Administrator / extrem

  <?
  
  // Ïîäêëþ÷åíèå
  include_once ($_SERVER['DOCUMENT_ROOT'] . "/account/mods/autorizator_admin.php");
  include_once ($_SERVER['DOCUMENT_ROOT'] . "/account/class/class.report.php");
  include_once ($_SERVER['DOCUMENT_ROOT'] . "/account/func/func.php");
  
  // ======================================
  // ======================================
  // ============ Îáðàáîòêà ===============
  // ======================================
  // ======================================

      if ($_GET['test'] == "1")

      { 

          // eMailing('order-new',"5172", "11181");
      }

      if (isset ($_GET['orderID']) && isset ($_GET['paid']))
      {
          $sql = sprintf ("UPDATE catalogs_orders SET paid=%d WHERE id=%d", $_GET['paid'], $_GET['orderID']);

          mysql_query ($sql);
      }
      elseif (isset ($_GET['label']))

      { 

          $sql = sprintf ("UPDATE catalogs_orders SET label=%d WHERE id=%d", $_GET['label'], $_GET['orderID']);
          
          mysql_query ($sql);
          
          GoBack (1);
      }
      

  // =================
  // ==== status =====
  // =================

      
      // print_r($_POST);
      // exit;
      if ((isset ($_POST['action']) && $_POST['action'] == 'status') || trim ($_POST['status']) != '')
      {
          
          $sql = "UPDATE catalogs_orders SET status='" . $_POST['status'] . "' WHERE `id`='" . $_POST['order_id'] . "'";
          $result = mysql_query ($sql) or die (mysql_error ());
          // exit;
      }
      
  // ====================
  // ===== order ========
  // ====================
      
      // ==============
      // ==== edit ====
      // ==============
      
      if (isset ($_POST['sms_send']))
      {
          $sql = "insert into sms_history(order_id,mktime,text,user) values('" . $_POST['order_id'] . "','" . mktime () . "','" . $_POST['sms_msg'] . "','" . $_SESSION['admin']['login'] . "')";
          mysql_query ($sql);

          foreach ($_POST['sms_tel'] as $tel)
          {
              sendSMS ($tel, $_POST['sms_msg']);
          }
      
          GoBack (1);
      }
      elseif (isset ($_POST['send']) && $_POST['send'] == 'edit-order')
      {
          
          $error = '';
          $error[] = ValidFormData ($_POST['user']['email'], 'email', 'email');
          $error[] = ValidFormData ($_POST['user']['city'], 'ãîðîä', 'require');
          $error[] = ValidFormData ($_POST['user']['address'], 'àäðåñ', 'require');
          $error[] = ValidFormData ($_POST['user']['tel'], 'ìîá.òåëåôîí', 'mobile');
          $error[] = ValidFormData ($_POST['user']['username'], 'èìÿ', 'require');

          $alert = implode ('\r\n', $error);
          
          $mass = array_filter ($error);
          if (empty ($mass))
          {
              
              $summary = 0;
              

              // Ïðîâåðÿåì åñòü ëè óæå â çàêàçàõ

              $sql = "SELECT *, product_id as mod_id from catalogs_orders_products WHERE order_id='" . $_POST['order_id'] . "'";
              $result = mysql_query ($sql) or die (mysql_error ());
              
              if (mysql_affected_rows () != 0)
              {
                  while ($item = mysql_fetch_assoc ($result))
                  {
                      $ordered[] = $item['mod_id'];

                  }
              }

              // ===========================================

              // ======= Ïðîâåðÿåì íà èçìåíåíèå ===========

              // ===========================================
              

              $ChangesOfOrder = ChangesOfMass ($_POST['item']['mod_id'], $ordered);
              

              // ==============
              // ==== same ====
              // ==============

              if (isset ($ChangesOfOrder['same']))
              {

                  $mass = array_filter ($ChangesOfOrder['same']);
                  if (! empty ($mass))
                  {
                      foreach ($ChangesOfOrder['same'] as $value)
                      {
                          // Óçíàåì key(èíäåêñ) â ìàññèâå
                          $i = array_keys ($_POST['item']['mod_id'], $value);
                          $i = $i[0];
                          

                          // Îáíîâëÿåì êîëè÷åñòâî

                          // print_r($_POST);exit;
                          $sql2 = "UPDATE catalogs_orders_products SET `count`='" . $_POST['item']['quant'][$i] . "',`reservation`='" . $_POST['item']['reservation'][$i] . "',`status`='" . $_POST['item']['status'][$i] . "',`vozvrat`='" . $_POST['item']['vozvrat'][$i] . "' WHERE order_id='" . $_POST['order_id'] . "' AND product_id='" . $_POST['item']['mod_id'][$i] . "'";
                          // print "<br>";
                          $result2 = mysql_query ($sql2) or die (mysql_error ());
                          
                          // Ñóììà âñåãî çàêàçà
                          $summary = $summary + ($_POST['item']['quant'][$i] * $_POST['item']['price'][$i]);

                      }
                  }

              }
                      

              // =============
              // ==== add ====
              // =============

              if (isset ($ChangesOfOrder['add']))
              {
                  $mass = array_filter ($ChangesOfOrder['add']);
                  if (! empty ($mass))
                  {
                      foreach ($ChangesOfOrder['add'] as $value)
                      {
                          // Óçíàåì key(èíäåêñ) â ìàññèâå
                          $i = array_keys ($_POST['item']['mod_id'], $value);
                          $i = $i[0];

                          $r = mysql_query ("select count(*) from catalogs_orders_products where order_id='{$_POST['order_id']}' and product_id='{$_POST['item']['mod_id'][$i]}'");
                          $c = mysql_result ($r, 0);
                          if (! $c)
                          {
                              // Äîáàâëÿåì òîâàðû
                              $sql2 = sprintf ("INSERT INTO catalogs_orders_products (order_id,product_id,code,product_cine_id,count,reservation) VALUES (%s,%s,%s,%s,%s,%s)", GetSQLValueString ($_POST['order_id'], "text"), GetSQLValueString ($_POST['item']['mod_id'][$i], "text"), GetSQLValueString ($_POST['item']['code'][$i], "text"), GetSQLValueString ($_POST['item']['price'][$i], "text"), GetSQLValueString ($_POST['item']['quant'][$i], "text"), GetSQLValueString ($_POST['item']['reservation'][$i], "text"));
                              $result2 = mysql_query ($sql2) or die (mysql_error ());
                              
                              // Ñóììà âñåãî çàêàçà
                              $summary = $summary + ($_POST['item']['quant'][$i] * $_POST['item']['price'][$i]);
                          }
                      }
                  }

              }
              
              // ==========
              // == del ===
              // ==========

              /*

               * if (isset($ChangesOfOrder['del'])) {
               *
               * $mass=array_filter($ChangesOfOrder['del']);
               * if (!empty($mass)) {
               *
               * foreach ($ChangesOfOrder['del'] as $value) {
               *
               * // Äîáàâëÿåì òîâàðû
               * $sql2="DELETE FROM catalogs_orders_products WHERE order_id='".$_POST['order_id']."' AND product_id='".$value."'";
               * $result2 = mysql_query($sql2) or die(mysql_error());
               * }
               * }
               * }
               */

              // ===========
              // == ÂÑÅÃÎ ==
              // ===========

              if (isset ($summary))
              {
                  // if(trim($_POST['label'])) $_POST['label'] = 1;
                  // print_r($_POST);

                  // Îáíîâëÿåì äàííûå çàêàçà

                  $sql2 = sprintf ("
                      UPDATE catalogs_orders 
                      SET 
                          cards=%s,
                          insurance=%s,
                          warehouse=%s,
                          nakladnaya=%s,
                          cost_delivery=%s,
                          paid=%s,
                          cause=%s,
                          label=%s,
                          delivery=%s,
                          declaration=%s,
                          payment=%s,
                          city=%s,
                          adress=%s,
                          comment=%s,
                          mcomment=%s,
                          total=%s,
                          meneger=%s,
                          check2=%s,
                          smst=%s,
                          dedline=%s,
                          sumn=%s,
                          sends=%s,
                          work_user=%s 
                      WHERE 
                          id='" . $_POST['order_id'] . "'", 
                          GetSQLValueString ($_POST['user']['cards'], "text"), 
                          GetSQLValueString ($_POST['user']['insurance'], "text"), 
                          GetSQLValueString ($_POST['user']['warehouse'], "text"), 
                          GetSQLValueString ($_POST['user']['nakladnaya'], "text"), 
                          GetSQLValueString ($_POST['cost_delivery'], "text"), 
                          $_POST['paid'], 
                          $_POST['cause'], 
                          $_POST['label'], 
                          $_POST['user']['delivery'], 
                          GetSQLValueString ($_POST['user']['declaration'], "text"), 
                          GetSQLValueString ($_POST['user']['payment'], "text"), 
                          GetSQLValueString ($_POST['user']['city'], "text"), 
                          GetSQLValueString ($_POST['user']['address'], "text"), 
                          GetSQLValueString ($_POST['user']['comment'], "text"), 
                          GetSQLValueString ($_POST['user']['mcomment'], "text"), 
                          GetSQLValueString ($summary, "text"), 
                          (int)$_POST['meneger'], 
                          GetSQLValueString ($_POST['user']['check'], "text"), 
                          GetSQLValueString ($_POST['user']['smst'], "text"), 
                          GetSQLValueString ($_POST['user']['dedline'], "text"), 
                          GetSQLValueString ($_POST['user']['sumn'], "text"), 
                          GetSQLValueString ($_POST['user']['sends'], "text"), 
                          GetSQLValueString ('0', "text")
                  );

                  $result2 = mysql_query ($sql2) or die (mysql_error ());
                  
                  eMailing ('xml', $_POST['user_id'], $_POST['order_id']);
                  
                  $sql = sprintf ("INSERT INTO catalogs_orders_git (order_id,user_id,cost_delivery,cards,insurance,warehouse,paid,label,delivery,declaration,payment,name,email,city,adress,phone,phonemob,comment,mcomment,mktime,total,sumn,sends,status,work_user) VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,1,%s)", $_POST['order_id'], GetSQLValueString ($_POST['user']['id'], "text"), GetSQLValueString ($_POST['cost_delivery'], "text"), GetSQLValueString ($_POST['user']['cards'], "text"), GetSQLValueString ($_POST['user']['insurance'], "text"), GetSQLValueString ($_POST['user']['warehouse'], "text"), GetSQLValueString ($_POST['paid'], "text"), GetSQLValueString ($_POST['label'], "text"), GetSQLValueString ($_POST['user']['delivery'], "text"), GetSQLValueString ($_POST['user']['declaration'], "text"), GetSQLValueString ($_POST['user']['payment'], "text"), GetSQLValueString ($_POST['user']['username'], "text"), GetSQLValueString ($_POST['user']['email'], "text"), GetSQLValueString ($_POST['user']['city'], "text"), GetSQLValueString ($_POST['user']['address'], "text"), GetSQLValueString ($_POST['user']['tel'], "text"), GetSQLValueString ($_POST['user']['tel2'], "text"), GetSQLValueString ($_POST['user']['comment'], "text"), GetSQLValueString ($_POST['user']['mcomment'], "text"), GetSQLValueString (mktime (), "text"), GetSQLValueString ($_POST['summary'], "text"), GetSQLValueString ($_POST['user']['sumn'], "text"), GetSQLValueString ($_POST['user']['sends'], "text"), $_SESSION['admin']['id']);
                  $resultg = mysql_query ($sql) or die (mysql_error ());
                  $id_order_git = mysql_insert_id ();
                  
                  for ($i = 0; $i <= count ($_POST['item']); $i ++)
                  {
                      if (! empty ($_POST['item']['mod_id'][$i]))
                      {
                          $sql2 = sprintf ("INSERT INTO catalogs_orders_products_git (order_id,product_id,code,product_cine_id,count,reservation,status) VALUES (%s,%s,%s,%s,%s,%s,%s)", GetSQLValueString ($id_order_git, "text"), GetSQLValueString ($_POST['item']['mod_id'][$i], "text"), GetSQLValueString ($_POST['item']['code'][$i], "text"), GetSQLValueString ($_POST['item']['price'][$i], "text"), GetSQLValueString ($_POST['item']['quant'][$i], "text"), GetSQLValueString ($_POST['item']['reservation'][$i], "text"), GetSQLValueString ($_POST['item']['status'][$i], "text"));
                          $result2 = mysql_query ($sql2) or die (mysql_error ());
                      }
                  }
                  
                  // header("location:/admin.php/orders/?page=".$_GET['page']);
              }
              else
              {
                  
                  // $sql2="DELETE FROM catalogs_orders WHERE id='".$_POST['order_id']."'";
                  // $result2 = mysql_query($sql2) or die(mysql_error());

              }
              

              // GoBack(1);
              // echo"<script language=\"JavaScript\">document.location='/admin.php/orders/?page=".$_GET['page']."&n=1';</script>";
          }
          else
          {
              
              echo "<script language=\"JavaScript\">alert('$alert')</script>";
          }
      }
      else
      {
          if (! empty ($_GET['exit_order_id']))
          {
              $sql = sprintf ("UPDATE catalogs_orders SET work_user=0 WHERE id=%d", $_GET['exit_order_id']);
              
              mysql_query ($sql);
          }
          
          if (empty ($_SESSION['up']))
          {
              $_SESSION['up'] = 2;
          }

          if (! empty ($_GET['order_ID']))
          {
              $sql = sprintf ("UPDATE catalogs_orders SET work_user=%d WHERE id=%d AND work_user=0", $_SESSION['admin']['id'], $_GET['order_ID']);

              mysql_query ($sql);
          }

      }
      

      // ==============
      // ==== add =====
      // ==============
      
      if (isset ($_POST['send']) && $_POST['send'] == 'add-order')
      { 
          // Ïðîâåðÿåì äûáèë ëè àäìèí
          $debil == false;

          for ($i = 1; $i <= count ($_POST['item']); $i ++)
          {
              if (isset ($_POST['item']['mod_id'][$i]) && $_POST['item']['mod_id'][$i] == '')
              {
                  $debil = true;
              }
          }

          if ($debil == false)
          {
              
              // $error='';
              // $error[] = ValidFormData($_POST['user']['email'],'email','email');
              // $error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require');
              // $error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require');
              // $error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile');
              // $error[] = ValidFormData($_POST['user']['username'],'èìÿ','require');
              
              // $alert=implode('\r\n',$error);
              
              // $mass=array_filter($error);
              // if (empty($mass)) {
              
              // Ïðîâåðÿåì ñóùåñòâóåò ëè ïîëüçîâàòåëü
              // $sql="SELECT * FROM zlo_users WHERE email='".$_POST['user']['email']."' ";
              // $result = mysql_query($sql) or die(mysql_error());
              // if (mysql_affected_rows()!=0) {
              
              // }
              
              $time = mktime ();
              $date = date ('Y-m-d H:i:s', $time);
              
              // Åñëè ñîçäàåì íîâîãî ïîëüçîâàòåëü
              if ($_POST['user']['user_id'] == '' || $_POST['user']['user_id'] == 0 || $_POST['user']['user_id'] == '0')
              {
                  
                  if (strpos ($_POST['user']['email'], "@user.com"))
                  {
                      $_POST['user']['group'] = 1;

                  }

                  else
                  {
                      $_POST['user']['group'] = 2;
                  }
                  
                  // Äîáàâëÿåì ïîëüçîâàòåëÿ
                  $pass = generate_password (6);
                  $sql = sprintf ("INSERT INTO zlo_users (pass, email, city, address, tel, registered, username, tel2, `group`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s)", GetSQLValueString ($pass, "text"), GetSQLValueString ($_POST['user']['email'], "text"), GetSQLValueString ($_POST['user']['city'], "text"), GetSQLValueString ($_POST['user']['address'], "text"), GetSQLValueString ($_POST['user']['tel'], "text"), GetSQLValueString ($date, "text"), GetSQLValueString ($_POST['user']['username'], "text"), GetSQLValueString ($_POST['user']['tel2'], "text"), GetSQLValueString ($_POST['user']['group'], "int"));
                  $result = mysql_query ($sql) or die (mysql_error ());
                  

                  // Óçíàåì ID ïîëüçîâàòåëÿ

                  $sql = "SELECT id FROM zlo_users WHERE registered='$date' AND tel='" . $_POST['user']['tel'] . "'";
                  $result = mysql_query ($sql) or die (mysql_error ());
                  if (mysql_affected_rows () != 0)
                  {
                      $user = mysql_fetch_assoc ($result);

                      
                      // Øëåì ïèñüìà

                      if ($user['group'] != 1)
                      {
                          eMailing ('reg', $user['id']);

                      }
                      

                      $_POST['user']['user_id'] = $user['id'];
                  }
                  else
                  {
                      echo "íåò ïîëüçîâàòåëÿ";
                  }

              }
              

              // Äîáàâëÿåì çàêàç
              $sql = sprintf ("INSERT INTO catalogs_orders (cost_delivery,cards,insurance,warehouse,paid,label,delivery,declaration,payment,user_id,name,email,city,adress,phone,phonemob,comment,mcomment,mktime,total,sumn,sends,status) VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,1)", GetSQLValueString ($_POST['cost_delivery'], "text"), GetSQLValueString ($_POST['user']['cards'], "text"), GetSQLValueString ($_POST['user']['insurance'], "text"), GetSQLValueString ($_POST['user']['warehouse'], "text"), GetSQLValueString ($_POST['paid'], "text"), GetSQLValueString ($_POST['label'], "text"), GetSQLValueString ($_POST['user']['delivery'], "text"), GetSQLValueString ($_POST['user']['declaration'], "text"), GetSQLValueString ($_POST['user']['payment'], "text"), GetSQLValueString ($_POST['user']['user_id'], "text"), GetSQLValueString ($_POST['user']['username'], "text"), GetSQLValueString ($_POST['user']['email'], "text"), GetSQLValueString ($_POST['user']['city'], "text"), GetSQLValueString ($_POST['user']['address'], "text"), GetSQLValueString ($_POST['user']['tel'], "text"), GetSQLValueString ($_POST['user']['tel2'], "text"), GetSQLValueString ($_POST['user']['comment'], "text"), GetSQLValueString ($_POST['user']['mcomment'], "text"), GetSQLValueString ($time, "text"), GetSQLValueString ($_POST['summary'], "text"), GetSQLValueString ($_POST['user']['sumn'], "text"), GetSQLValueString ($_POST['user']['sends'], "text"));
              $result = mysql_query ($sql) or die (mysql_error ());
              

              // Óçíàåì íîìåð çàêàçà

              $sql = "SELECT id FROM catalogs_orders WHERE mktime='$time' AND user_id='" . $_POST['user']['user_id'] . "'";
              $result = mysql_query ($sql) or die (mysql_error ());
              if (mysql_affected_rows () != 0)
              {
                  $order = mysql_fetch_assoc ($result);
              }
              else
              {
                  echo "Îøèáêà";
              }
              

              // Äîáàâëÿåì òîâàðû

              for ($i = 0; $i <= count ($_POST['item']); $i ++)
              {
                  if ($_POST['item']['code'][$i] != '')
                  {
                      $r = mysql_query ("select count(*) from catalogs_orders_products where order_id='{$order['id']}' and product_id='{$_POST['item']['mod_id'][$i]}'");
                      $c = mysql_result ($r, 0);
                      if (! $c)
                      {
                          $sql = sprintf ("INSERT INTO catalogs_orders_products (order_id,product_id,code,product_cine_id,count,reservation) VALUES (%s,%s,%s,%s,%s,%s)", GetSQLValueString ($order['id'], "text"), GetSQLValueString ($_POST['item']['mod_id'][$i], "text"), GetSQLValueString ($_POST['item']['code'][$i], "text"), GetSQLValueString ($_POST['item']['price'][$i], "text"), GetSQLValueString ($_POST['item']['quant'][$i], "text"), GetSQLValueString ($_POST['item']['reservation'][$i], "text"));
                          $result = mysql_query ($sql) or die (mysql_error ());
                          $summary = $summary + ($_POST['item']['quant'][$i] * $_POST['item']['price'][$i]);
                      }

                  }
              }

      
              mysql_query ("update catalogs_orders set total='$summary' where id='{$order['id']}'");
      
              // Øëåì ïèñüìà
              if ($user['group'] != 1)
              {
                  eMailing ('order-new', $_POST['user']['user_id'], $order['id']);

              }

              
              echo "<script language=\"JavaScript\">{ location.href=\"/admin.php/orders/\"; self.focus(); } </script>";
              
              // } else {
              

              // echo"<script language=\"JavaScript\">alert('$alert')</script>";
              

              // }
          }
          else
          {
              
              echo "<script language=\"JavaScript\">alert('Íåò òîâàpà - íåò çàêàçà')</script>";
          }

      }

  
      // =============
      // ==== Del ====
      // =============

      if (isset ($_GET['del_order']) && $_GET['del_order'] == 1)
      { 
          function delOrder (array $orders_id, $del_user = false)
          {
              foreach ($orders_id as $order_id)
              {
                  // ïîëüçîâàòåëü
                  if ($del_user)
                  {
                      mysql_query ('
                          DELETE `zlo_users` FROM `zlo_users` 
                              INNER JOIN `catalogs_orders` as `order` ON `order`.user_id = `zlo_users`.id
                                  AND `order`.id = '.(int)$order_id
                      ) or die (mysql_error ());
                  }
                  
                  // ïðîäóêòû
                  mysql_query ('
                      DELETE `catalogs_orders_products` FROM `catalogs_orders_products`
                          INNER JOIN `catalogs_orders` as `order` ON `order`.id = `catalogs_orders_products`.order_id
                              AND `order`.id = '.(int)$order_id
                  ) or die (mysql_error ());
  
                  // çàêàçû
                  mysql_query ('
                      DELETE FROM `catalogs_orders` 
                      WHERE `id` = '.(int)$order_id
                  ) or die (mysql_error ());  
              }
          }
          

          if ($_SESSION['admin']['group'] == 1) // òîëüêî àäìèí
          {
              delOrder (array (
                  'order_id' => $_GET['order_id'])
              );
      
              echo "<script language=\"JavaScript\">alert('Çàêàç óñïåøíî óäàëåí')</script>";
          }
          else 
          {
              echo "<script language=\"JavaScript\">alert('Óäàëÿòü ìîæåò òîëüêî àäìèí!')</script>";
          }

      }

  
  // =================
  // ==== NOTIFY =====
  // =================

          // ==================
          // ==== changed =====
          // ==================

      
          if (isset ($_GET['notify']) && $_GET['notify'] == 'order-changed')
          {
              
              eMailing ('order-changed', $_GET['user'], $_GET['order']);
              

              echo "<script language=\"JavaScript\">{ location.href=\"/admin.php/orders/\"; self.focus(); } </script>";
          }

  // ======================================
  // ======================================
  // ============== Âûâîä =================
  // ======================================
  // ======================================

   
      // ===== javascript ==== 
       

      echo "

      <script src='http://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js' type='text/javascript'></script>

      <script src='/js/JsHttpRequest.js'></script>

      <script src='/js/OrderContol.js' type='text/javascript'></script>
      <script src='/js/msg.js'></script>
      <script src='/js/msg2.js'></script>";
      
      // modal
      echo "
      <script src='/js/modalBox/modalBox.js'></script>
      <script src='/js/bpopup/jquery.bpopup.min.js'></script>
      <link  href='/js/bpopup/bpopup.min.css' type='text/css' rel='stylesheet'/>";

      // validator

      echo "
      <link rel='stylesheet' href='/js/validator/validationEngine.jquery.css' type='text/css'/>

      <link rel='stylesheet' href='/js/validator/template.css' type='text/css'/> 

      <script src='/js/validator/languages/jquery.validationEngine-ru.js' type='text/javascript' charset='utf-8'></script>
      <script src='/js/validator/jquery.validationEngine.js' type='text/javascript' charset='utf-8'></script>";
  
  // =============
  // ==== all ====
  // =============
  
  if (! isset ($_GET['action']))
  {

      // ***** Àäìèí ðåæèì *****

      if (isset ($_SESSION['admin']['edit']) || $_SESSION['admin']['group'] == 4 || $_SESSION['admin']['group'] == 2)
      {
          echo "<a href='/admin.php/sms_tpl/'>SMS øàáëîíû</a><br />";
          echo "<a href='/admin.php/orders/?action=add' class='button-save'>Äîáàâèòü</a>";

      }
      // ***********************

      
      // ==============
      // === report ===
      // ==============
      
      $time = '';
      $time['day'] = "o.`mktime` >= " . mktime (0, 0, 0, date ('n'), date ('j'), date ('Y'));
      if (date ('w') == 1)
      {
          $time['week'] = " o.`mktime` >=" . mktime (0, 0, 0, date ('n'), date ('j'), date ('Y')) . " ";
      }
      else
      {
          $time['week'] = "( o.`mktime` BETWEEN " . strtotime ("last Monday") . " AND  " . mktime (0, 0, 0, date ('n'), date ('j') + 1, date ('Y')) . ") ";
      }
      $time['month'] = "o.`mktime` >= " . mktime (0, 0, 0, date ('n'), 1, date ('Y'));
      
      Report::put_time ($time);
      Report::make ();
      /*
       * echo"<div class='orders-report' style='display:table; overflow:hidden;'>";
       *
       * // === êëèåíòû ===
       *
       * echo"<div style='background: url(\"http://".$_SERVER['SERVER_NAME']."/img/bg_report.jpg\"); background-repeat:no-repeat; border:1px solid #B9B9B9; padding:0 15px 5px;'>";
       *
       * echo"<span style='padding:5px 0; display:block;'>ÒÎÏ êëèåíòîâ çà ïåðèîä: </span>";
       * echo Report::html_report(Report::get_mass_client());
       * echo"</div>";
       *
       * echo"<div style='height:20px;display:block;'></div>";
       *
       * // === ïðîäàæè ===
       *
       * echo"<div style='background: url(\"http://".$_SERVER['SERVER_NAME']."/img/bg_report.jpg\"); background-repeat:no-repeat; border:1px solid #B9B9B9; padding:0 15px 5px;'>";
       *
       * echo"<span style='padding:5px 0; display:block;'>Ïðîäàæè çà ïåðèîä: </span>";
       * echo Report::html_report(Report::get_mass_order());
       * echo"</div>";
       *
       * echo"<div style='height:20px;display:block;'> </div>";
       *
       * // === ãðàôèê ===
       *
       * echo"<div style='background: url(\"http://".$_SERVER['SERVER_NAME']."/img/bg_report.jpg\"); background-repeat:no-repeat; border:1px solid #B9B9B9; padding:0 15px 5px;'>";
       *
       * echo"<span style='padding:5px 0; display:block;'>Ãðàôèê: </span>";
       * echo"<a href='http://".$_SERVER['SERVER_NAME']."/xml/".date('Y')."/".date('m')."/grafic_report_".date('Y-m')."-".(date('d')-1).".png' ><img src='http://".$_SERVER['SERVER_NAME']."/xml/".date('Y')."/".date('m')."/grafic_report_".date('Y-m')."-".(date('d')-1).".png' width='340px' ></a>";
       *
       * // ëåãåíäà
       * echo"<div class='legend' style='display:table;text-align:center;'>";
       * echo"<div style='width:15px; height:15px; background:#00A652; float:left;'></div><span style='float:left; padding:0 5px;'>íîâûé</span>";
       * echo"<div style='width:15px; height:15px; background:#0072BB; float:left;'></div><span style='float:left; padding:0 5px;'>ïîäòâåðæäåí</span>";
       * echo"<div style='width:15px; height:15px; background:#F36523; float:left;'></div><span style='float:left; padding:0 5px;'>îòìåíåí</span>";
       * echo"<div style='width:15px; height:15px; background:#ED1B24; float:left;'></div><span style='float:left; padding:0 5px;'>âûïîëíåí</span>";
       * echo"<div style='clear:both;'></div>";
       * echo"</div>";
       *
       * echo"</div>";
       *
       * echo"</div>";
       */
      
      if (! isset ($_GET['status']))
      {
          $_GET['status'] = "1";
      }
      if (! isset ($_GET['page']))
      {
          $_GET['page'] = "1";
      }
      
      if (isset ($_GET['user']))
      {
          $AND = "AND u.id=" . $_GET['user'];
      }
      else
      {
          $AND = '';
      }
      
      // =============
      // === Ïîèñê ===
      // =============
      
      $th = array (
          "id" => "íîìåð çêàçà",
          "username" => "êëèåíò",
          "email" => "email",
          "tel" => "òåëåôîí",
          "declaration" => "Äåêëàðàöèÿ ¹",
          "nakladnaya" => "¹ íàêëàäíîé",
          "code" => "øòðèõêîä",
          "mcomment" => "Êîìåíòàðèé" 
      );
      
      // Åñëè ñóùåñòâóåò Ïîèñê
      if (isset ($_REQUEST['search']))
      {
          if ($_REQUEST['field'] == 'id')
          {
              $pre = "o";

          }

          if ($_REQUEST['field'] == 'username')
          {
              $pre = "u";
          }
          if ($_REQUEST['field'] == 'email')
          {
              $pre = "u";
          }
          if ($_REQUEST['field'] == 'tel')
          {
              $pre = "u";
          }
          if ($_REQUEST['field'] == 'code')
          {
              $pre = "m";
          }
          if ($_REQUEST['field'] == 'declaration')
          {
              $pre = "o";
          }
          if ($_REQUEST['field'] == 'nakladnaya')
          {
              $pre = "o";
          }
          if ($_REQUEST['field'] == 'mcomment')
          {
              $pre = "o";
          }
          $AND = '';
          if (trim ($_REQUEST['look']) != '')
          {
              if ($_REQUEST['field'] == "id")
                  $AND .= "AND $pre.`" . $_REQUEST['field'] . "` LIKE '" . trim ($_REQUEST['look']) . "' ";
              else
                  $AND .= "AND $pre.`" . $_REQUEST['field'] . "` LIKE '%" . trim ($_REQUEST['look']) . "%' ";
          }
          if (($_REQUEST['form']['date_start'] != '') && ($_REQUEST['form']['date_end'] != ''))
          {

              $dateStart = $_REQUEST['form']['date_start'];
              $dateEnd = $_REQUEST['form']['date_end'];

              $mkdate = ExtractDate ($_REQUEST['form']['date_start']);
              $_REQUEST['form']['date_start'] = mktime (0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]);

              $mkdate = ExtractDate ($_REQUEST['form']['date_end']);
              $_REQUEST['form']['date_end'] = mktime (0, 0, 0, $mkdate[1], $mkdate[2], $mkdate[0]);
              
              $AND .= " AND (o.`mktime` BETWEEN '" . $_REQUEST['form']['date_start'] . "' AND '" . $_REQUEST['form']['date_end'] . "') ";

          }

      }
      // =============
      // === Äàòà ====
      // =============
      

      echo "
      <div class='grid-search'>
          <form action='" . GetFormUrl () . "' name='search' method='GET'>
              <div class='search'>
                  <input type='text' name='look' id='grid-search' value='" . $_REQUEST['look'] . "'>
                      <select name='field'>";
  
                      foreach ($th as $key => $value)
                      {
                          if ($_REQUEST['field'] == $key)
                          {
                              $selected = 'selected="selected"';
                          }
                          else
                          {
                              $selected = '';
                          }
                          echo "<option value='$key' $selected>$value</option>";
                      }
  
                  echo "</select>
                  <input type='submit' value='ïîèñê'>
                  <input type='hidden' name='status' value='" . $_GET['status'] . "'>
              </div>";

              echo "
              <div class='dates'>
                  <div class='row'>
                      <input type='text' name='form[date_start]' id='date_start_input' value='" . $dateStart . "'>
                      <img src='/img/calendar.gif' id='date_start'>
                  </div>
                  <div class='row'>
                      <input type='text' name='form[date_end]' id='date_end_input' value='" . $dateEnd . "'>
                      <img src='/img/calendar.gif' id='date_end'>
                  </div>
              </div>";
          
              echo '
              <script type="text/javascript">

                Calendar.setup(
                  {

                    inputField  : "date_start_input",
                    ifFormat    : "%Y-%m-%d",

                    button      : "date_start"
                  }
                );
              </script>';

              
              echo '
              <script type="text/javascript">

                Calendar.setup(
                  {

                    inputField  : "date_end_input",
                    ifFormat    : "%Y-%m-%d",

                    button      : "date_end"
                  }
                );
              </script>';

          echo "
          <input type='hidden' name='search' value='ok'> 
          </form>
      </div>";

      
      // =========== Ãåíåðèì òàáëèöó ===========
      
      $eshka = "";
      $eshka2 = "";
      $eshka3 = "";
      $lll = "";
      /*
       * if(trim(@$_REQUEST['da'])=='1'){
       * $eshka = "o.mktime<'1341090000' AND ";
       * $eshka2 = "o.mktime<'1341090000' AND ";
       * $lll = "font-weight:bold;";
       * }else{
       * $eshka = "o.mktime>'1341090000' AND ";
       * $eshka2 = "o.mktime>'1341090000' AND ";
       * $lll = "";
       * }
       */
      
      if (trim (@$_REQUEST['pr']) == '1')
      {
          $tim = (time () - 86400);
          $eshka3 = "o.upd<'" . date ("Y-m-d H:i:s", $tim) . "' AND ";
      }
      else
      {
          $eshka3 = "";
      }
      
      if (trim (@$_REQUEST['prs']) == '1')
      {
          $tim = (time () - 172800);
          $eshka4 = "o.upd<'" . date ("Y-m-d H:i:s", $tim) . "' AND ";
      }
      else
      {
          $eshka4 = "";
      }
      
      $order = ((isset ($_GET['order'])) ? $_GET['order'] : 'mktime');
      $type = ((isset ($_GET['type'])) ? $_GET['type'] : 'DESC');
      
      if (isset ($_GET['stat']) && $_GET['stat'] == 1)
      {
          $AND .= " AND o.status IN(4,5) AND o.mktime<'" . mktime (0, 0, 0, "01", "01", "2013") . "' ";
      }
      else
      {
          // $mk_and = $AND = "AND o.mktime>='".mktime(0, 0, 0, date("m"), date("d"), date("Y"))."' and o.mktime<='".mktime(0, 0, 0, date("m"), date("d")+1, date("Y"))."' ";
          $AND .= "  AND o.status IN(1,2)  AND o.mktime>='" . mktime (0, 0, 0, "01", "01", "2013") . "' ";
          $mk_and = "  AND o.status IN(1,2)  AND o.mktime>='" . mktime (0, 0, 0, "01", "01", "2013") . "' ";
      }
      
      if (isset ($_GET['sort_label']) && $_GET['sort_label'] != '')
      {
          $AND .= " AND o.label='" . $_GET['sort_label'] . "' ";
      }
      if (isset ($_GET['lab']))
      {
          $AND .= " AND o.label IN(" . implode (',', $_GET['lab']) . ")";
      }
      if (isset ($_GET['delivery']))
      {
          $AND .= " AND o.delivery IN(" . implode (',', $_GET['delivery']) . ")";
      }
      if (isset ($_GET['meneger']) && $_GET['meneger'] > 0)
      {
          $AND .= " AND o.meneger='" . $_GET['meneger'] . "'";
      }
      
      $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, o.`mktime` as order_date, u.group, o.id as order_id, m.*, m.product_id as mod_id, op.* , p.*, g.color as group_color,za.username as meneger_name

                  FROM catalogs_orders as o
                  LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id
                  LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id 
                  LEFT JOIN catalogs_products AS p ON p.id = m.product_id 
                  LEFT JOIN zlo_users as u ON u.id=o.user_id
                  LEFT JOIN zlo_users_group as g ON g.id=u.group
  				LEFT JOIN zlo_admin as za ON za.id=o.meneger

                  WHERE " . $eshka3 . $eshka4 . $eshka./*((!isset($_GET['search']))?"o.status='".$_GET['status']."'":"o.status>'0'").*/"1=1 $AND GROUP BY o.id ORDER BY o.$order $type  ";
      
      $pager['sql'] = $sql;
      // echo $pager['sql'];
      $pager = pagerGetRun ($pager, 50, 15);
      $result = mysql_query ($pager['sql']) or die (mysql_error ());
      if (mysql_affected_rows () != 90800)
      {

          // =============

          // === Òàáñ ====
          // =============

          echo "<div class='clear'></div>";
          echo "<div class='order-tabs'>";
          // ////$eshka2.$eshka

          $sql0 = "SELECT * FROM zlo_book_status WHERE id IN (1,2,4,5)";

          $result0 = mysql_query ($sql0) or die (mysql_error ());
          if (mysql_affected_rows () != 0)
          {
              while ($rows = mysql_fetch_assoc ($result0))
              {
                  
                  // $AND
                  

                  // Ïîäñ÷åò êîëè÷åñòâà çàêàçîâ ïî ñòàòóñó
                  $sql2 = "SELECT count(o.id) AS calc, o . * , m.*, m.product_id as mod_id, op.* , p.*
                  FROM catalogs_orders as o
                  LEFT JOIN catalogs_orders_products as op ON op.order_id=o.id
                  LEFT JOIN catalogs_modifications AS m ON m.id = op.product_id 
                  LEFT JOIN catalogs_products AS p ON p.id = m.product_id 
                  LEFT JOIN zlo_users as u ON u.id=o.user_id
                  LEFT JOIN zlo_users_group as g ON g.id=u.group

                  WHERE " . $eshka2 . "o.status='" . $rows['id'] . "' $AND";
                  
                  // if(trim($_REQUEST['test'])=="1") echo $sql2;
                  
                  /*
                   * $sql2 = "SELECT count(o.id) AS calc FROM catalogs_orders as o WHERE ".$eshka2."o.status='".$rows['id']."'";
                   *
                   *
                   * $result2 = mysql_query($sql2) or die(mysql_error());
                   * $row2=mysql_fetch_assoc($result2);
                   * $yyyyyy = str_replace("prs=1","prs=0",str_replace("pr=1","pr=0",urlQueryChange2('status',$rows['id'])));
                   * echo"<div class='status-tabs' ".(($_GET['status']==$rows['id'])?"style='border:1px solid red;'":"")." onclick=\"location.href='".$yyyyyy."'\">".$rows['title']."(".$row2['calc'].")</div>";
                   */
              }

          }

          
          $array_label = array (
              0 => "íîâûå çàêàçû",
              1 => "îáðàáîòàí",
              110 => "ïåðåìåùàåòñÿ",
              2 => "äîñòàâèòü",
              3 => "îòïðàâèòü",
              4 => "ñàìîâûâîç",
              5 => "",
              510 => "",
              6 => "",
              610 => "",
              7 => "âîçâðàò",
              8 => "",
              9 => "îòìåíåí",
              10 => "âûïîëíåí" 
          );
          print '
          <div style="float:left;padding:10px 0px;">
          <form action="/admin.php/orders/" name="form" method="get">
          <input type="hidden" name="stat" value="' . $_GET['stat'] . '">
          <input type="hidden" name="look" value="' . $_GET['look'] . '">
          <input type="hidden" name="field" value="' . $_GET['field'] . '">
          <input type="hidden" name="form[date_start]" value="' . $dateStart . '">
          <input type="hidden" name="form[date_end]" value="' . $dateEnd . '">
          <input type="hidden" name="page" value="1">
          <input type="hidden" name="search" value="ok">
          ';
          for ($i = 0; $i <= 10; $i ++)
              foreach ($array_label as $i => $v)
              {
                  $sql = "select count(*) from catalogs_orders o where o.label='" . $i . "'";
                  if (isset ($_GET['stat']) && $_GET['stat'] == 1)
                  {
                      $sql .= " AND o.status IN(4,5)";
                  }
                  else
                  {
                      $sql .= $mk_and;
                  }
                  $r = mysql_query ($sql) or die (mysql_error ());
                  $count = mysql_result ($r, 0);
                  print '<input type="checkbox" id="cb' . $i . '" name="lab[]" value="' . $i . '" ';
                  // .(($_GET['label'][$i]==$i)?'checked':'').
                  foreach ($_GET['lab'] as $l)
                  {
                      if ($l == $i)
                          print 'checked';
                  }
                  $i = ($i == 110) ? 1.1 : $i;
                  $i = ($i == 510) ? 5.1 : $i;
                  $i = ($i == 610) ? 6.1 : $i;
                  print ' onclick="document.form.submit();"/><label for="cb' . $i . '">' . $i . '-' . $array_label[$i] . '(' . $count . ')</label>';
              }
          print "<br /><br /><br />";
          
          print "<select name='meneger' onChange='document.form.submit();'>";
          print "<option value='0'>Ìåíåäæåð</option>";
          $result_1 = mysql_query ("select * from zlo_admin");
          while ($row = mysql_fetch_assoc ($result_1))
          {
              echo "<option value='" . $row["id"] . "' " . (($_GET['meneger'] == $row["id"]) ? "selected" : "") . ">" . $row["username"] . "</option>";
          }
          print "</select>";
          
          $sql = "select * from zlo_book_delivery";
          $r = mysql_query ($sql) or die (mysql_error ());
          $i = 0;
          while ($row = mysql_fetch_assoc ($r))
          {
              print '<input type="checkbox" id="delivery_' . $i . '" name="delivery[]" value="' . $row['id'] . '" ';
              foreach ($_GET['delivery'] as $l)
              {
                  if ($l == $row['id'])
                      print 'checked';
              }
              print ' onclick="document.form.submit();"/><label for="delivery_' . $i . '">' . $row['title'] . '</label>';
              $i ++;
          }
          print '</form></div>';
          
          $tim = (time () - 86400);
          $sql3 = "
                  SELECT count(*) count FROM catalogs_orders WHERE `status`=1 AND `upd`<'" . date ("Y-m-d H:i:s", $tim) . "';";
          $result3 = mysql_query ($sql3) or die (mysql_error ());
          $row3 = mysql_fetch_assoc ($result3);
          $yyyyyt = "";
          if (trim ($_REQUEST['pr']) == "1")
              $yyyyyt = "font-weight:bold; ";
          
          $tim2 = (time () - 172800);
          $sql4 = "
                  SELECT count(*) count FROM catalogs_orders WHERE `status`=2 AND `upd`<'" . date ("Y-m-d H:i:s", $tim2) . "';";
          $result4 = mysql_query ($sql4) or die (mysql_error ());
          $row4 = mysql_fetch_assoc ($result4);
          $yyyyyt2 = "";
          if (trim ($_REQUEST['prs']) == "1")
              $yyyyyt2 = "font-weight:bold; ";
          
          echo "

  		<div class='status-tabs' style=\"" . $lll . "\" onclick=\"location.href='" . urlQueryChange2 ('stat', "1") . "&page=1'\">Êîðçèíà</div>";
          echo "

         <div class='status-tabs'>
      		  <a href=\"/order/index.php\" target=\"_blank\" style=\"text-decoration:none; color:#157100\">Ñòàòèñòèêà çàêàçîâ</a>
          </div>
      		</div>
              <!--<div class='clear'></div>
      	<div onclick=\"location.href='?pr=1&status=1&page=1'\" style=\"" . $yyyyyt . "cursor:pointer; float: left; font-family: Arial,Helvetica,sans-serif; font-size: 12px; margin-left:25px;\">
      	Ïðîñòð. (" . $row3['count'] . ")
      	</div>
      
      	<div onclick=\"location.href='?prs=1&status=2&page=1'\" style=\"" . $yyyyyt2 . "cursor:pointer; float: left; font-family: Arial,Helvetica,sans-serif; font-size: 12px; margin-left:45px;\">
      	Ïðîñòð. (" . $row4['count'] . ")
      	</div>-->
          <div class='clear'></div>
          <div>&nbsp;</div>

  		";
          
          // ===================

          // === ÏÐÎÄÎËÆÅÍÈÅ ===
          // ===================
  
          $url_l = '/admin.php/orders/?look=' . $_GET['look'] . '&field=' . $_GET['field'] . '&form[date_start]=' . $dateStart . '&form[date_end]=' . $dateEnd . '&search=ok&stat=' . $_GET['stat'] . '&page=' . $_GET['page'] . '&';
          foreach ($_GET['lab'] as $lab)
          {
              $url_l .= "lab[]=" . $lab . "&";
          }
          foreach ($_GET['delivery'] as $delivery)
          {
              $url_l .= "delivery[]=" . $delivery . "&";
          }
          // print $url_l;
          print "<table border='0' width='100%' cellpadding='6' cellspacing='1' bgcolor='#d7decc' style='border-radius:10px;'>

  				<tr style='color:#acd2f6;text-align:center;' bgcolor='#1372c6'>

  				<td width='50' style='border-radius:10px 0px 0px 0px;'><a style='color:#acd2f6;' href='" . $url_l . "stat=" . $_GET['stat'] . "&order=id&type=" . (($_GET['type'] == "asc") ? "desc" : "asc") . "'>Íîìåð çàêàçà</a></td>
  				<td width='90'><a style='color:#acd2f6;' href='" . $url_l . "stat=" . $_GET['stat'] . "&order=mktime&type=" . (($_GET['type'] == "asc") ? "desc" : "asc") . "'>Äàòà çàêàçà</a></td>

  				<td width='90'>Äåäëàéí</td>
  				<td width='150'>ÔÈÎ</td>

  				<td width='50'><a style='color:#acd2f6;' href='" . $url_l . "stat=" . $_GET['stat'] . "&order=total&type=" . (($_GET['type'] == "asc") ? "desc" : "asc") . "'>Îáùàÿ ñóììà</a></td>
  				<td width='50'><a style='color:#acd2f6;' href='" . $url_l . "stat=" . $_GET['stat'] . "&order=paid&type=" . (($_GET['type'] == "asc") ? "desc" : "asc") . "'>Îïëà÷åí</a></td>

  				<td>Òåëåôîí</td>
  				<td width='300'>Àäðåñ</td>

  				<td><a style='color:#acd2f6;' href='" . $url_l . "stat=" . $_GET['stat'] . "&order=label&type=" . (($_GET['type'] == "asc") ? "desc" : "asc") . "'>Ìåòêà</a></td>

  				<td>Ñòàòóñ</td>
  				<td width='150'>Êîìåíòàðèé ìåíåäæåðà</td>
  				<td style='border-radius:0px 10px 0px 0px;' width='100'>ÑÌÑ</td>
  				</tr>";

          $i1 = 0;
          while ($order = mysql_fetch_assoc ($result))
          {
              // print_r($order);
              if (empty ($order['order_id']))
                  $order['order_id'] = 0;
              print "	<tr style='text-align:center;' bgcolor='" . ((($i1 % 2) == 0) ? "#fefff5" : "#eff5e7") . "'>
  				<td id='ID{$order['order_id']}'><a href='" . $url_l . (($_GET['order_ID'] != $order['order_id']) ? "order_ID={$order['order_id']}#ID{$order['order_id']}" : "") . "'>{$order['order_id']}</a><br />{$order['meneger_name']}</td>
  				<td width='90'>" . date ('Y-m-d H:i:s', $order['order_date']) . "</td>
  				<td width='90' style='color:" . ($order['dedline'] < date ("Y-m-d") ? 'red' : 'black') . "'>" . $order['dedline'] . "</td>
  				<td width='150' align='left'><!--<a href='/admin.php/users/?action=edit&user=" . $order['user_id'] . "'>-->" . $order['username'] . "<!--</a>--></td>
  				<td width='50'>{$order['total']}</td>
  				<td width='50'>";
              
              if ($_SESSION['admin']['group'] == 1 || $_SESSION['admin']['group'] == 4 || $_SESSION['admin']['group'] == 6)
              {
                  echo "<select onChange='document.location=\"" . $url_l . "orderID={$order['order_id']}&paid=\"+this.value;'>
  				<option value='0' " . (($order['paid'] == 0) ? 'selected' : '') . ">íåò</option>
  				<option value='1' " . (($order['paid'] == 1) ? 'selected' : '') . ">äà</option>
  				</select>";
              }
              else
              {
                  if ($order['paid'] == 1)
                      print "Äà";
                  else
                      print "Íåò";
              }
              
              echo "
              </td>
  				<td>{$order['tel']}<br/> <a href='/admin.php/sms/?orderID={$order['order_id']}'>Îòïðàâèòü CMC</a></td>
  				<td align='left'>{$order['city']}, {$order['address']}</td>
  			<td>";
              
              // if($_SESSION['admin']['group']==1 || $_SESSION['admin']['group']==4){
              
              if ($_SESSION['admin']['group'] == 2 and ($order['label'] == 9 or $order['label'] == 10))
              {
                  print $order['label'];
              }
              else
              {
                  echo " <select onChange='if(this.value==9){o=\"&order_ID={$order['order_id']}\"}else{o=\"\";}document.location=\"" . $url_l . "orderID={$order['order_id']}&label=\"+this.value+o;'> ";
                  for ($i = 0; $i <= 10; $i ++)
                  {

                      if (($_SESSION['admin']['group'] == 2) && ($i == 9 || $i == 10) && ($_SESSION['admin']['id'] != 17))
                      {
                      }
                      elseif ($i == 10 && $_SESSION['admin']['id'] == 19)
                      {
                      }
                      else
                          print '<option value="' . $i . '" ' . (($order['label'] == $i) ? 'selected' : '') . '>' . $i . '</option>';
                      if ($i == 1)
                      {
                          print '<option value="110" ' . (($order['label'] == 110) ? 'selected' : '') . '>1.1</option>';
                      }
                      if ($i == 5)
                      {
                          print '<option value="510" ' . (($order['label'] == 510) ? 'selected' : '') . '>5.1</option>';
                      }
                      if ($i == 6)
                      {
                          print '<option value="610" ' . (($order['label'] == 610) ? 'selected' : '') . '>6.1</option>';
                      }

                  }

                  echo "</select>";

              }
              

              // }else{
              // print $order['label'];
              // }

              $s = "select * from catalogs_orders_products where order_id=" . $order['order_id'];
              $r = mysql_query ($s) or die (mysql_error ());
              $status = array ();
              while ($op = mysql_fetch_assoc ($r))
              {
                  if (! empty ($op['status']))
                      $status[] = $op['status'];
              }
              echo "</td>
  				<td>" . implode (', ', $status) . "</td>
  				<td align='left'>";
              if (strlen ($order['mcomment']) > 0)
                  print "<a href='#' rel='msg' title='{$order['mcomment']}'>" . substr ($order['mcomment'], 0, 30) . "...</a>";
              print "</td>
  				";
              print "<td>" . $order['smst'] . "</td>";

              // ***** Àäìèí ðåæèì *****
              if (isset ($_SESSION['admin']['edit1']))
              {
                  
                  // Ñìåíà ñòàòóñà
                  if ($order['status'] != 6)
                  {
                      echo "

                          <td width='20'>";

                      $sql4 = "SELECT * FROM zlo_book_status  WHERE id IN ({$order['status']})";
                      $result4 = mysql_query ($sql4) or die (mysql_error ());
                      if (mysql_affected_rows () != 0)
                      {
                          while ($row4 = mysql_fetch_assoc ($result4))
                          {
                              if ($row4['id'] != "5")
                                  echo $row4['title'];
                          }
                      }
                      echo " 

                           </td><td width='20'>

  						 <div id='records'><a href='/admin.php/orders/?action=edit&user=" . $order['user_id'] . "&order=" . $order['order_id'] . "' class='button-edit2' target='_blank'>Èçìåíèòü</a></div>

                          </form></td>
                    ";

                  }

              }

              print "</tr>";
              if ($order['order_id'] == $_GET['order_ID'])
              {
                  
                  print '<tr><td colspan="12">';
                  // =========== Ãåíåðèì òàáëèöó ===========
                  
                  $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, o.adress as address, g.name as user_group, g.color as user_color

                  FROM catalogs_orders as o
                  LEFT JOIN zlo_users as u ON u.id=o.user_id
                  LEFT JOIN zlo_users_group as g ON g.id=u.group

                  WHERE o.id='" . $_GET['order_ID'] . "'";
                  $result1 = mysql_query ($sql) or die (mysql_error ());
                  if (mysql_affected_rows () != 0)

                  {

                      
                      $order = mysql_fetch_assoc ($result1);
                      
                      $r = mysql_query ("select * from card where user_id='" . $order['user_id'] . "'") or die (mysql_error ());
                      $c = mysql_fetch_assoc ($r);
                      $order['cards'] = $c['card'];
                      
                      echo "<form action='$url_l' method='POST' name='edit_order' id='add-item'>";
                      echo "<div class='orders' style='margin:0px;'>";
                      
                      echo "
                      <div class=order-info>
                      <fieldset id='order-info'>
                      <legend>Çàêàç #" . $order['order_id'] . " &nbsp;&nbsp;&nbsp;Ãðóïïà: <font color='" . $order['user_color'] . "'>" . $order['user_group'] . "</font>&nbsp;&nbsp;&nbsp; Cóììà: " . $order['total'] . " ãðí.</legend> 	
                      <div style='float:left;'>
                          <label>Äàòà:</label>
                          <div class=info>" . date ('d-m-Y H:i:s', $order['mktime']) . "</div>
                          <label>Äåäëàéí:</label>
                          <div class=info>
                              <input type='text' id='dedline_input' name='user[dedline]' value='" . $order['dedline'] . "' style='width:100px;'><img src='/img/calendar.gif' id='date_dedline'>
                          <script type=\"text/javascript\">
                            Calendar.setup(
                              {
                                inputField  : \"dedline_input\",         // ID of the input field
                                ifFormat    : \"%Y-%m-%d\",    // the date format
                                button      : \"date_dedline\"
                              }
                            );
                          </script>
  					</div>			
                                      

  				<label>Îïëà÷åí:</label>
  				<div class=info style='float:left;padding-right:20px;'>";

                      
                      if ($_SESSION['admin']['group'] == 1 || $_SESSION['admin']['group'] == 4 || $_SESSION['admin']['group'] == 6)
                      {
                          echo "<select name='paid'>
  					<option value='0' " . (($order['paid'] == 0) ? 'selected' : '') . ">íåò</option>	
  					<option value='1' " . (($order['paid'] == 1) ? 'selected' : '') . ">äà</option>		

  					</select>";

                      }
                      else
                      {
                          if ($order['paid'] == 1)
                              print "Äà";
                          else
                              print "Íåò";
                          echo "<input type=\"hidden\" name=\"paid\" value=\"" . $order['paid'] . "\">";
                      }
                      
                  echo "</div>
                      

  				<div class=info style='float:left;padding-right:20px;width:100px;'>
  				<label style='width:50px'>Ìåòêà:</label>
  				<div class=info>";

                      
                      // ////////if($_SESSION['admin']['group']==1 || $_SESSION['admin']['group']==4){
                      echo "<select name='label'>";
                      for ($i = 0; $i <= 10; $i ++)
                      {
                          if (($_SESSION['admin']['group'] == 2) && ($i == 9 || $i == 10) && ($_SESSION['admin']['id'] != 17))
                          {
                          }
                          elseif ($i == 10 && $_SESSION['admin']['id'] == 19)
                          {
                          }
                          else
                              print '<option value="' . $i . '" ' . (($order['label'] == $i) ? 'selected' : '') . '>' . $i . '</option>';
                          if ($i == 1)
                          {
                              print '<option value="110" ' . (($order['label'] == 110) ? 'selected' : '') . '>1.1</option>';
                          }
                          if ($i == 5)
                          {
                              print '<option value="510" ' . (($order['label'] == 510) ? 'selected' : '') . '>5.1</option>';
                          }
                          if ($i == 6)
                          {
                              print '<option value="610" ' . (($order['label'] == 610) ? 'selected' : '') . '>6.1</option>';
                          }
                      }
                      
                      echo "</select>";
                      // //////////}else{
                      // ////////////echo $order['label'];
                      // ///}
                      
                      echo " </div>				

                  </div>
  				<div>
  				<label style='width:60px'>Ïðè÷èíû:</label>
  				
  				<div class=info>
  				<select name='cause' style='width:70px;'>

      				<option value='0'></option>
      				<option value='1' " . (($order['cause'] == 1) ? 'selected' : '') . ">Íåò òîâàðà</option>
      				<option value='2' " . (($order['cause'] == 2) ? 'selected' : '') . ">Íåò îïëàòû</option>
      				<option value='3' " . (($order['cause'] == 3) ? 'selected' : '') . ">Ïåðåäóìàë</option>
      
      				<option value='31' " . (($order['cause'] == 31) ? 'selected' : '') . "> - Êóïèë â äðóãîì ìåñòå</option>
      				<option value='32' " . (($order['cause'] == 32) ? 'selected' : '') . "> - Íå ïîäîøëè óñëîâèÿ äîñòàâêè</option>
      				<option value='33' " . (($order['cause'] == 33) ? 'selected' : '') . "> - Íå ïîäîøåë ñðîê äîñòàâêè</option>
      				<option value='34' " . (($order['cause'] == 34) ? 'selected' : '') . "> - Íåò äåíåã</option>
      				<option value='35' " . (($order['cause'] == 35) ? 'selected' : '') . "> - Êóïèò ïîçæå</option>
      				
      				<option value='4' " . (($order['cause'] == 4) ? 'selected' : '') . ">Êóïèë â äðóãîì ìåñòå</option>
      				<option value='5' " . (($order['cause'] == 5) ? 'selected' : '') . ">Ïîäüåäåò â ìàã.</option>
      				<option value='6' " . (($order['cause'] == 6) ? 'selected' : '') . ">Äóáëü çàêàçà.</option>
      				<option value='7' " . (($order['cause'] == 7) ? 'selected' : '') . ">Äðóãîå</option>
      				
      				<option value='8' " . (($order['cause'] == 8) ? 'selected' : '') . ">Áðàê</option>
      				<option value='9' " . (($order['cause'] == 9) ? 'selected' : '') . ">Îòêàçàëñÿ îò Ñàìîâûâîçà</option>
      				<option value='10' " . (($order['cause'] == 10) ? 'selected' : '') . ">Íå ïðèåõàë çà Ñàìîâûâîçîì</option>
      				<option value='11' " . (($order['cause'] == 11) ? 'selected' : '') . ">Îòìåíèë çàêàç</option>
      				<option value='12' " . (($order['cause'] == 12) ? 'selected' : '') . ">Íå áåðåò òðóáêó</option>
      				
      
      				
      				<option value='13' " . (($order['cause'] == 13) ? 'selected' : '') . ">Òîâàð íå ñîîòâåòñòâóåò îïèñàíèþ íà ñàéòå</option>
      				<option value='14' " . (($order['cause'] == 14) ? 'selected' : '') . ">Âîçâðàò</option>				

  				</select>
  				</div>
  				
  				</div><div style='clear:both'></div>
  				<label>Êëèåíò:</label>
                  <div class=info>

                      <input type='text' name='user[username]' value='" . $order['username'] . "' style='width:300px;' disabled='disabled'>
                      <input type='hidden' name='user[username]' value='" . $order['username'] . "'>
  					<input type='hidden' name='user[id]' value='" . $order['user_id'] . "'>

                  </div>
  
                  <label>Email:</label>
                  <div class=info>

                      <input type='text' name='user[email]' value='" . $order['email'] . "' style='width:300px;' disabled='disabled'>
                      <input type='hidden' name='user[email]' value='" . $order['email'] . "'>

                  </div>";
                      
                  // ==== TEL ====

                  $disabled_tel = $_SESSION['admin']['group'] == 1 ? '' : "disabled='disabled'";
                  
                  echo "

                  <label>Òåëåôîí:</label>

                  <div class='info tel'>
                      <input type='text' name='user[tel]' value='" . $order['tel'] . "' style='width:270px;' ".$disabled_tel.">

                      <input type='hidden' name='user[tel]' value='" . $order['tel'] . "'>
  					<input type='checkbox' name='sms_tel[]' id='sms_tel1' value='" . $order['tel'] . "'>

                  </div>
                  
                  <label>Òåëåôîí 2:</label>

                  <div class='info tel'>
                      <input type='text' name='user[tel2]' value='" . $order['tel2'] . "' style='width:270px;' ".$disabled_tel.">

                      <input type='hidden' name='user[tel2]' value='" . $order['tel2'] . "'>
  					<input type='checkbox' name='sms_tel[]' id='sms_tel2' value='" . $order['tel2'] . "'>

                  </div>";

  		        echo "

                  <label>¹ êàðòî÷êè:</label>
                  <div class=info>

                      <input type='text' name='user[cards]' value='" . $order['cards'] . "' style='width:300px;' disabled='disabled'>
                      <input type='hidden' name='user[cards]' value='" . $order['cards'] . "'>

                  </div>
  				
  				 <label>Êîìåíòàðèé:</label><br />

                  <div class=info><textarea rows='4' style='width:400px;' name='user[comment]' cols='30' name='comment'>" . $order['comment'] . "</textarea></div>

  				
  				<label>Îòïðàâêà ÑÌÑ:</label>";

                      global $setup;
                      $res = $setup->db->getAll ("select * from sms_tpl", array (), DB_FETCHMODE_ASSOC);
                      echo "

                  <div class=info>
                      <select  name='sms_tpl' id='sms_tpl' style='width:300px'>
  					<option value='0'>ÂÛÁÐÀÒÜ ØÀÁËÎÍ</option>";

                      foreach ($res as $row)
                      {
                          echo "<option value='" . $row['id'] . "'>" . $row['title'] . "</option>";
                      }
                      echo "</select>

                  </div>";

                      $sms_count = $setup->db->getOne ("select count(*) from sms_history where order_id=?", array (
                          $order['id'] 
                      ));
                      echo "<div class=info><div style='float:left;margin-right:10px;'><textarea rows='4' style='width:400px;' name='sms_msg' id='sms_msg' cols='30' ></textarea><br /><input type='radio' name='sms_type' id='sms_type' value='l' checked />ëàòèíèöà <input type='radio' name='sms_type' id='sms_type' value='k' />êèðèëèöà  Êîëëè÷åñòâî ñèìâîëîâ <span id='sms_c'>0</span> (<span id='sms_c_sum'></span>)</div>";
                      echo "<div style='float:left'><a href='/admin.php/sms_history/?orderID=" . $order['id'] . "' target='_blank'>Èñòîðèÿ</a>";
                      echo "<br /><input type='submit' style='margin-top:4px;' class='submit_green' id='sms_send' value='Îòïðàâèòü' name='sms_send'>
  				<br />Îòïðàâëåíî ÑÌÑ (" . $sms_count . ")</div>";
                      echo "</div>";
                      

                  echo "</div>

                  <div style='float:right;'>
                  <label>Äîñòàâêà</label>";

  
                  echo "

                  <div class=info>
                      <select  name='user[delivery]' style='width:300px'>";

                      viewBookSelectValue ('zlo_book_delivery', 'id', 'title', $order['delivery']);
                      echo "</select>

                  </div>";

                  echo "  

                  <label>Äåêëàðàöèÿ ¹:</label>

                  <div class=info><input type='text' name='user[declaration]' style='width:300px;' class=\"validate[required]\" value='" . $order['declaration'] . "' id='declarationValidate'></div>";
                      

                  echo "  

                  <label>¹ ñêëàäà:</label>

                  <div class=info><input type='text' name='user[warehouse]' style='width:300px;' class=\"validate[required]\" value='" . $order['warehouse'] . "' id='warehouseValidate'></div>";
                      

                  echo "  

                  <label>¹ íàêëàäíîé:</label>

                  <div class=info><input type='text' name='user[nakladnaya]' style='width:300px;' class=\"validate[required]\" value='" . $order['nakladnaya'] . "' id='nakladnayaValidate'></div>";
                      
                      $array_method = array (
                          "Îïëàòèòü íàëè÷íûìè",
                          "Îïëàòèòü íà êàðòó Ïðèâàò Áàíêà",
                          "Îïëàòèòü ïî áåçíàëè÷íîìó ðàñ÷åòó",
                          "Îïëàòèòü Ïðàâåêñ-òåëåãðàô",
                          "Íàëîæåííûì ïëàòåæîì",
                          "Îïëàòèòü íà Áàíê Áîãóñëàâ" 
                      );

                  echo "

  				<div class=info>
  				<label>Ñïîñîá îïëàòû:</label>
  				<select  name='user[payment]' style='width:300px'><option value=''></option>";

                      foreach ($array_method as $method)
                      {
                          echo '<option value="' . $method . '" ';
                          if ($order['payment'] == $method)
                              echo 'selected';
                          echo '>' . $method . '</option>';
                      }
                      echo "</select>

                  </div>";

                  echo "<label>Ñòðàõîâêà:</label>

                  <div class=info><input type='text' name='user[insurance]' style='width:300px;' class=\"validate[required]\" value='" . $order['insurance'] . "' id='insuranceValidate'></div>";
                      $sumn_disabled = "";
                      if ($_SESSION['admin']['id'] == 22 || $_SESSION['admin']['id'] == 7 || $_SESSION['admin']['id'] == 1 || $_SESSION['admin']['id'] == 19)
                          $sumn_disabled = "";
                      else
                          $sumn_disabled = "disabled";

                  echo "<label>Ñóììà íàëîæåííîãî:</label>

                  <div class=info><input type='text' name='user[sumn]' style='width:300px;' class=\"validate[required]\" value='" . $order['sumn'] . "' id='sumnValidate' $sumn_disabled></div><br />";
                      $array_method = array (
                          "Ïîëó÷àòåëÿ",
                          "Îòïðàâèòåëÿ" 
                      );
                      echo "

  				<div class=info>
  				<label>Îòïðàâêà çà ñ÷åò:</label>
  				<select  name='user[sends]' style='width:300px'><option value=''></option>";

                      foreach ($array_method as $method)
                      {
                          echo '<option value="' . $method . '" ';
                          if ($order['sends'] == $method)
                              echo 'selected';
                          echo '>' . $method . '</option>';
                      }
                      echo "</select>

                  </div>";

                      echo "<label>Ãîðîä:</label>
                  <div class=info><input type='text' name='user[city]' style='width:300px;' class=\"validate[required]\" value='" . $order['city'] . "' id='cityValidate'></div>

  
                  <label>Àäðåñ:</label>

                  <div class=info><input type='text' name='user[address]' style='width:300px;' class=\"validate[required]\" value='" . $order['address'] . "' id='addressValidate'></div>

  
                  <label>Êîìåíòàðèé (ìåíåäæåðà):</label>

                  <div class=info><textarea rows='4' id='mcomment' style='width:400px;' name='user[mcomment]' cols='30' name='mcomment'>" . $order['mcomment'] . "</textarea></div>

  				
  				";

                      $disabled = "";
                      if ($order['meneger'] > 0)
                      {
                          if ($_SESSION['admin']['id'] != 1 and $_SESSION['admin']['id'] != 7 and $_SESSION['admin']['group'] != 1)
                          {
                              $disabled = "disabled";
                          }
                      }
                      // print_r($_SESSION['admin']['group']);

                      echo "
                      <label>Ìåíåäæåð:</label>
      				<div class=info><select name='meneger' $disabled>
      				<option value='0' " . (($_SESSION['admin']['group'] != 1) ? 'disabled' : '') . "></option>";
                      

                      $selected = ($order['meneger'] > 0) ? $order['meneger'] : $_SESSION['admin']['id'];
                      
                      $result_1 = mysql_query ("select * from zlo_admin");
                      while ($row = mysql_fetch_assoc ($result_1))
                      {
                          echo "<option value='" . $row["id"] . "' " . (($selected == $row["id"]) ? 'selected' : '') . " " . (($_SESSION['admin']['group'] != 1 && $selected != $row["id"]) ? 'disabled' : '') . ">" . $row["username"] . "</option>";
                      }
                      echo "</select>";
                      if ($disabled == "disabled")
                      {
                          echo "<input type='hidden' name='meneger' value='" . $order['meneger'] . "'>";
                      }
                      echo "</div>";
                      
                      $disabled = "";
                      if ($_SESSION['admin']['id'] != 7 and $_SESSION['admin']['id'] != 17)
                      {
                          $disabled = "disabled";
                      }

                      
                      echo "
                      <label>×åê:</label>
                      <div class=info><input $disabled type='text' name='user[check]' style='width:300px;' class=\"validate[required]\" value='" . $order['check2'] . "' id='checkValidate'></div>";
                      

                      if ($disabled == "disabled")
                      {
                          echo "<input type='hidden' name='user[check]' value='" . $order['check2'] . "'>";
                      }

                      echo "<label>SMS:</label>
                  <div class=info><input type='text' name='user[smst]' style='width:300px;' class=\"validate[required]\" value='" . $order['smst'] . "' id='smstValidate'></div>";
                      
                      echo "</div>

              </fieldset>
              <div class=clear></div>
              </div>";

              // Òàáëèöà òîâàðîâ
              
              $sql3 = "SELECT * FROM catalogs_orders_products
               WHERE `order_id`='" . $order['order_id'] . "' ";
              $result3 = mysql_query ($sql3) or die (mysql_error ());
              if (mysql_affected_rows () != 0)
              {
                  $i = 0;
                  echo "

                  <fieldset id='order-details'>
                  <legend>Òîâàðû</legend>
                  <div class='table'>
                      <div class='count'>¹</div>
                      <div class='code'>Êîä</div>
                      <div class='brand'>Áðåíä</div>
                      <div class='title'>Íàéìåíîâàíèå</div>
                      <div class='size'>Ðàçìåð</div>
                      <div class='color'>Öâåò</div>
                      <div class='quant'>Êîë.</div>
                      <div class='price'>Öåíà</div>
                      <div class='total'>Ñóììà</div>
  					<div class='reservation'>Áðîíü</div>
  					<div class='status'>Ñòàòóñ</div>
  					<div class='status'>Âîçâðàò</div>
                      <div class='onstock'>Íàëè÷èå</div>
                      <div class='control' style='float:right;'><a href='javascript:return false;' onclick='AddRow()'><img src='/account/pic/add2.png' width='18px'></a></div>
                      <div class='clear'></div>
                  </div>
                  <div id='lines'>
                      <!--  Ïðÿ÷åì ýòó ñòðî÷êó, òàê êàê ÿâàñêðèïò êîïèïóåò ïåðâóþ ñòðî÷êó êàê ïóñòóþ -->
                      <div id='line0'>
                          <div class='row'>
                              <div class='count' id='id(0)'>1</div>
                              <div class='code'>
                                  <input type='text' name='item[code][]' value='' id='code(0)' autocomplete='off' onkeyup=flyFind(this.value,'(0)') onkeydown=selectFirst(event.keyCode)>
                                  <!-- search --->
                                  <div class='livesearch-block'>
                                  <div id='livesearch(0)'></div>
                                  </div>
                                  <!-- --->
                              </div>    
                              <div class='brand' id='brand(0)'>&nbsp;</div>
                              <div class='title' id='title(0)'>&nbsp;</div>
                              <div class='size' id='size(0)'>&nbsp;</div>
                              <div class='color' id='color(0)'>&nbsp;</div>
                              <div class='quant'><input type='text' name='item[quant][]' value='1' id='quantValue(0)' onBlur='SumPerRow();'></div>
                              <div class='price' id='price(0)'>0</div>
                              <div class='total' id='total(0)'>0</div>
  							<div class='reservation'><input type='text' size='3' name='item[reservation][]' /></div>
                              <div class='status'>";