0) { // Îáíîâëÿåì äàííûå çàêàçà $sql2=sprintf("UPDATE catalogs_orders SET city=%s,adress=%s,comment=%s,total=%s WHERE id='".$_POST['order_id']."'", GetSQLValueString($_POST['user']['city'], "text"), GetSQLValueString($_POST['user']['address'], "text"), GetSQLValueString($_POST['user']['comment'], "text"), GetSQLValueString($summary, "text")); $result2 = mysql_query($sql2) or die(mysql_error()); eMailing('xml',$_POST['user_id'], $_POST['order_id']); } else { $sql2="DELETE FROM catalogs_orders WHERE id='".$_POST['order_id']."'"; $result2 = mysql_query($sql2) or die(mysql_error()); } GoBack(1); } else { echo""; } } // ============== // ==== add ===== // ============== if (isset($_POST['send']) && $_POST['send']=='add-order') { // Ïðîâåðÿåì äûáèë ëè àäìèí $debil==false; for($i=1; $i<=count($_POST['item']); $i++) { if(isset($_POST['item']['mod_id'][$i]) && $_POST['item']['mod_id'][$i]=='') { $debil=true; } } if( $debil==false) { // $error=''; // $error[] = ValidFormData($_POST['user']['email'],'email','email'); // $error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require'); // $error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require'); // $error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile'); // $error[] = ValidFormData($_POST['user']['username'],'èìÿ','require'); // $alert=implode('\r\n',$error); // $mass=array_filter($error); // if (empty($mass)) { // Ïðîâåðÿåì ñóùåñòâóåò ëè ïîëüçîâàòåëü // $sql="SELECT * FROM zlo_users WHERE email='".$_POST['user']['email']."' "; // $result = mysql_query($sql) or die(mysql_error()); // if (mysql_affected_rows()!=0) { // } $time=mktime(); $date=date('Y-m-d H:i:s',$time); // Åñëè ñîçäàåì íîâîãî ïîëüçîâàòåëü if($_POST['user']['user_id']=='' || $_POST['user']['user_id']==0 || $_POST['user']['user_id']=='0') { if (strpos($_POST['user']['email'],"@user.com")) { $_POST['user']['group']=1; } else { $_POST['user']['group']=2; } // Äîáàâëÿåì ïîëüçîâàòåëÿ $pass=generate_password(6); $sql = sprintf("INSERT INTO zlo_users (pass, email, city, address, tel, registered, username, tel2, `group`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s)", GetSQLValueString($pass, "text"), GetSQLValueString($_POST['user']['email'], "text"), GetSQLValueString($_POST['user']['city'], "text"), GetSQLValueString($_POST['user']['address'], "text"), GetSQLValueString($_POST['user']['tel'], "text"), GetSQLValueString($date, "text"), GetSQLValueString($_POST['user']['username'], "text"), GetSQLValueString($_POST['user']['tel2'], "text"), GetSQLValueString($_POST['user']['group'], "int")); $result = mysql_query($sql) or die(mysql_error()); // Óçíàåì ID ïîëüçîâàòåëÿ $sql="SELECT id FROM zlo_users WHERE registered='$date' AND tel='".$_POST['user']['tel']."'"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $user=mysql_fetch_assoc($result); // Øëåì ïèñüìà if($user['group']!=1) { eMailing('reg',$user['id']); } $_POST['user']['user_id']=$user['id']; } else { echo "íåò ïîëüçîâàòåëÿ";} } // Äîáàâëÿåì çàêàç $sql=sprintf("INSERT INTO catalogs_orders (user_id,name,email,city,adress,phone,phonemob,comment,mktime,total,status) VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,1)", GetSQLValueString($_POST['user']['user_id'], "text"), GetSQLValueString($_POST['user']['username'], "text"), GetSQLValueString($_POST['user']['email'], "text"), GetSQLValueString($_POST['user']['city'], "text"), GetSQLValueString($_POST['user']['address'], "text"), GetSQLValueString($_POST['user']['tel'], "text"), GetSQLValueString($_POST['user']['tel2'], "text"), GetSQLValueString($_POST['user']['comment'], "text"), GetSQLValueString($time, "text"), GetSQLValueString($_POST['summary'], "text")); $result = mysql_query($sql) or die(mysql_error()); // Óçíàåì íîìåð çàêàçà $sql="SELECT id FROM catalogs_orders WHERE mktime='$time' AND user_id='".$_POST['user']['user_id']."'"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $order=mysql_fetch_assoc($result); } else { echo "Îøèáêà";} // Äîáàâëÿåì òîâàðû for($i=0; $i<=count($_POST['item']); $i++) { if($_POST['item']['code'][$i]!=''){ $sql=sprintf("INSERT INTO catalogs_orders_products (order_id,product_id,product_cine_id,count) VALUES (%s,%s,%s,%s)", GetSQLValueString($order['id'], "text"), GetSQLValueString($_POST['item']['mod_id'][$i], "text"), GetSQLValueString($_POST['item']['price'][$i], "text"), GetSQLValueString($_POST['item']['quant'][$i], "text")); $result = mysql_query($sql) or die(mysql_error()); } } // Øëåì ïèñüìà if ($user['group']!=1) { eMailing('order-new',$_POST['user']['user_id'], $order['id']); } echo ""; // } else { // echo""; // } } else { echo""; } } // ================= // ==== NOTIFY ===== // ================= // ============== // == changed === // ============== if (isset($_GET['notify']) && $_GET['notify']=='order-changed') { eMailing('order-changed',$_GET['user'], $_GET['order']); echo ""; } // ====================================== // ====================================== // ============== Âûâîä ================= // ====================================== // ====================================== // ============= // ==== all ==== // ============= if (!isset($_GET['action'])) { echo""; echo"Äîáàâèòü"; if (!isset($_GET['status'])) {$_GET['status']=1;} if(isset($_GET['user'])) {$AND="AND u.id=".$_GET['user'];} else {$AND='';} // ============= // === Ïîèñê === // ============= $th=array("id"=>"íîìåð çêàçà","username"=>"êëèåíò", "email"=>"email", "tel"=>"òåëåôîí", "code"=>"øòðèõêîä"); // Åñëè ñóùåñòâóåò Ïîèñê if (isset($_REQUEST['search'])) { if($_REQUEST['field']=='id') {$pre="o";} if($_REQUEST['field']=='username') {$pre="u";} if($_REQUEST['field']=='email') {$pre="u";} if($_REQUEST['field']=='tel') {$pre="u";} if($_REQUEST['field']=='code') {$pre="m";} $AND=''; if (trim($_REQUEST['look'])!='') { $AND.="AND $pre.`".$_REQUEST['field']."` LIKE '%".trim($_REQUEST['look'])."%'"; } if ( ($_REQUEST['form']['date_start'] !='') && ($_REQUEST['form']['date_end'] !='')){ $dateStart =$_REQUEST['form']['date_start']; $dateEnd =$_REQUEST['form']['date_end']; $mkdate=ExtractDate($_REQUEST['form']['date_start']); $_REQUEST['form']['date_start'] = mktime(0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]); $mkdate=ExtractDate($_REQUEST['form']['date_end']); $_REQUEST['form']['date_end'] = mktime(0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]); $AND.=" AND (o.`mktime` BETWEEN '".$_REQUEST['form']['date_start']."' AND '".$_REQUEST['form']['date_end']."') "; } } // ============= // === Äàòà ==== // ============= echo""; // =========== Ãåíåðèì òàáëèöó =========== $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, m.*, m.product_id as mod_id, op.* , p.*, g.color as group_color FROM catalogs_orders as o LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id LEFT JOIN catalogs_products AS p ON p.id = m.product_id LEFT JOIN zlo_users as u ON u.id=o.user_id LEFT JOIN zlo_users_group as g ON g.id=u.group WHERE o.status='".$_GET['status']."' $AND GROUP BY o.id ORDER BY o.mktime DESC "; $pager['sql']= $sql; $pager=pagerGetRun($pager,10,15); // echo$pager['sql']; $result = mysql_query($pager['sql']) or die(mysql_error()); if (mysql_affected_rows()!=0) { // ============= // === Òàáñ ==== // ============= echo"
"; echo"
"; $sql0 = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)"; $result0 = mysql_query($sql0) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($rows=mysql_fetch_assoc($result0)) { // Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó $sql2 = " SELECT count(o.`id`) AS calc, o . * , m.*, m.product_id as mod_id, op.* , p.* FROM catalogs_orders as o LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id LEFT JOIN catalogs_products AS p ON p.id = m.product_id LEFT JOIN zlo_users as u ON u.id=o.user_id LEFT JOIN zlo_users_group as g ON g.id=u.group WHERE status='".$rows['id']."' $AND"; $result2 = mysql_query($sql2) or die(mysql_error()); $row2=mysql_fetch_assoc($result2); echo"
".$rows['title']."(".$row2['calc'].")
"; } } echo"
"; // =================== // === ÏÐÎÄÎËÆÅÍÈÅ === // =================== while ($order=mysql_fetch_assoc($result)) { echo"
"; echo"

Çàêàç #".$order['order_id']."
Äàòà: ".date('Y-m-d H:i:s',$order['mktime'])."

Êëèåíò
".$order['tel']." 
".$order['tel2']." 
".viewBook('zlo_users_group', $order['group'], 'id', 'name')." 
[Èñòîðèÿ çàêàçîâ]
Äîñòàâêà
".viewBook('zlo_book_delivery', $order['delivery'], 'id', 'title')." 
".$order['city']." 
".$order['address']." 
".$order['comment']." 
"; // Òàáëèöà òîâàðîâ echo"
Òîâàðû"; echo""; $sql3 = " SELECT o . * , m.*, m.product_id as mod_id, op.* , p.* FROM catalogs_orders AS o LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id LEFT JOIN catalogs_products AS p ON p.id = m.product_id WHERE o.id='".$order['order_id']."'"; $result3 = mysql_query($sql3) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($item=mysql_fetch_assoc($result3)) { { $i++; // íàëè÷èå òîâàðà $sql5 = "SELECT c.name as city, o.count FROM catalogs_keys_products_cities as o LEFT JOIN catalogs_cities as c ON o.city_id=c.id WHERE o.mod_code='".$item['code']."' AND o.count>0 "; $result5 = mysql_query($sql5) or die(mysql_error()); if (mysql_affected_rows()!=0) { $onStockDesc=''; while ($onStock=mysql_fetch_assoc($result5)) { $onStockDesc.=$onStock['city']."(".$onStock['count'].") "; } } else { $onStockDesc='íåò'; } echo""; } } } echo"
¹ Êîä Áðåíä Íàçâàíèå Ðàçìåð Öâåò Êîë. Öåíà Ñóììà Íàëè÷èå
$i . ".$item['code']." ".viewBook('catalogs_brends', $item['brend_id'], 'id', 'name')." ".$item['name']." ".$item['size']." ".$item['color']." ".$item['count']." ".$item['cine']." ".($item['cine']*$item['count'])." ".$onStockDesc."
Îáùàÿ ñóììà: ".$order['total']." ãðí.
"; echo"
"; // Ñìåíà ñòàòóñà if ($order['status']!=6) { echo "
Ïåðåâåñòè
"; } echo"
"; } echo"
"; } echo""; // === Pager echo"
".pagerGetShow($pager)."
"; } } // =============== // ===== show ==== // =============== if (isset($_GET['action']) && $_GET['action']=='show') { // Òàáñ echo"
"; $sql = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($row=mysql_fetch_assoc($result)) { // Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó $sql2 = "SELECT count(`id`) AS calc FROM catalogs_orders WHERE status='".$row['id']."' AND user_id=".$_GET['user'].""; $result2 = mysql_query($sql2) or die(mysql_error()); $row2=mysql_fetch_assoc($result2); echo"
".$row['title']."(".$row2['calc'].")
"; } } echo"
"; if(!isset($_GET['status'])) {$_GET['status']=1;} // =========== Ãåíåðèì òàáëèöó =========== $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id FROM catalogs_orders as o LEFT JOIN zlo_users as u on u.id=o.user_id WHERE u.id=".$_GET['user']." AND o.status=".$_GET['status']." ORDER BY mktime DESC "; $pager['sql']= $sql; $pager=pagerGetRun($pager,10,15); //echo$pager['sql']; $result = mysql_query($pager['sql']) or die(mysql_error()); if (mysql_affected_rows()!=0) { // =================== // === ÏÐÎÄÎËÆÅÍÈÅ === // =================== while ($order=mysql_fetch_assoc($result)) { echo"
"; echo"

Çàêàç #".$order['order_id']."
Äàòà: ".date('Y-m-d H:i:s',$order['mktime'])."

Êëèåíò
".$order['tel']." 
".$order['tel2']." 
".viewBook('zlo_users_group', $order['group'], 'id', 'name')." 
[Èñòîðèÿ çàêàçîâ]
Äîñòàâêà
".viewBook('zlo_book_delivery', $order['delivery'], 'id', 'title')." 
".$order['city']." 
".$order['address']." 
".$order['comment']." 
"; // Òàáëèöà òîâàðîâ echo"
Òîâàðû"; echo""; $sql3 = " SELECT o . * , m.*, m.product_id as mod_id, op.* , p.* FROM catalogs_orders AS o LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id LEFT JOIN catalogs_products AS p ON p.id = m.product_id WHERE o.id='".$order['order_id']."'"; $result3 = mysql_query($sql3) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($item=mysql_fetch_assoc($result3)) { { $i++; // íàëè÷èå òîâàðà $sql5 = "SELECT c.name as city, o.count FROM catalogs_keys_products_cities as o LEFT JOIN catalogs_cities as c ON o.city_id=c.id WHERE o.mod_code='".$item['code']."' AND o.count>0 "; $result5 = mysql_query($sql5) or die(mysql_error()); if (mysql_affected_rows()!=0) { $onStockDesc=''; while ($onStock=mysql_fetch_assoc($result5)) { $onStockDesc.=$onStock['city']."(".$onStock['count'].") "; } } else { $onStockDesc='íåò'; } echo""; } } } echo"
¹ Êîä Áðåíä Íàçâàíèå Ðàçìåð Öâåò Êîë. Öåíà Ñóììà Íàëè÷èå
$i . ".$item['code']." ".viewBook('catalogs_brends', $item['brend_id'], 'id', 'name')." ".$item['name']." ".$item['size']." ".$item['color']." ".$item['count']." ".$item['cine']." ".($item['cine']*$item['count'])." ".$onStockDesc."
Îáùàÿ ñóììà: ".$order['total']." ãðí.
"; echo"
"; } // === Pager echo"
".pagerGetShow($pager)."
"; } } // =============== // ===== edit ==== // =============== if (isset($_GET['action']) && $_GET['action']=='edit') { // Òàáñ if (!isset($_GET['status'])) {$status=1;} else {$status=$_GET['status'];} echo"
"; $sql = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($row=mysql_fetch_assoc($result)) { // Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó $sql2 = "SELECT count(`id`) AS calc FROM catalogs_orders WHERE status='".$row['id']."' AND user_id=".$_GET['user'].""; $result2 = mysql_query($sql2) or die(mysql_error()); $row2=mysql_fetch_assoc($result2); echo"
".$row['title']."(".$row2['calc'].")
"; } } echo"
"; // =========== Ãåíåðèì òàáëèöó =========== $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, o.adress as address, g.color FROM catalogs_orders as o LEFT JOIN zlo_users as u ON u.id=o.user_id LEFT JOIN zlo_users_group as g ON g.id=u.group WHERE o.id='".$_GET['order']."'"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $order=mysql_fetch_assoc($result); echo"
"; echo"
"; echo"
Çàêàç #".$order['order_id']." Cóììà: ".$order['total']." ãðí.
".date('Y-m-d H:i:s')."
 
 
 
 
"; echo "
"; echo "
 
 
"; echo"
"; // Òàáëèöà òîâàðîâ $sql3 = "SELECT * FROM catalogs_orders_products WHERE `order_id`='".$order['order_id']."' "; $result3 = mysql_query($sql3) or die(mysql_error()); if (mysql_affected_rows()!=0) { $i=0; echo"
Òîâàðû
¹
Êîä
Áðåíä
Íàéìåíîâàíèå
Ðàçìåð
Öâåò
Êîë.
Öåíà
Ñóììà
Íàëè÷èå
1
 
 
 
 
0
0
"; while ($item_id=mysql_fetch_assoc($result3)) { $i++; // Èíôî î òîâàðå $sql4 = "SELECT m.*, m.id as mod_id, p.* from catalogs_modifications as m LEFT JOIN catalogs_products as p ON p.id=m.product_id WHERE m.id='".$item_id['product_id']."' "; $result4 = mysql_query($sql4) or die(mysql_error()); if (mysql_affected_rows()!=0) { $item=mysql_fetch_assoc($result4); // íàëè÷èå òîâàðà $sql5 = "SELECT c.name as city, o.count FROM catalogs_keys_products_cities as o LEFT JOIN catalogs_cities as c ON o.city_id=c.id WHERE o.mod_code='".$item['code']."' AND o.count>0 "; $result5 = mysql_query($sql5) or die(mysql_error()); if (mysql_affected_rows()!=0) { $onStockDesc=''; while ($onStock=mysql_fetch_assoc($result5)) { $onStockDesc.=$onStock['city']."(".$onStock['count'].") "; } } else { $onStock='íåò';} echo"
$i
".viewBook('catalogs_brends', $item['brend_id'], 'id', 'name')." 
".$item['name']." 
".$item['size']." 
".$item['color']." 
".$item['cine']."
".($item['cine']*$item_id['count'])."
$onStockDesc
"; } } echo"
Âñåãî: 0 òîâàðîâ íà 0 ãðí.
"; echo"
"; // Äëÿ XML ôàéëà $dateFromDate=ExtractDate((date('Y-m-d H:i:s',$order['mktime']))); // Ñìåíà ñòàòóñà if ($order['status']!=6) { echo "
Ïåðåâåñòè
"; } echo""; echo"
"; echo"
"; if (is_file($_SERVER['DOCUMENT_ROOT']."/xml/".$dateFromDate[0]."/".$dateFromDate[1]."/order_".$order['order_id'].".xml")) { echo"
"; } echo"
"; } echo"
"; echo""; } } else { echo"

Ïóñòî

";} // ===================== // ===== javascript ==== // ===================== echo" "; echo" "; } // ============= // ==== add ==== // ============= if (isset($_GET['action']) && $_GET['action']=='add') { if (isset($_POST['user'])) {} $user=array(); if(isset($_GET['user'])) { $sql = "SELECT * FROM zlo_users WHERE id='".$_GET['user']."'"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $user=mysql_fetch_assoc($result); } } else { if(isset($_POST)) {$user=$_POST['user'];} } echo"
"; echo"
"; echo"
"; echo"
Íîâûé çàêàç
".date('Y-m-d H:i:s')."
"; if(!isset($_GET['user'])) { echo"
Ïî óìîë÷àíèþ
"; } if(isset($_GET['user'])) { $readonly='readonly="readonly"'; $disabled='disabled="disabled"'; } else {$readonly='';$disabled='';} echo"
 
 
 
 
"; echo "
"; echo "
 
 
"; // ãðóïïà echo" "; echo ""; // hidden if (isset($_GET['user'])) { echo""; } echo""; echo"
"; echo"
Òîâàðû
¹
Êîä
Áðåíä
Íàéìåíîâàíèå
Ðàçìåð
Öâåò
Êîë.
Öåíà
Ñóììà
Íàëè÷èå
1
 
 
 
 
0
0
1
 
 
 
 
0
0
Âñåãî: 0 òîâàðîâ íà 0 ãðí.
"; // ===================== // ===== javascript ==== // ===================== echo" "; echo" "; } // ============= // === print === // ============= if (isset($_GET['action']) && $_GET['action']=='print') { // =========== Ãåíåðèì òàáëèöó =========== if (!isset($_GET['status'])) {$_GET['status']=1;} $sql = "SELECT o.*,u.*, o.id as order_id FROM catalogs_orders as o RIGHT JOIN zlo_users as u on u.id=o.user_id WHERE o.id='".$_GET['order_id']."' "; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $view=''; $view.="
"; $order=mysql_fetch_assoc($result); $view.="
Çàêàç # ".$order['order_id']."
Äàòà: ".date('Y-m-d H:i:s',$order['mktime'])."
Êëèåíò: ".$order['username']."
Òåë: ".$order['tel']."
Äîï. òåë: ".$order['tel2']."
Äîñòàâêà: ".viewBook('zlo_book_delivery', $order['delivery'], 'id', 'title')."
Ãîðîä: ".$order['city']."
Àäðåñ: ".$order['address']."
Êîìåíòàðèé: ".$order['comment']."
"; // Òàáëèöà òîâàðîâ $sql3 = "SELECT * FROM catalogs_orders_products WHERE `order_id`='".$order['order_id']."' "; $result3 = mysql_query($sql3) or die(mysql_error()); if (mysql_affected_rows()!=0) { $i=0; $view.="
"; while ($item_id=mysql_fetch_assoc($result3)) { $i++; $sql4 = "SELECT * FROM catalogs_modifications as m LEFT JOIN catalogs_products as p ON p.id=m.product_id WHERE m.id='".$item_id['product_id']."' "; $result4 = mysql_query($sql4) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($item=mysql_fetch_assoc($result4)) { $view.="
¹ $i .
Êîä ".$item['code']."
Áðåíä ".viewBook('catalogs_brends', $item['brend_id'], 'id', 'name')."
Íàçâàíèå ".$item['name']."
Ðàçìåð ".$item['size']."
Öâåò ".$item['color']."
Êîë. ".$item_id['count']."
Öåíà ".$item['cine']."
Ñóììà ".($item['cine']*$item_id['count'])."
"; } } } $view.="Îáùàÿ ñóììà: ".$order['total']." ãðí.
"; } $view.="
"; // Âûâîäèì 2 ðàçà echo $view; echo "
"; echo $view; } } ?>