// Ïîäêëþ÷åíèå
include_once($_SERVER['DOCUMENT_ROOT']."/account/admin/autorizator.php");
// ======================================
// ======================================
// ============ Îáðàáîòêà ===============
// ======================================
// ======================================
// =============
// == status ===
// =============
if (isset($_POST['action']) && $_POST['action']=='status') {
$sql = "UPDATE catalogs_orders SET status='".$_POST['status']."' WHERE `id`='".$_POST['order_id']."'";
$result = mysql_query($sql) or die(mysql_error());
}
// ====================
// ===== order ========
// ====================
// ==============
// ==== edit ====
// ==============
if (isset($_POST['send']) && $_POST['send']=='edit-order') {
$error='';
$error[] = ValidFormData($_POST['user']['email'],'email','email');
$error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require');
$error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require');
$error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile');
$error[] = ValidFormData($_POST['user']['username'],'èìÿ','require');
$alert=implode('\r\n',$error);
$mass=array_filter($error);
if (empty($mass)) {
$summary=0;
// Ïðîâåðÿåì åñòü ëè óæå â çàêàçàõ
$sql="SELECT *, product_id as mod_id from catalogs_orders_products WHERE order_id='".$_POST['order_id']."'";
$result = mysql_query($sql) or die(mysql_error());
if(mysql_affected_rows()!=0){
while($item=mysql_fetch_assoc($result)) {
$ordered[]=$item['mod_id'];
}
}
// ===========================================
// ======= Ïðîâåðÿåì íà èçìåíåíèå ===========
// ===========================================
$ChangesOfOrder = ChangesOfMass($_POST['item']['mod_id'],$ordered);
// ==========
// == same ==
// ==========
if (isset($ChangesOfOrder['same'])) {
$mass=array_filter($ChangesOfOrder['same']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['same'] as $value) {
// Óçíàåì key(èíäåêñ) â ìàññèâå
$i=array_keys($_POST['item']['mod_id'], $value); $i=$i[0];
// Îáíîâëÿåì êîëè÷åñòâî
$sql2 = "UPDATE catalogs_orders_products SET `count`='".$_POST['item']['quant'][$i]."' WHERE order_id='".$_POST['order_id']."' AND product_id='".$_POST['item']['mod_id'][$i]."'";
$result2 = mysql_query($sql2) or die(mysql_error());
// Ñóììà âñåãî çàêàçà
$summary=$summary+($_POST['item']['quant'][$i]*$_POST['item']['price'][$i]);
}
}
}
// ==========
// === add ==
// ==========
if (isset($ChangesOfOrder['add'])) {
$mass=array_filter($ChangesOfOrder['add']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['add'] as $value) {
// Óçíàåì key(èíäåêñ) â ìàññèâå
$i=array_keys($_POST['item']['mod_id'], $value); $i=$i[0];
// Äîáàâëÿåì òîâàðû
$sql2=sprintf("INSERT INTO catalogs_orders_products (order_id,product_id,product_cine_id,count) VALUES (%s,%s,%s,%s)",
GetSQLValueString($_POST['order_id'], "text"),
GetSQLValueString($_POST['item']['mod_id'][$i], "text"),
GetSQLValueString($_POST['item']['price'][$i], "text"),
GetSQLValueString($_POST['item']['quant'][$i], "text"));
$result2 = mysql_query($sql2) or die(mysql_error());
// Ñóììà âñåãî çàêàçà
$summary=$summary+($_POST['item']['quant'][$i]*$_POST['item']['price'][$i]);
}
}
}
// ==========
// == del ===
// ==========
if (isset($ChangesOfOrder['del'])) {
$mass=array_filter($ChangesOfOrder['del']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['del'] as $value) {
// Äîáàâëÿåì òîâàðû
$sql2="DELETE FROM catalogs_orders_products WHERE order_id='".$_POST['order_id']."' AND product_id='".$value."'";
$result2 = mysql_query($sql2) or die(mysql_error());
}
}
}
// ===========
// == ÂÑÅÃÎ ==
// ===========
if ($summary>0) {
// Îáíîâëÿåì äàííûå çàêàçà
$sql2=sprintf("UPDATE catalogs_orders SET city=%s,adress=%s,comment=%s,total=%s WHERE id='".$_POST['order_id']."'",
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['comment'], "text"),
GetSQLValueString($summary, "text"));
$result2 = mysql_query($sql2) or die(mysql_error());
eMailing('xml',$_POST['user_id'], $_POST['order_id']);
} else {
$sql2="DELETE FROM catalogs_orders WHERE id='".$_POST['order_id']."'";
$result2 = mysql_query($sql2) or die(mysql_error());
}
GoBack(1);
} else {
echo"";
}
}
// ==============
// ==== add =====
// ==============
if (isset($_POST['send']) && $_POST['send']=='add-order') {
// Ïðîâåðÿåì äûáèë ëè àäìèí
$debil==false;
for($i=1; $i<=count($_POST['item']); $i++) {
if(isset($_POST['item']['mod_id'][$i]) && $_POST['item']['mod_id'][$i]=='') { $debil=true; }
}
if( $debil==false) {
// $error='';
// $error[] = ValidFormData($_POST['user']['email'],'email','email');
// $error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require');
// $error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require');
// $error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile');
// $error[] = ValidFormData($_POST['user']['username'],'èìÿ','require');
// $alert=implode('\r\n',$error);
// $mass=array_filter($error);
// if (empty($mass)) {
// Ïðîâåðÿåì ñóùåñòâóåò ëè ïîëüçîâàòåëü
// $sql="SELECT * FROM zlo_users WHERE email='".$_POST['user']['email']."' ";
// $result = mysql_query($sql) or die(mysql_error());
// if (mysql_affected_rows()!=0) {
// }
$time=mktime();
$date=date('Y-m-d H:i:s',$time);
// Åñëè ñîçäàåì íîâîãî ïîëüçîâàòåëü
if($_POST['user']['user_id']=='' || $_POST['user']['user_id']==0 || $_POST['user']['user_id']=='0') {
if (strpos($_POST['user']['email'],"@user.com")) {
$_POST['user']['group']=1;
} else {
$_POST['user']['group']=2;
}
// Äîáàâëÿåì ïîëüçîâàòåëÿ
$pass=generate_password(6);
$sql = sprintf("INSERT INTO zlo_users (pass, email, city, address, tel, registered, username, tel2, `group`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($pass, "text"),
GetSQLValueString($_POST['user']['email'], "text"),
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['tel'], "text"),
GetSQLValueString($date, "text"),
GetSQLValueString($_POST['user']['username'], "text"),
GetSQLValueString($_POST['user']['tel2'], "text"),
GetSQLValueString($_POST['user']['group'], "int"));
$result = mysql_query($sql) or die(mysql_error());
// Óçíàåì ID ïîëüçîâàòåëÿ
$sql="SELECT id FROM zlo_users WHERE registered='$date' AND tel='".$_POST['user']['tel']."'";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$user=mysql_fetch_assoc($result);
// Øëåì ïèñüìà
if($user['group']!=1) {
eMailing('reg',$user['id']);
}
$_POST['user']['user_id']=$user['id'];
} else { echo "íåò ïîëüçîâàòåëÿ";}
}
// Äîáàâëÿåì çàêàç
$sql=sprintf("INSERT INTO catalogs_orders (user_id,name,email,city,adress,phone,phonemob,comment,mktime,total,status) VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,1)",
GetSQLValueString($_POST['user']['user_id'], "text"),
GetSQLValueString($_POST['user']['username'], "text"),
GetSQLValueString($_POST['user']['email'], "text"),
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['tel'], "text"),
GetSQLValueString($_POST['user']['tel2'], "text"),
GetSQLValueString($_POST['user']['comment'], "text"),
GetSQLValueString($time, "text"),
GetSQLValueString($_POST['summary'], "text"));
$result = mysql_query($sql) or die(mysql_error());
// Óçíàåì íîìåð çàêàçà
$sql="SELECT id FROM catalogs_orders WHERE mktime='$time' AND user_id='".$_POST['user']['user_id']."'";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$order=mysql_fetch_assoc($result);
} else { echo "Îøèáêà";}
// Äîáàâëÿåì òîâàðû
for($i=0; $i<=count($_POST['item']); $i++) {
if($_POST['item']['code'][$i]!=''){
$sql=sprintf("INSERT INTO catalogs_orders_products (order_id,product_id,product_cine_id,count) VALUES (%s,%s,%s,%s)",
GetSQLValueString($order['id'], "text"),
GetSQLValueString($_POST['item']['mod_id'][$i], "text"),
GetSQLValueString($_POST['item']['price'][$i], "text"),
GetSQLValueString($_POST['item']['quant'][$i], "text"));
$result = mysql_query($sql) or die(mysql_error());
}
}
// Øëåì ïèñüìà
if ($user['group']!=1) {
eMailing('order-new',$_POST['user']['user_id'], $order['id']);
}
echo "";
// } else {
// echo"";
// }
} else {
echo"";
}
}
// =================
// ==== NOTIFY =====
// =================
// ==============
// == changed ===
// ==============
if (isset($_GET['notify']) && $_GET['notify']=='order-changed') {
eMailing('order-changed',$_GET['user'], $_GET['order']);
echo "";
}
// ======================================
// ======================================
// ============== Âûâîä =================
// ======================================
// ======================================
// =============
// ==== all ====
// =============
if (!isset($_GET['action'])) {
echo"";
echo"Äîáàâèòü";
if (!isset($_GET['status'])) {$_GET['status']=1;}
if(isset($_GET['user'])) {$AND="AND u.id=".$_GET['user'];} else {$AND='';}
// =============
// === Ïîèñê ===
// =============
$th=array("id"=>"íîìåð çêàçà","username"=>"êëèåíò", "email"=>"email", "tel"=>"òåëåôîí", "code"=>"øòðèõêîä");
// Åñëè ñóùåñòâóåò Ïîèñê
if (isset($_REQUEST['search'])) {
if($_REQUEST['field']=='id') {$pre="o";}
if($_REQUEST['field']=='username') {$pre="u";}
if($_REQUEST['field']=='email') {$pre="u";}
if($_REQUEST['field']=='tel') {$pre="u";}
if($_REQUEST['field']=='code') {$pre="m";}
$AND='';
if (trim($_REQUEST['look'])!='') {
$AND.="AND $pre.`".$_REQUEST['field']."` LIKE '%".trim($_REQUEST['look'])."%'";
}
if ( ($_REQUEST['form']['date_start'] !='') && ($_REQUEST['form']['date_end'] !='')){
$dateStart =$_REQUEST['form']['date_start'];
$dateEnd =$_REQUEST['form']['date_end'];
$mkdate=ExtractDate($_REQUEST['form']['date_start']);
$_REQUEST['form']['date_start'] = mktime(0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]);
$mkdate=ExtractDate($_REQUEST['form']['date_end']);
$_REQUEST['form']['date_end'] = mktime(0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]);
$AND.=" AND (o.`mktime` BETWEEN '".$_REQUEST['form']['date_start']."' AND '".$_REQUEST['form']['date_end']."') ";
}
}
// =============
// === Äàòà ====
// =============
echo"
";
// =========== Ãåíåðèì òàáëèöó ===========
$sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, m.*, m.product_id as mod_id, op.* , p.*, g.color as group_color
FROM catalogs_orders as o
LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id
LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id
LEFT JOIN catalogs_products AS p ON p.id = m.product_id
LEFT JOIN zlo_users as u ON u.id=o.user_id
LEFT JOIN zlo_users_group as g ON g.id=u.group
WHERE o.status='".$_GET['status']."' $AND GROUP BY o.id ORDER BY o.mktime DESC ";
$pager['sql']= $sql;
$pager=pagerGetRun($pager,10,15);
// echo$pager['sql'];
$result = mysql_query($pager['sql']) or die(mysql_error());
if (mysql_affected_rows()!=0) {
// =============
// === Òàáñ ====
// =============
echo"";
echo"
";
$sql0 = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)";
$result0 = mysql_query($sql0) or die(mysql_error());
if (mysql_affected_rows()!=0) {
while ($rows=mysql_fetch_assoc($result0)) {
// Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó
$sql2 = "
SELECT count(o.`id`) AS calc, o . * , m.*, m.product_id as mod_id, op.* , p.*
FROM catalogs_orders as o
LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id
LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id
LEFT JOIN catalogs_products AS p ON p.id = m.product_id
LEFT JOIN zlo_users as u ON u.id=o.user_id
LEFT JOIN zlo_users_group as g ON g.id=u.group
WHERE status='".$rows['id']."' $AND";
$result2 = mysql_query($sql2) or die(mysql_error());
$row2=mysql_fetch_assoc($result2);
echo"
";
echo"";
// Ñìåíà ñòàòóñà
if ($order['status']!=6) {
echo "
Ïåðåâåñòè
";
}
echo"
";
}
echo"";
// === Pager
echo"
".pagerGetShow($pager)."
";
}
}
// ===============
// ===== show ====
// ===============
if (isset($_GET['action']) && $_GET['action']=='show') {
// Òàáñ
echo"
";
$sql = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
while ($row=mysql_fetch_assoc($result)) {
// Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó
$sql2 = "SELECT count(`id`) AS calc FROM catalogs_orders WHERE status='".$row['id']."' AND user_id=".$_GET['user']."";
$result2 = mysql_query($sql2) or die(mysql_error());
$row2=mysql_fetch_assoc($result2);
echo"
".$row['title']."(".$row2['calc'].")
";
}
}
echo"
";
if(!isset($_GET['status'])) {$_GET['status']=1;}
// =========== Ãåíåðèì òàáëèöó ===========
$sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id
FROM catalogs_orders as o
LEFT JOIN zlo_users as u on u.id=o.user_id
WHERE u.id=".$_GET['user']." AND o.status=".$_GET['status']." ORDER BY mktime DESC ";
$pager['sql']= $sql;
$pager=pagerGetRun($pager,10,15); //echo$pager['sql'];
$result = mysql_query($pager['sql']) or die(mysql_error());
if (mysql_affected_rows()!=0) {
// ===================
// === ÏÐÎÄÎËÆÅÍÈÅ ===
// ===================
while ($order=mysql_fetch_assoc($result)) {
echo"
";
$sql = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
while ($row=mysql_fetch_assoc($result)) {
// Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó
$sql2 = "SELECT count(`id`) AS calc FROM catalogs_orders WHERE status='".$row['id']."' AND user_id=".$_GET['user']."";
$result2 = mysql_query($sql2) or die(mysql_error());
$row2=mysql_fetch_assoc($result2);
echo"
".$row['title']."(".$row2['calc'].")
";
}
}
echo"
";
// =========== Ãåíåðèì òàáëèöó ===========
$sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, o.adress as address, g.color
FROM catalogs_orders as o
LEFT JOIN zlo_users as u ON u.id=o.user_id
LEFT JOIN zlo_users_group as g ON g.id=u.group
WHERE o.id='".$_GET['order']."'";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$order=mysql_fetch_assoc($result);
echo"
";
echo"
";
echo"
";
echo"
";
echo"
";
// =====================
// ===== javascript ====
// =====================
echo"
";
echo"
";
}
// =============
// === print ===
// =============
if (isset($_GET['action']) && $_GET['action']=='print') {
// =========== Ãåíåðèì òàáëèöó ===========
if (!isset($_GET['status'])) {$_GET['status']=1;}
$sql = "SELECT o.*,u.*, o.id as order_id FROM catalogs_orders as o
RIGHT JOIN zlo_users as u on u.id=o.user_id
WHERE o.id='".$_GET['order_id']."' ";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$view='';
$view.="
";
// Òàáëèöà òîâàðîâ
$sql3 = "SELECT * FROM catalogs_orders_products
WHERE `order_id`='".$order['order_id']."' ";
$result3 = mysql_query($sql3) or die(mysql_error());
if (mysql_affected_rows()!=0) { $i=0;
$view.="
";
while ($item_id=mysql_fetch_assoc($result3)) { $i++;
$sql4 = "SELECT * FROM catalogs_modifications as m
LEFT JOIN catalogs_products as p
ON p.id=m.product_id
WHERE m.id='".$item_id['product_id']."' ";
$result4 = mysql_query($sql4) or die(mysql_error());
if (mysql_affected_rows()!=0) {
while ($item=mysql_fetch_assoc($result4)) {
$view.="