<?
ini_set("session.save_path","/home/56/17/3001756/web/.sessions") or die("Could not specify path");
//ini_set("session.save_path","c:/php/tmp") or die("Could not specify path");
session_start(); 
// setting up the web root and server root for
// this shopping cart application
ob_start();
$thisFile = str_replace('\\', '/', __FILE__);
$docRoot = $_SERVER['DOCUMENT_ROOT'];

$webRoot  = str_replace(array($docRoot, 'library/config.php'), '', $thisFile);
$srvRoot  = str_replace('library/config.php', '', $thisFile);

define('WEB_ROOT', $webRoot);
define('SRV_ROOT', $srvRoot);

define('LIMIT_PRODUCT_WIDTH', true);
// maximum width for all advert images
define('MAX_PRODUCT_IMAGE_WIDTH', 300);
define('THUMBNAIL_WIDTH', 75);

//$siteLoc = 'http://localhost/sevenFactor/';
$siteLoc = 'http://www.ilocano.net/seven/';
define('siteHREF', $siteLoc);

//$site = WEB_ROOT;
$site = 'http://www.ilocano.net/seven/';
define('siteURL', $site);

//require_once 'funcs.php';
//$shopConfig = getShopConfig();
?><?

function convertDate($strDate) {
	$strMon = substr($strDate, 5, 2);
	$strDay = substr($strDate, 8, 2);
	$strYr = substr($strDate, 0, 4);
	$literal = date("l, F j, Y", mktime(0,0,0,$strMon,$strDay,$strYr));
	return $literal;
}

function prepDate($theDate) {
	foreach($theDate as $key => $value) {
		switch($j) {
			case 0:
				if($value < 10) {
					$xsec = "0".$value;
				} else {
					$xsec = $value;
				}
				break;
			case 1:
				if($value < 10) {
					$xmin = "0".$value;
				} else {
					$xmin = $value;
				}
				break;
			case 2:
				if($value < 10) {
					$xhrs = "0".$value;
				} else {
					$xhrs = $value;
				}
				break;
			case 3:
				if($value < 10) {
					$xday = "0".$value;
				} else {
					$xday = $value;
				}
				break;
			case 5:
				if($value < 10) {
					$xmon = "0".$value;
				} else {
					$xmon = $value;
				}
				break;
			case 6:
				$xyr = $value;
				break;
		}
		$j++;
	}
	$entryDate = $xyr."-".$xmon."-".$xday." ".$xhrs.":".$xmin.":".$xsec;
	return $entryDate;
}

/*
	Create a thumbnail of $srcFile and save it to $destFile.
	The thumbnail will be $width pixels.
*/
function createThumbnail($srcFile, $destFile, $width, $quality = 75)
{
	$thumbnail = '';
	
	if (file_exists($srcFile)  && isset($destFile))
	{
		$size        = getimagesize($srcFile);
		$w           = number_format($width, 0, ',', '');
		$h           = number_format(($size[1] / $size[0]) * $width, 0, ',', '');
		
		$thumbnail =  copyImage($srcFile, $destFile, $w, $h, $quality);
	}
	
	// return the thumbnail file name on sucess or blank on fail
	return basename($thumbnail);
}

/*
	Copy an image to a destination file. The destination
	image size will be $w X $h pixels
*/
function copyImage($srcFile, $destFile, $w, $h, $quality = 75)
{
    $tmpSrc     = pathinfo(strtolower($srcFile));
    $tmpDest    = pathinfo(strtolower($destFile));
    $size       = getimagesize($srcFile);

    if ($tmpDest['extension'] == "gif" || $tmpDest['extension'] == "jpg")
    {
       $destFile  = substr_replace($destFile, 'jpg', -3);
       $dest      = imagecreatetruecolor($w, $h);
       imageantialias($dest, TRUE);
    } elseif ($tmpDest['extension'] == "png") {
       $dest = imagecreatetruecolor($w, $h);
       imageantialias($dest, TRUE);
    } else {
      return false;
    }

    switch($size[2])
    {
       case 1:       //GIF
           $src = imagecreatefromgif($srcFile);
           break;
       case 2:       //JPEG
           $src = imagecreatefromjpeg($srcFile);
           break;
       case 3:       //PNG
           $src = imagecreatefrompng($srcFile);
           break;
       default:
           return false;
           break;
    }

    imagecopyresampled($dest, $src, 0, 0, 0, 0, $w, $h, $size[0], $size[1]);

    switch($size[2])
    {
       case 1:
       case 2:
           imagejpeg($dest,$destFile, $quality);
           break;
       case 3:
           imagepng($dest,$destFile);
    }
    return $destFile;

}

function generatePwd () {
	$str = '';
	$str .= rand(0,9);
	$upper = chr(rand(65, 90));
	$str .= $upper;
	$num = rand(0,9);
	$str .= $num;
	$lower = chr(rand(97, 122));
	$str .= $lower;
	$num = rand(0,9);
	$str .= $num;
	$upper = chr(rand(65, 90));
	$str .= $upper;
	$lower = chr(rand(97, 122));
	$str .= $lower;
	$num = rand(0,9);
	$str .= $num;

	return $str;
}

function validate($str) {
	//email
	/*
	if (!preg_match("/^([a-zA-Z0-9])+@([a-zA-Z0-9_-])+(\.[a-zA-Z0-9_-]+)+/", $str)) {
		return 'invalid email address';
	} else {
		return 'valid email address';
	}
	*/
	//url
	//$regexp = "(http(s?)://|[a-zA-Z0-9\-]+\.)[a-zA-Z0-9/~\-]+\.[a-zA-Z0-9/~\-_,&\?\.;]+[^\.,\s<]"; 
	//phone:
	//$regexp = "^\([0-9]{3}\)\s?[0-9]{3}(-|\s)?[0-9]{4}$|^[0-9]{3}-?[0-9]{3}-?[0-9]{4}$";
	//zip:
	/*
	if(!ereg($regexp, $str)) {
		return 'invalid phone';
	} else {
		return 'valid phone';
	}
	*/
	//zip:
	//$regexp = "(?<zip5>^\d{5})([\- ]?(?<plus4>\d{4})?$)";
	//$regexp = "^(\d{5})$|^([a-zA-Z]\d[a-zA-Z]( )?\d[a-zA-Z]\d)$";
	//$regexp = "^(?!00000)(?<ZipPart1>\d{5})(?:(?:[- ]?)(?<ZipPart2>\d{4}))?$";
	//$regexp = "^\d{5}$|^\d{5}-\d{4}$";
	//$regexp = "^\d{5}(-\d{4})?$";
	//$regexp = "^((\d{5}-\d{4})|(\d{5})|([AaBbCcEeGgHhJjKkLlMmNnPpRrSsTtVvXxYy]\d[A-Za-z]\s?\d[A-Za-z]\d))$";
	//$regexp = "^((\d{5}-\d{4})|(\d{5})|([A-Z]\d[A-Z]\s\d[A-Z]\d))$";
	//$regexp = "^(?<zip5>^\d{5})$";
	//$regexp = "(^\d{5}$)|(^\d{5}-\d{4}$)";
	if(empty($str) || strlen($str) != 5 ) {
		return 'invalid zip';
	} else {
		$regexp = "[0-9]";
		if(!ereg($regexp, $str)) {
			return 'invalid zip';
		} else {
			return 'valid zip';
		}
	} 
}

function showHeader($page) {
	$today = getdate();
	$theDate = prepDate($today);
	$theDate = convertDate($theDate);
	switch($page) {
		case 'Admin Interface':
		case 'Add New Product':
		case 'Add New Advertisement':
		case 'Modify Product':
		case 'Modify Advertisement':
			$cssPath = '../library/styles.css';
			$jsPath = '../library/seven.js';
			pageHead_admin($page, $jsPath, $cssPath, $theDate);
			break;
		case 'Stuff':
		case 'Shopping Cart':
		case 'Checkout - Step 1 of 2':
		case 'Checkout - Step 2 of 2':
		case 'Checkout - Step 3 of 3':
		case 'Checkout Error':
			$cssPath = 'library/styles.css';
			$jsPath = 'library/seven.js';
			$jsPath2 = 'library/chekbrwsr.js';
			pageHead($page, $jsPath, $cssPath, $theDate, $jsPath2);
			break;
		case 'Checkout Completed Successfully':
			$cssPath = 'library/styles.css';
			$jsPath = 'library/seven.js';
			pageHead_noCart($page, $jsPath, $cssPath, $theDate);
			break;
		case 'Preview New Product':
		case 'Preview Modified Product':
		case 'Preview New Advertisement':
		case 'Preview Modified Advertisement':
			$cssPath = 'library/styles.css';
			$jsPath = 'library/seven.js';
			pageHead_admin($page, $jsPath, $cssPath, $theDate);
			break;
		case 'Product List':
		case 'Advertisement List':
			$cssPath = '../../library/styles.css';
			$jsPath = '../../library/seven.js';
			pageHead_admin($page, $jsPath, $cssPath, $theDate);
			break;
		default:
			echo "<PRE>No head page specified.</PRE>";
	}
}

function pageHead_admin($page, $jsPath, $cssPath, $theDate) {
	$str = '';
	$str .= '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">';
	$str .= '<HTML>';
	$str .= '<HEAD>';
	$str .= '<title>The 7% Factor - '.$page.'</title>';
	$str .= '<script language="JavaScript1.2" src="'.$jsPath.'" type="text/javascript"></script>';
	$str .= '<LINK href="'.$cssPath.'" REL="stylesheet" TYPE="text/css">';
	$str .= '<STYLE>';
	if($page == 'Preview New Advertisement' || $page == 'Preview New Product') {
		$str .= '.label, .data { FONT-FAMILY: verdana, helvetica, arial; FONT-SIZE: 0.80em; TEXT-DECORATION: none; COLOR: #55494B; }';
		$str .= '.label { FONT-WEIGHT: 500; TEXT-ALIGN: right; PADDING: 2px 3px 2px 0px }';
		$str .= '.data { FONT-WEIGHT: 600; TEXT-ALIGN: left; PADDING: 2px 0px 2px 3px }';
	} 
	$str .= '.page_head, .page_subhead {FONT-FAMILY: verdana, helvetica, arial; FONT-SIZE: 1.84em; FONT-WEIGHT: 700; TEXT-DECORATION: none; COLOR: #000000 }';
	$str .= '.page_subhead { FONT-SIZE: 1.0em; PADDING: 5px 0px 10px 0px }';
	$str .= '.date_head, .prodName, .adText { FONT-FAMILY: verdana, helvetica, arial; FONT-WEIGHT: 500; TEXT-DECORATION: none; TEXT-ALIGN: left }';
	$str .= '.date_head { FONT-SIZE: 0.90em; COLOR: #ffffff; BACKGROUND-COLOR: #666666 }';
	$str .= '.prodName { FONT-SIZE: 0.90em }';
	$str .= '.prodName, .adText { COLOR: #55494B; BACKGROUND-COLOR: #ffffff }';
	$str .= '.adText { FONT-SIZE: 0.80em }';
	$str .= '.lyr_imgCel { POSITION: relative; BORDER-STYLE: none; BACKGROUND-COLOR: #c0c0c0; TEXT-ALIGN: center }';
	$str .= '<!-- /* tp  rt  bt  lt */ -->';
	$str .= '</STYLE>';
	$str .= '</HEAD>';
	$str .= '<body bgcolor=#ffffff text=#55494B link=#55494B vlink=55494B>';
	$str .= '<center>';
	$str .= '<TABLE WIDTH="80%" ALIGN="center" BORDER="1" STYLE="margin: 0; padding: 0" BORDER="0">';
	$str .= '<TR><TD COLSPAN="2" CLASS="page_head">The 7% Factor - Administration</TD></TR>';
	$str .= '<TR><TD CLASS="page_subhead">'.$page.'</TD><TD CLASS="adText" STYLE="text-align: right">'.$theDate.'</TD></TR>';
	$str .= '</TABLE>';
	echo $str;
}

function pageHead($page, $jsPath, $cssPath, $theDate, $jsPath2) {
	?>
	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
	<HTML>
	<HEAD>
	<title>The 7% Factor - <? echo $page ?></title>
	<? if($jsPath2) { ?>
		<script language="JavaScript1.2" src="<? echo $jsPath2 ?>" type="text/javascript"></script>
	<? } ?>
	<script language="JavaScript1.2" src="<? echo $jsPath ?>" type="text/javascript"></script>
	<LINK href="<? echo $cssPath ?>" REL="stylesheet" TYPE="text/css">
	</HEAD>
	<?
		if($page == 'Checkout - Step 1 of 2') { ?>
			<body bgcolor="#ffffff" text="#55494B" link="#55494B" vlink="55494B" ONLOAD="autoFill();">
	<?	} else { ?>
			<body bgcolor="#ffffff" text="#55494B" link="#55494B" vlink="55494B">
	<?  } ?>
	<center>
	<TABLE WIDTH="80%" ALIGN="center" BORDER="1" STYLE="margin: 0; padding: 0" BORDER="0">
	<TR><TD COLSPAN="2" CLASS="page_head">The 7% Factor</TD><TD ROWSPAN="2" CLASS="adText"><? require_once 'miniCart.php'; ?></TD></TR>
	<TR><TD CLASS="page_subhead"><? echo $page ?></TD><TD CLASS="adText" STYLE="text-align: center"><? echo $theDate ?></TD></TR>
	</TABLE>
	<?
}

function pageHead_noCart($page, $jsPath, $cssPath, $theDate) {
	?>
	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
	<HTML>
	<HEAD>
	<title>The 7% Factor - <? echo $page ?></title>
	<script language="JavaScript1.2" src="<? echo $jsPath ?>" type="text/javascript"></script>
	<LINK href="<? echo $cssPath ?>" REL="stylesheet" TYPE="text/css">
	</HEAD>
	<body bgcolor="#ffffff" text="#55494B" link="#55494B" vlink="55494B">
	<center>
	<TABLE WIDTH="80%" ALIGN="center" BORDER="1" STYLE="margin: 0; padding: 0" BORDER="0">
	<TR><TD COLSPAN="2" CLASS="page_head">The 7% Factor</TD><TD ROWSPAN="2" CLASS="adText">No cart.</TD></TR>
	<TR><TD CLASS="page_subhead"><? echo $page ?></TD><TD CLASS="adText" STYLE="text-align: center"><? echo $theDate ?></TD></TR>
	</TABLE>
	<?
}

function getSessVars($from) {
	switch($from) {
		case 'admin_prodAdd':
		case 'admin_prodEdit':
		case 'prod_edit':
			$frm_arr = array('tableName','prodName','imgFile','imgThumb','prodShortDesc', 'prodLongDesc', 'cat','price','qty');
			break;
		case 'editProduct':
			$frm_arr = array('tableName','newImg','newThmb','currFile','currThmb','prodNo','prodName','prodShortDesc','prodLongDesc','price','cat','qty');
			break;
		case 'admin_advertAdd':
			$frm_arr = array('tableName','prodName','imgFile','imgThumb', 'adText', 'comp','addr1','addr2','city','st','zip','cont','emaddr','phone');
			break;
		case 'admin_advertEdit':
		case 'advert_edit':
			$frm_arr = array('tableName','prodName','linkURL','adText','imgFile','imgThumb','comp','addr1','addr2','city','st','zip','cont','emaddr','phone');
			break;
		case 'editAdvert':
			$frm_arr = array('tableName','newImg','newThmb','currFile','currThmb','prodNo','prodName','linkURL','imgFile','imgThumb','adText','cat','comp','addr1','addr2','city','state','zip','cont','emAddr','phone');
			break;
		case 'adverts':
			$frm_arr = array('tableName','prodName','linkType','linkURL','imgFile','imgThumb','adText','cat','comp','addr1','addr2','city','state','zip','contName','emAddr','phone','billOpt','weeks','updConf');
			break;
		default:
			echo "<PRE>createSessVars error, from = ".$from."</PRE>";
	}
	return $frm_arr;
}

function displayAdvertForm() { 
	?>
	<table width="70%" align="center" BORDER="1">
		<tr><td height=25>&nbsp;</td></tr>
		<tr><td valign=top>
		<font face="verdana, helvetica, arial" size=2>
		<P>Use the following form to create your marketplace advertisement.</p>
		<!-- <form NAME="advert" ENCTYPE="multipart/form-data" ACTION="http://localhost/sevenFactor/preview.php" METHOD="post"> -->
		<!-- <form NAME="advert" ENCTYPE="multipart/form-data" ACTION="http://www.ilocano.net/seven/preview.php" METHOD="post"> -->
		<form NAME="advert" ENCTYPE="multipart/form-data" ACTION="<? echo siteHREF.'preview.php'; ?>" METHOD="post">
		<table>
		<tr><TD ALIGN="right" CLASS="td_label">Product Name:</TD><TD CLASS="txt_box"><input type=text name=ProductName size=40 maxlength=45 value="<? echo $sess_prodName ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Link Type:</TD><TD CLASS="txt_box"><font size=1><input type="radio" name="LinkType" value="1" checked>Website Link <input type="radio" name="LinkType" value="2">No Website</TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Link URL:</TD><TD CLASS="txt_box"><input type=text name=LinkURL size=40 value="<? echo $sess_linkURL ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Image Type:</TD><TD CLASS="txt_box"><font size=1><input type="radio" name="ImageType" value="1" checked>Upload Image <input type="radio" name="ImageType" value="2">No Image</TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Image File:<font size=1><br>(.jpg & .gif only)</TD><TD CLASS="txt_box"><input type=file name=ImageFilename size=30 value=""><font size=1><br>* Image size 75 pixels wide by a maximum of 110 pixels high</TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Advertisement Text:<br><font size=1>(HTML not accepted)</font></TD><TD CLASS="txt_box"><textarea CLASS="txt_area" rows="8" cols="40" name="AdvertisementText"><? echo $sess_adText ?></textarea></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Category:</TD><TD CLASS="txt_box">
		<select name=Category>
		<? 
			$catOpts = array('Select Category','Books','CD/DVD','Drugs');
			for($j = 0; $j < count($catOpts); $j++) {
				if($sess_cat == $j) {
					echo '<OPTION VALUE="'.$j.'" SELECTED>'.$catOpts[$j].'</OPTION>';
				} else {
					echo '<OPTION VALUE="'.$j.'">'.$catOpts[$j].'</OPTION>';
				}
			}
		?>
		</SELECT>
		</td></tr>
		<tr><td align=right></td><td>&nbsp;</td></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Company Name:</TD><TD CLASS="txt_box"><DIV CLASS="lyr_err">Name is required</DIV><input type=text name=CompanyName size=30 value="<? echo $sess_comp ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Address 1:</TD><TD CLASS="txt_box"><DIV CLASS="lyr_err">Name is required</DIV><input type=text name=Address1 size=30 value="<? echo $sess_addr1 ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Address 2:</TD><TD CLASS="txt_box"><input type=text name=Address2 size=30 value="<? echo $sess_addr2 ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">City:</TD><TD CLASS="txt_box"><DIV CLASS="lyr_err">Name is required</DIV><input type=text name=City size=30 value="<? echo $sess_city ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">State:</TD><TD CLASS="txt_box">
		<SELECT NAME="State">
		<?
			$state_arr = array('','AL','AK','AZ','AR','CA','CO','CT','DE','DC','FL','GA','HI','ID','IL','IN','IA','KS','KY','LA','ME','MD','MA','MI','MN','MA','MO','MT','NE','MV','NH','NJ','NM','NY','NC','ND','OH','OK','OR','PA','RI','SC','SC','TN','TX','UT','VT','VA','WV','WI','WY');
			for($i = 0; $i < count($state_arr); $i++) {
				if($sess_state == $state_arr[$i]) {
					echo '<OPTION VALUE="'.$state_arr[$i].'" SELECTED>'.$state_arr[$i].'</OPTION>';
				} else {
					echo '<OPTION VALUE="'.$state_arr[$i].'">'.$state_arr[$i].'</OPTION>';
				}
			}
		?>
		</SELECT>
		</TD></TR>
		<tr><TD ALIGN="right" CLASS="td_label">Zip:</TD><TD CLASS="txt_box"><input type=text name=Zip size=15 value="<? echo $sess_zip ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Country:</TD><TD CLASS="txt_box"><b>USA Only</b></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Contact Name:</TD><TD CLASS="txt_box"><input type=text name=ContactName size=30 value="<? echo $sess_contName ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Email Address:</TD><TD CLASS="txt_box"><input type=text name=EmailAddress size=30 value="<? echo $sess_emAddr ?>"></TD></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Phone Number:</TD><TD CLASS="txt_box"><input type=text name=PhoneNumber size=30 value="<? echo $sess_phone ?>"></TD></tr>
		<tr><td align=right></td><td>&nbsp;</td></tr>
		<tr><TD ALIGN="right" CLASS="td_label">Billing Option:</TD><td><select name=BillingOption>
		<option value="1">Call For Credit Card
		<option value="2">Use Previous Credit Card
		</select>
		</td></tr>
		<tr><td align=right valign=top nowrap CLASS="td_label">Billing Cycle:</TD><td valign=top CLASS="txt_box"><select name=Weeks>
		<option value="0" selected>Recurring - $75 per week
		<option value="1">Weekly - $100 per week
		</select>
		<br><font size=1>* Recurring ads are billed every 4 weeks and can be cancelled at any time prior to the next billing cycle. Weekly ads do not automatically renew.</font>
		</TD></tr>
		<tr><td align=right></td><td>&nbsp;</td></tr>
		<input type=hidden name=UpdateConfirm value="1">
		<INPUT TYPE="hidden" name="removeImg" value="advYes">
		<tr><td align=right></td><td><input type="button" value="Preview Advertisement" ONCLICK="removeImage('admin_advertPrev');"><input type="button" value="Cancel" ONCLICK="javascript: redirect('admin');"></td></tr>
	</table>
	</form>
</table>
<?
}

function displayAmount($amount) {
	return number_format($amount,2);
}

function getShopConfig() {
	// get current configuration
	$sql = "SELECT sc_name, sc_address, sc_phone, sc_email, sc_shipping_cost, sc_order_email, cy_symbol FROM tblShopConfig sc, tblCurrency cy WHERE sc_currency = cy_id";
	//$result = dbQuery($sql);
	//$row    = dbFetchAssoc($result);
	$result = mysql_query($sql);
	$row = mysql_fetch_assoc($result);

    if ($row) {
        extract($row);
	
        $shopConfig = array('name'           => $sc_name,
                            'address'        => $sc_address,
                            'phone'          => $sc_phone,
                            'email'          => $sc_email,
				    'sendOrderEmail' => $sc_order_email,
                            'shippingCost'   => $sc_shipping_cost,
                            'currency'       => $cy_symbol);
    } else {
        $shopConfig = array('name'           => '',
                            'address'        => '',
                            'phone'          => '',
                            'email'          => '',
				    'sendOrderEmail' => '',
                            'shippingCost'   => '',
                            'currency'       => '');    
    }
	return $shopConfig;						
}

?>

<PRE>Action not set.</PRE>