checkout.php

这个版本只是修正了一些BUG

<?php
/*********************************************
    	checkout.php -

	Version  : 1.2
	Author   : Tracemouse ([e-mail])
	Copyright: http://www.vitci.com
	Writed   : 2003/09/23
	Modified : 2004/04/13
**********************************************/
require "./include/base.php";
$nav .= SEPARATER."<a href='myshop.php'>".$language['myshop']."</a>";
if($method=='new')
	$nav .= SEPARATER.$language['order_create'];
else
	$nav .= SEPARATER.$language['myshop_order'];

if (!$islogin)
{
	include template('login');
	exit;
}

if((!$create_submit)&&(!$oid))		$oid=random(4).time();
$oid=daddslashes($oid);

if($create_submit)
{
	if(empty($did)) showmessage('order_err_did');
	$posttime=time();
    $pid=1;$did=intval($did);
    $sqlstr="select did,expenses from $table_delivery WHERE did='$did'";
    $query=$db->query($sqlstr);
    if ($dbq_rec=$db->fetch_array($query)) $expend=$dbq_rec['expenses'];
    $totalprice=intval($totalprice+$expend);unset($expend);$did=intval($did);$pid=intval($pid);
    $realname=daddslashes($realname);$addr=daddslashes($addr);$postalcode=daddslashes($postalcode);
    $tel=daddslashes($tel);$mobile=daddslashes($mobile);
	$sqlstr="insert into $table_orders(oid,username,totalprice,realname,addr,postalcode,tel,mobile,".
		      "posttime,did,pid) VALUES('$oid','$_login_user',$totalprice,'$realname','$addr','$postalcode','$tel',".
		      "'$mobile',$posttime,$did,$pid)";
    if(!($query=$db->query($sqlstr)))    	showmessage('order_cre_fail');
    $sqlstr="UPDATE $table_basket SET oid='$oid' WHERE username='$_login_user' AND oid='picking'";
    if($query=$db->query($sqlstr))
    		showmessage('order_cre_success','order.php');
	else
    		showmessage('order_cre_fail');
}
if($wait_submit)
{
	showmessage('order_waitinfo','basket.php');
}

if($method=='new')
{
	$query = $db->query("SELECT count(*) from $table_basket where username='$_login_user' and oid='picking'");
	$basketnum=$db->result($query,0);
	if($basketnum<1) showmessage('order_err_null','productdisplay.php');
    	$sqlstr="SELECT a.productid,b.productname,b.unit,a.price,a.amount ".
            	      "FROM $table_basket a,$table_products b WHERE a.productid=b.productid ".
            	      "AND a.username='$_login_user' and a.oid='picking'";
}
else
{
    	$sqlstr="SELECT a.productid,b.productname,b.unit,a.price,a.amount ".
            	      "FROM $table_basket a,$table_products b WHERE a.productid=b.productid ".
           	      "AND a.username='$_login_user' and a.oid='$oid'";
}
$totalprice=0;
$totalnum=0;
$basketlist = array();
$query = $db->query($sqlstr);
while($dbq_rec = $db->fetch_array($query)) 
{
	$totalprice+=$dbq_rec['price']*$dbq_rec['amount'];
    	$dbq_rec['price']=number_format($dbq_rec['price'],2,".",",");
    	$totalnum+=$dbq_rec['amount'];
	$basketlist[] = $dbq_rec;
}
$view_totalprice=number_format($totalprice, 2, ".", ",");

$query=$db->query("SELECT * FROM $table_members WHERE username='$_login_user'");
if($dbq_rec=$db->fetch_array($query))
{
	$realname=$dbq_rec['realname'];
	$addr=$dbq_rec['addr'];
	$tel=$dbq_rec['tel'];
	$postalcode=$dbq_rec['postalcode'];
    	$mobile=$dbq_rec['mobile'];
}

if($method=='new')
{
	$query=$db->query("SELECT * FROM $table_delivery");
	$deliverylist=array();
	while($dbq_rec=$db->fetch_array($query))
	{
		$deliverylist[]=$dbq_rec;
	}
    	$now_date=gmdate($dateformat,time());
	$now_time=gmdate($timeformat,time());
}
else
{
	$sqlstr="SELECT a.did,a.subject,a.exp,a.expenses,b.posttime,c.subject AS status FROM $table_delivery a,$table_orders b,".
            	      "$table_orderstatus c WHERE a.did = b.did AND b.oid = '$oid' AND b.pid=c.pid";
    	$query=$db->query($sqlstr);
    	if(!($delivery=$db->fetch_array($query))) showmessage($language['db_err']);
    	$now_date=gmdate($dateformat,$delivery['posttime']);
	$now_time=gmdate($timeformat,$delivery['posttime']);
}

include template('checkout');
?>