<?php/*  $Id: order.php,v 1.33 2003/06/09 22:25:35 hpdl Exp $  osCommerce, Open Source E-Commerce Solutions  http://www.oscommerce.com  Copyright (c) 2003 osCommerce  Released under the GNU General Public License*/  class order {    var $info, $totals, $products, $customer, $delivery, $content_type;    function order($order_id = '') {      $this->info = array();      $this->totals = array();      $this->products = array();      $this->customer = array();      $this->delivery = array();      if (tep_not_null($order_id)) {        $this->query($order_id);      } else {        $this->cart();      }    }    function query($order_id) {      global $languages_id;      $order_id = tep_db_prepare_input($order_id);      $order_query = tep_db_query("select customers_id, customers_name, customers_company, customers_street_address, customers_suburb, customers_city, customers_postcode, customers_state, customers_country, customers_telephone, customers_email_address, customers_address_format_id, delivery_name, delivery_company, delivery_street_address, delivery_suburb, delivery_city, delivery_postcode, delivery_state, delivery_country, delivery_address_format_id, billing_name, billing_company, billing_street_address, billing_suburb, billing_city, billing_postcode, billing_state, billing_country, billing_address_format_id, payment_method, cc_type, cc_owner, cc_number, cc_expires, currency, currency_value, date_purchased, orders_status, last_modified from " . TABLE_ORDERS . " where orders_id = '" . (int)$order_id . "'");      $order = tep_db_fetch_array($order_query);      $totals_query = tep_db_query("select title, text from " . TABLE_ORDERS_TOTAL . " where orders_id = '" . (int)$order_id . "' order by sort_order");      while ($totals = tep_db_fetch_array($totals_query)) {        $this->totals[] = array('title' => $totals['title'],                                'text' => $totals['text']);      }      $order_total_query = tep_db_query("select text from " . TABLE_ORDERS_TOTAL . " where orders_id = '" . (int)$order_id . "' and class = 'ot_total'");      $order_total = tep_db_fetch_array($order_total_query);      $shipping_method_query = tep_db_query("select title from " . TABLE_ORDERS_TOTAL . " where orders_id = '" . (int)$order_id . "' and class = 'ot_shipping'");      $shipping_method = tep_db_fetch_array($shipping_method_query);      $order_status_query = tep_db_query("select orders_status_name from " . TABLE_ORDERS_STATUS . " where orders_status_id = '" . $order['orders_status'] . "' and language_id = '" . (int)$languages_id . "'");      $order_status = tep_db_fetch_array($order_status_query);      $this->info = array('currency' => $order['currency'],                          'currency_value' => $order['currency_value'],                          'payment_method' => $order['payment_method'],                          'cc_type' => $order['cc_type'],                          'cc_owner' => $order['cc_owner'],                          'cc_number' => $order['cc_number'],                          'cc_expires' => $order['cc_expires'],                          'date_purchased' => $order['date_purchased'],                          'orders_status' => $order_status['orders_status_name'],                          'last_modified' => $order['last_modified'],                          'total' => strip_tags($order_total['text']),                          'shipping_method' => ((substr($shipping_method['title'], -1) == ':') ? substr(strip_tags($shipping_method['title']), 0, -1) : strip_tags($shipping_method['title'])));      $this->customer = array('id' => $order['customers_id'],                              'name' => $order['customers_name'],                              'company' => $order['customers_company'],                              'street_address' => $order['customers_street_address'],                              'suburb' => $order['customers_suburb'],                              'city' => $order['customers_city'],                              'postcode' => $order['customers_postcode'],                              'state' => $order['customers_state'],                              'country' => $order['customers_country'],                              'format_id' => $order['customers_address_format_id'],                              'telephone' => $order['customers_telephone'],                              'email_address' => $order['customers_email_address']);      $this->delivery = array('name' => $order['delivery_name'],                              'company' => $order['delivery_company'],                              'street_address' => $order['delivery_street_address'],                              'suburb' => $order['delivery_suburb'],                              'city' => $order['delivery_city'],                              'postcode' => $order['delivery_postcode'],                              'state' => $order['delivery_state'],                              'country' => $order['delivery_country'],                              'format_id' => $order['delivery_address_format_id']);      if (empty($this->delivery['name']) && empty($this->delivery['street_address'])) {        $this->delivery = false;      }      $this->billing = array('name' => $order['billing_name'],                             'company' => $order['billing_company'],                             'street_address' => $order['billing_street_address'],                             'suburb' => $order['billing_suburb'],                             'city' => $order['billing_city'],                             'postcode' => $order['billing_postcode'],                             'state' => $order['billing_state'],                             'country' => $order['billing_country'],                             'format_id' => $order['billing_address_format_id']);      $index = 0;      $orders_products_query = tep_db_query("select orders_products_id, products_id, products_name, products_model, products_price, products_tax, products_quantity, final_price from " . TABLE_ORDERS_PRODUCTS . " where orders_id = '" . (int)$order_id . "'");      while ($orders_products = tep_db_fetch_array($orders_products_query)) {        $this->products[$index] = array('qty' => $orders_products['products_quantity'],	                                'id' => $orders_products['products_id'],                                        'name' => $orders_products['products_name'],                                        'model' => $orders_products['products_model'],                                        'tax' => $orders_products['products_tax'],                                        'price' => $orders_products['products_price'],                                        'final_price' => $orders_products['final_price']);        $subindex = 0;        $attributes_query = tep_db_query("select products_options, products_options_values, options_values_price, price_prefix from " . TABLE_ORDERS_PRODUCTS_ATTRIBUTES . " where orders_id = '" . (int)$order_id . "' and orders_products_id = '" . (int)$orders_products['orders_products_id'] . "'");        if (tep_db_num_rows($attributes_query)) {          while ($attributes = tep_db_fetch_array($attributes_query)) {            $this->products[$index]['attributes'][$subindex] = array('option' => $attributes['products_options'],                                                                     'value' => $attributes['products_options_values'],                                                                     'prefix' => $attributes['price_prefix'],                                                                     'price' => $attributes['options_values_price']);            $subindex++;          }        }        $this->info['tax_groups']["{$this->products[$index]['tax']}"] = '1';        $index++;      }    }    function cart() {      global $customer_id, $sendto, $billto, $cart, $languages_id, $currency, $currencies, $shipping, $payment;      $this->content_type = $cart->get_content_type();      $customer_address_query = tep_db_query("select c.customers_firstname, c.customers_lastname, c.customers_telephone, c.customers_email_address, ab.entry_company, ab.entry_street_address, ab.entry_suburb, ab.entry_postcode, ab.entry_city, ab.entry_zone_id, z.zone_name, co.countries_id, co.countries_name, co.countries_iso_code_2, co.countries_iso_code_3, co.address_format_id, ab.entry_state from " . TABLE_CUSTOMERS . " c, " . TABLE_ADDRESS_BOOK . " ab left join " . TABLE_ZONES . " z on (ab.entry_zone_id = z.zone_id) left join " . TABLE_COUNTRIES . " co on (ab.entry_country_id = co.countries_id) where c.customers_id = '" . (int)$customer_id . "' and ab.customers_id = '" . (int)$customer_id . "' and c.customers_default_address_id = ab.address_book_id");