// Ïîäêëþ÷åíèå
include_once($_SERVER['DOCUMENT_ROOT']."/account/mods/autorizator_admin.php");
include_once($_SERVER['DOCUMENT_ROOT']."/account/class/class.report.php");
include_once($_SERVER['DOCUMENT_ROOT']."/account/func/func.php");
// ======================================
// ======================================
// ============ Îáðàáîòêà ===============
// ======================================
// ======================================
if($_GET['test'] == "1"){
//eMailing('order-new',"5172", "11181");
}
if(isset($_GET['orderID']) && isset($_GET['paid'])){
$sql = sprintf("UPDATE catalogs_orders SET paid=%d WHERE id=%d", $_GET['paid'], $_GET['orderID']);
mysql_query($sql);
}elseif(isset($_GET['label'])){
$sql = sprintf("UPDATE catalogs_orders SET label=%d WHERE id=%d", $_GET['label'], $_GET['orderID']);
mysql_query($sql);
}
// =============
// == status ===
// =============
//print_r($_POST);
//exit;
if ((isset($_POST['action']) && $_POST['action']=='status') || trim($_POST['status'])!='') {
$sql = "UPDATE catalogs_orders SET status='".$_POST['status']."' WHERE `id`='".$_POST['order_id']."'";
$result = mysql_query($sql) or die(mysql_error());
//exit;
}
// ====================
// ===== order ========
// ====================
// ==============
// ==== edit ====
// ==============
if(isset($_POST['sms_send'])){
$sql = "insert into sms_history(order_id,mktime,text,user) values('".$_POST['order_id']."','".mktime()."','".$_POST['sms_msg']."','".$_SESSION['admin']['login']."')";
mysql_query($sql);
foreach($_POST['sms_tel'] as $tel){
sendSMS($tel,$_POST['sms_msg']);
}
GoBack(1);
}
elseif (isset($_POST['send']) && $_POST['send']=='edit-order') {
$error='';
$error[] = ValidFormData($_POST['user']['email'],'email','email');
$error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require');
$error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require');
$error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile');
$error[] = ValidFormData($_POST['user']['username'],'èìÿ','require');
$alert=implode('\r\n',$error);
$mass=array_filter($error);
if (empty($mass)) {
$summary=0;
// Ïðîâåðÿåì åñòü ëè óæå â çàêàçàõ
$sql="SELECT *, product_id as mod_id from catalogs_orders_products WHERE order_id='".$_POST['order_id']."'";
$result = mysql_query($sql) or die(mysql_error());
if(mysql_affected_rows()!=0){
while($item=mysql_fetch_assoc($result)) {
$ordered[]=$item['mod_id'];
}
}
// ===========================================
// ======= Ïðîâåðÿåì íà èçìåíåíèå ===========
// ===========================================
$ChangesOfOrder = ChangesOfMass($_POST['item']['mod_id'],$ordered);
// ==========
// == same ==
// ==========
if (isset($ChangesOfOrder['same'])) {
$mass=array_filter($ChangesOfOrder['same']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['same'] as $value) {
// Óçíàåì key(èíäåêñ) â ìàññèâå
$i=array_keys($_POST['item']['mod_id'], $value); $i=$i[0];
// Îáíîâëÿåì êîëè÷åñòâî
//print_r($_POST);exit;
$sql2 = "UPDATE catalogs_orders_products SET `count`='".$_POST['item']['quant'][$i]."',`reservation`='".$_POST['item']['reservation'][$i]."',`status`='".$_POST['item']['status'][$i]."',`vozvrat`='".$_POST['item']['vozvrat'][$i]."' WHERE order_id='".$_POST['order_id']."' AND product_id='".$_POST['item']['mod_id'][$i]."'";
// print "
";
$result2 = mysql_query($sql2) or die(mysql_error());
// Ñóììà âñåãî çàêàçà
$summary=$summary+($_POST['item']['quant'][$i]*$_POST['item']['price'][$i]);
}
}
}
// ==========
// === add ==
// ==========
if (isset($ChangesOfOrder['add'])) {
$mass=array_filter($ChangesOfOrder['add']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['add'] as $value) {
// Óçíàåì key(èíäåêñ) â ìàññèâå
$i=array_keys($_POST['item']['mod_id'], $value); $i=$i[0];
// Äîáàâëÿåì òîâàðû
$sql2=sprintf("INSERT INTO catalogs_orders_products (order_id,product_id,code,product_cine_id,count,reservation) VALUES (%s,%s,%s,%s,%s,%s)",
GetSQLValueString($_POST['order_id'], "text"),
GetSQLValueString($_POST['item']['mod_id'][$i], "text"),
GetSQLValueString($_POST['item']['code'][$i], "text"),
GetSQLValueString($_POST['item']['price'][$i], "text"),
GetSQLValueString($_POST['item']['quant'][$i], "text"),
GetSQLValueString($_POST['item']['reservation'][$i], "text"));
$result2 = mysql_query($sql2) or die(mysql_error());
// Ñóììà âñåãî çàêàçà
$summary=$summary+($_POST['item']['quant'][$i]*$_POST['item']['price'][$i]);
}
}
}
// ==========
// == del ===
// ==========
/*
if (isset($ChangesOfOrder['del'])) {
$mass=array_filter($ChangesOfOrder['del']);
if (!empty($mass)) {
foreach ($ChangesOfOrder['del'] as $value) {
// Äîáàâëÿåì òîâàðû
$sql2="DELETE FROM catalogs_orders_products WHERE order_id='".$_POST['order_id']."' AND product_id='".$value."'";
$result2 = mysql_query($sql2) or die(mysql_error());
}
}
}
*/
// ===========
// == ÂÑÅÃÎ ==
// ===========
if (isset($summary)) {
//if(trim($_POST['label'])) $_POST['label'] = 1;
//print_r($_POST);
// Îáíîâëÿåì äàííûå çàêàçà
$sql2=sprintf("UPDATE catalogs_orders SET cards=%s,insurance=%s,warehouse=%s,nakladnaya=%s,cost_delivery=%s,paid=%s,cause=%s,label=%s,delivery=%s,declaration=%s,payment=%s,city=%s,adress=%s,comment=%s,mcomment=%s,total=%s,meneger=%s,check2=%s,smst=%s,dedline=%s,sumn=%s,sends=%s,work_user=%s WHERE id='".$_POST['order_id']."'",
GetSQLValueString($_POST['user']['cards'], "text"),
GetSQLValueString($_POST['user']['insurance'], "text"),
GetSQLValueString($_POST['user']['warehouse'], "text"),
GetSQLValueString($_POST['user']['nakladnaya'], "text"),
GetSQLValueString($_POST['cost_delivery'], "text"),
$_POST['paid'],
$_POST['cause'],
$_POST['label'],
$_POST['user']['delivery'],
GetSQLValueString($_POST['user']['declaration'], "text"),
GetSQLValueString($_POST['user']['payment'], "text"),
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['comment'], "text"),
GetSQLValueString($_POST['user']['mcomment'], "text"),
GetSQLValueString($summary, "text"),
$_POST['meneger'],
GetSQLValueString($_POST['user']['check'], "text"),
GetSQLValueString($_POST['user']['smst'], "text"),
GetSQLValueString($_POST['user']['dedline'], "text"),
GetSQLValueString($_POST['user']['sumn'], "text"),
GetSQLValueString($_POST['user']['sends'], "text"),
GetSQLValueString('0', "text")
);
$result2 = mysql_query($sql2) or die(mysql_error());
eMailing('xml',$_POST['user_id'], $_POST['order_id']);
$_SESSION['up'] = 1;
// header("location:/admin.php/orders/?page=".$_GET['page']);
} else {
//$sql2="DELETE FROM catalogs_orders WHERE id='".$_POST['order_id']."'";
//$result2 = mysql_query($sql2) or die(mysql_error());
}
// GoBack(1);
//echo"";
} else {
echo"";
}
}else{
if(!empty($_GET['exit_order_id'])){
$sql = sprintf("UPDATE catalogs_orders SET work_user=0 WHERE id=%d", $_GET['exit_order_id']);
mysql_query($sql);
}
if(empty($_SESSION['up']))$_SESSION['up'] = 2;
if(!empty($_GET['order_ID'])){
$sql = sprintf("UPDATE catalogs_orders SET work_user=%d WHERE id=%d AND work_user=0", $_SESSION['admin']['id'], $_GET['order_ID']);
mysql_query($sql);
}
}
// ==============
// ==== add =====
// ==============
if (isset($_POST['send']) && $_POST['send']=='add-order') {
// Ïðîâåðÿåì äûáèë ëè àäìèí
$debil==false;
for($i=1; $i<=count($_POST['item']); $i++) {
if(isset($_POST['item']['mod_id'][$i]) && $_POST['item']['mod_id'][$i]=='') { $debil=true; }
}
if( $debil==false) {
// $error='';
// $error[] = ValidFormData($_POST['user']['email'],'email','email');
// $error[] = ValidFormData($_POST['user']['city'],'ãîðîä','require');
// $error[] = ValidFormData($_POST['user']['address'],'àäðåñ','require');
// $error[] = ValidFormData($_POST['user']['tel'],'ìîá.òåëåôîí','mobile');
// $error[] = ValidFormData($_POST['user']['username'],'èìÿ','require');
// $alert=implode('\r\n',$error);
// $mass=array_filter($error);
// if (empty($mass)) {
// Ïðîâåðÿåì ñóùåñòâóåò ëè ïîëüçîâàòåëü
// $sql="SELECT * FROM zlo_users WHERE email='".$_POST['user']['email']."' ";
// $result = mysql_query($sql) or die(mysql_error());
// if (mysql_affected_rows()!=0) {
// }
$time=mktime();
$date=date('Y-m-d H:i:s',$time);
// Åñëè ñîçäàåì íîâîãî ïîëüçîâàòåëü
if($_POST['user']['user_id']=='' || $_POST['user']['user_id']==0 || $_POST['user']['user_id']=='0') {
if (strpos($_POST['user']['email'],"@user.com")) {
$_POST['user']['group']=1;
} else {
$_POST['user']['group']=2;
}
// Äîáàâëÿåì ïîëüçîâàòåëÿ
$pass=generate_password(6);
$sql = sprintf("INSERT INTO zlo_users (pass, email, city, address, tel, registered, username, tel2, `group`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($pass, "text"),
GetSQLValueString($_POST['user']['email'], "text"),
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['tel'], "text"),
GetSQLValueString($date, "text"),
GetSQLValueString($_POST['user']['username'], "text"),
GetSQLValueString($_POST['user']['tel2'], "text"),
GetSQLValueString($_POST['user']['group'], "int"));
$result = mysql_query($sql) or die(mysql_error());
// Óçíàåì ID ïîëüçîâàòåëÿ
$sql="SELECT id FROM zlo_users WHERE registered='$date' AND tel='".$_POST['user']['tel']."'";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$user=mysql_fetch_assoc($result);
// Øëåì ïèñüìà
if($user['group']!=1) {
eMailing('reg',$user['id']);
}
$_POST['user']['user_id']=$user['id'];
} else { echo "íåò ïîëüçîâàòåëÿ";}
}
// Äîáàâëÿåì çàêàç
$sql=sprintf("INSERT INTO catalogs_orders (cost_delivery,cards,insurance,warehouse,paid,label,delivery,declaration,payment,user_id,name,email,city,adress,phone,phonemob,comment,mcomment,mktime,total,sumn,sends,status) VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,1)",
GetSQLValueString($_POST['cost_delivery'], "text"),
GetSQLValueString($_POST['user']['cards'], "text"),
GetSQLValueString($_POST['user']['insurance'], "text"),
GetSQLValueString($_POST['user']['warehouse'], "text"),
GetSQLValueString($_POST['paid'], "text"),
GetSQLValueString($_POST['label'], "text"),
GetSQLValueString($_POST['user']['delivery'], "text"),
GetSQLValueString($_POST['user']['declaration'], "text"),
GetSQLValueString($_POST['user']['payment'], "text"),
GetSQLValueString($_POST['user']['user_id'], "text"),
GetSQLValueString($_POST['user']['username'], "text"),
GetSQLValueString($_POST['user']['email'], "text"),
GetSQLValueString($_POST['user']['city'], "text"),
GetSQLValueString($_POST['user']['address'], "text"),
GetSQLValueString($_POST['user']['tel'], "text"),
GetSQLValueString($_POST['user']['tel2'], "text"),
GetSQLValueString($_POST['user']['comment'], "text"),
GetSQLValueString($_POST['user']['mcomment'], "text"),
GetSQLValueString($time, "text"),
GetSQLValueString($_POST['summary'], "text"),
GetSQLValueString($_POST['user']['sumn'], "text"),
GetSQLValueString($_POST['user']['sends'], "text"));
$result = mysql_query($sql) or die(mysql_error());
// Óçíàåì íîìåð çàêàçà
$sql="SELECT id FROM catalogs_orders WHERE mktime='$time' AND user_id='".$_POST['user']['user_id']."'";
$result = mysql_query($sql) or die(mysql_error());
if (mysql_affected_rows()!=0) {
$order=mysql_fetch_assoc($result);
} else { echo "Îøèáêà";}
// Äîáàâëÿåì òîâàðû
for($i=0; $i<=count($_POST['item']); $i++) {
if($_POST['item']['code'][$i]!=''){
$sql=sprintf("INSERT INTO catalogs_orders_products (order_id,product_id,code,product_cine_id,count,reservation) VALUES (%s,%s,%s,%s,%s,%s)",
GetSQLValueString($order['id'], "text"),
GetSQLValueString($_POST['item']['mod_id'][$i], "text"),
GetSQLValueString($_POST['item']['code'][$i], "text"),
GetSQLValueString($_POST['item']['price'][$i], "text"),
GetSQLValueString($_POST['item']['quant'][$i], "text"),
GetSQLValueString($_POST['item']['reservation'][$i], "text"));
$result = mysql_query($sql) or die(mysql_error());
}
}
// Øëåì ïèñüìà
if ($user['group']!=1) {
eMailing('order-new',$_POST['user']['user_id'], $order['id']);
}
echo "";
// } else {
// echo"";
// }
} else {
echo"";
}
}
// =================
// ==== NOTIFY =====
// =================
// ==============
// == changed ===
// ==============
if (isset($_GET['notify']) && $_GET['notify']=='order-changed') {
eMailing('order-changed',$_GET['user'], $_GET['order']);
echo "";
}
// ======================================
// ======================================
// ============== Âûâîä =================
// ======================================
// ======================================
// =============
// ==== all ====
// =============
if (!isset($_GET['action'])) {
echo"";
// ==============
// === report ===
// ==============
$time='';
$time['day'] = "o.`mktime` >= ".mktime(0, 0, 0, date('n'), date('j'), date('Y'));
if(date('w')==1) {
$time['week'] = " o.`mktime` >=".mktime(0, 0, 0, date('n'), date('j'), date('Y'))." ";
} else {
$time['week'] = "( o.`mktime` BETWEEN ".strtotime("last Monday")." AND ".mktime(0, 0, 0, date('n'), date('j')+1, date('Y')).") ";
}
$time['month'] = "o.`mktime` >= ".mktime(0, 0, 0, date('n'), 1, date('Y'));
Report::put_time($time);
Report::make();
/*
echo"
Êîïïèÿ | Íîìåð çàêàçà | Èçìåíÿë | Äàòà êîïïèè | Äåäëàéí | ÔÈÎ | Îáùàÿ ñóììà | Îïëà÷åí | Òåëåôîí | Àäðåñ | Ìåòêà | Ñòàòóñ | Êîìåíòàðèé ìåíåäæåðà | ÑÌÑ | ||
{$order['id_order']} {$order['meneger_name']} |
".$order['order_id']." | ".$order['user_work_login']." | ".date('Y-m-d H:i:s',$order['order_date'])." | ".$order['dedline']." | ".$order['username']." | {$order['total']} | "; if($_SESSION['admin']['group']==1 || $_SESSION['admin']['group']==4 || $_SESSION['admin']['group']==6){ echo ""; }else{ if($order['paid']==1) print "Äà"; else print "Íåò"; } echo " | {$order['tel']} Îòïðàâèòü CMC |
{$order['city']}, {$order['address']} | "; //if($_SESSION['admin']['group']==1 || $_SESSION['admin']['group']==4){ if($_SESSION['admin']['group']==2 and ($order['label']==9 or $order['label']==10)){ print $order['label']; }else{ echo " "; } //}else{ //print $order['label']; //} $s = "select * from catalogs_orders_products where order_id=".$order['order_id']; $r = mysql_query($s) or die(mysql_error()); $status = array(); while ($op=mysql_fetch_assoc($r)) { if(!empty($op['status']))$status[] = $op['status']; } echo " | ".implode(', ',$status)." | "; if(strlen($order['mcomment'])>0)print"".substr($order['mcomment'],0,30)."..."; print" | "; print"".$order['smst']." | "; /* echo""; $sql4 = "SELECT * FROM zlo_book_status WHERE id IN ({$order['status']})"; $result4 = mysql_query($sql4) or die(mysql_error()); if (mysql_affected_rows()!=0) { while ($row4=mysql_fetch_assoc($result4)) { if($row4['id']!="5") echo $row4['title']; } } echo" | "; } } print" |
'; // =========== Ãåíåðèì òàáëèöó =========== $sql = "SELECT o.*, o.name as username, o.adress as address, o.phone as tel, o.phonemob as tel2, u.group, o.id as order_id, o.adress as address, g.name as user_group, g.color as user_color FROM catalogs_orders_git as o LEFT JOIN zlo_users as u ON u.id=o.user_id LEFT JOIN zlo_users_group as g ON g.id=u.group WHERE o.id='".$_GET['order_ID']."'"; $result1 = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $order=mysql_fetch_assoc($result1); $r = mysql_query("select * from card where user_id='".$order['user_id']."'") or die(mysql_error()); $c=mysql_fetch_assoc($r); $order['cards'] = $c['card']; echo" |
Ïóñòî
";} // ===================== // ===== javascript ==== // ===================== echo" "; echo" "; } // ============= // ==== add ==== // ============= if (isset($_GET['action']) && $_GET['action']=='add') { if (isset($_POST['user'])) {} $user=array(); if(isset($_GET['user'])) { $sql = "SELECT * FROM zlo_users WHERE id='".$_GET['user']."'"; $result = mysql_query($sql) or die(mysql_error()); if (mysql_affected_rows()!=0) { $user=mysql_fetch_assoc($result); } } else { if(isset($_POST)) {$user=$_POST['user'];} } echo"Ìåíåäæåð: | ".$order['meneger']." |
Çàêàç # | ".$order['order_id']." |
Äàòà: | ".date('Y-m-d H:i:s',$order['mktime'])." |
Êëèåíò: | ".$order['name']." |
Email: | ".$order['email']." |
Òåë: | ".$order['phone']." |
Äîï. òåë: | ".$order['phonemob']." |
¹ êàðòî÷êè: | ".$order['cards']." |
Êîìåíòàðèé: | ".$order['comment']." |
Äîñòàâêà: | ".viewBook('zlo_book_delivery', $order['delivery'], 'id', 'title')." |
Äåêëàðàöèÿ ¹: | ".$order['declaration']." |
¹ ñêëàäà: | ".$order['warehouse']." |
Ñïîñîá îïëàòû: | ".$order['payment']." |
Ñòðàõîâêà: | ".$order['insurance']." |
Ñóììà íàëîæåííîãî: | ".$order['sumn']." |
Îòïðàâêà çà ñ÷åò: | ".$order['sends']." |
Ãîðîä: | ".$order['city']." |
Àäðåñ: | ".$order['adress']." |
Êîìåíòàðèé (ìåíåäæåðà): | ".$order['mcomment']." |
¹ | $i . | Êîä | ".$item['code']." | Áðåíä | ".viewBook('catalogs_brends', $item['brend_id'], 'id', 'name')." | Íàçâàíèå | ".$item['name']." | Ðàçìåð | ".$item['size']." | Öâåò | ".$item['color']." | Êîë. | ".$item_id['count']." | Öåíà | "."(".$item_id['product_cine_id'].") ".$item['cine']." | Ñóììà | ".($item_id['product_cine_id']*$item_id['count'])." | Áðîíü | ".$item_id['reservation']." |
Çàêàç # | ".$order['order_id']." |
Äàòà: | ".date('Y-m-d H:i:s',$order['mktime'])." |
Êëèåíò: | ".$order['name']." |
Òåë: | ".$order['phone']." |
Ãîðîä: | ".$order['city']." |
¹ ñêëàäà: | ".$order['warehouse']." |
Ñòðàõîâêà: | ".$order['insurance']." |
Ñóììà íàëîæåííîãî: | ".$order['sumn']." |
Îòïðàâêà çà ñ÷åò: | ".$order['sends']." |
Êîìåíòàðèé: | ".$order['mcomment']." |