	$state_long = split("--",$states[$i]);
	$state_name = trim($state_long[0]);
	$state_length = strlen($state_name);
	if ($state_length > $desired_length) {
		$state_name = substr($state_name, 0, ($desired_length-3)).'...';
	}
	$state_two_letter = trim($state_long[1]);
	print "\t<option";
	if ($state_two_letter == $input[state]) print " selected";
	print " value=\"$state_two_letter\">$state_name</option>\n";
}

%>      </select></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Zip Code:</td>
    <td><%
    if ($gooddata == 0 && empty($input[zip]))
    	print "<font size=1 color=red>Please enter your postal zip code.</font><br>\n";
    %><input size="30" name="input[zip]" value="<%echo $input[zip]%>"></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Country:</td>
    <td><%
    if ($gooddata == 0 && empty($input[country]))
    	print "<font size=1 color=red>Please enter your country.</font><br>\n";
    %><select name="input[country]" size="1">
      <option value="" selected></option>
<%
$desired_length = 25;

$countries = file($store[backroom_dir]."/countries.txt");

for ($i=0;$i<sizeof($countries);$i++) {
	$country_long = split(" -- ",$countries[$i]);
	$country_name = trim($country_long[0]);
	$country_length = strlen($country_name);
	if ($country_length > $desired_length) {
		$country_name = substr($country_name, 0, ($desired_length-3)).'...';
	}
	$country_two_letter = trim($country_long[1]);
	print "\t<option";
	if ($country_two_letter == $input[country]) print " selected";
	print " value=\"$country_two_letter\">$country_name</option>\n";
}

%>      </select></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Phone Number:</td>
    <td><%
    if ($gooddata == 0 && empty($input[phone]))
    	print "<font size=1 color=red>Please enter your phone number.</font><br>\n";
    %><input size="30" name="input[phone]" value="<%echo $input[phone]%>"></td>
  </tr>
  <tr>
    <td align="right"><font color="#FF0000">*</font>Email Address:</td>
    <td><%
    if ($gooddata == 0 && !validate_email($input[email]))
    	print "<font size=1 color=red>Please enter a valid email address.</font><br>\n";
    %><input size="30" name="input[email]" value="<%echo $input[email]%>"></td>
  </tr>
  <tr>
    <td colspan="2">Comments or Requests:<br>
      <textarea name="input[comments]" rows="7" cols="50"><%echo $input[comments]%></textarea></td>
  </tr>
</table>

<p align=center><input type="submit" value="Continue To Confirmation" name="confirm"></p>
<%
} else if (isset($confirm)) {
%>
<h3><%$store[title]%> Order Confirmation</h3>
<p>Please review your contact, payment and order information below. Click on "Place Order!" to complete your order.</p>
<p><form action="<%echo $PHP_SELF%>" method=post>
<%
foreach ($input as $key => $value) {
	print "\t<input type=hidden name=\"input[$key]\" value=\"$value\">\n";
}
%>
<input type=submit name="sendorder" value="Place Order!">
<input type=submit name="goback" value="Make Changes">
</form>
<hr>
<%
	$content = write_order();
	print "<pre>\n".$content."</pre>\n";
} else if (isset($sendorder)) {
%>
<h3>Order Sent</h3>
<p>Order Number: <%echo $order_number%></p>
<p>Your order has been accepted for processing. An email was sent to <%echo $input[email]%>
 with a copy of the order information.</p>
<p><%
print "We accept checks and money orders only. Please mail payment in full to the address below.</p>
<p>$store[company]<br>
$store[address1]<br>
$store[city], $store[state] $store[zip]</p>\n";
%></p>
<%
}
%>
</form>

<%
include $_SERVER['DOCUMENT_ROOT']."/includes/footer.inc";
%>
</html>