File: D:/web/homefly/inc/incorders - Copy.asp
<%
'This code is copyright (c) Internet Business Solutions SL, all rights reserved.
'The contents of this file are protect under law as the intellectual property
'of Internet Business Solutions SL. Any use, reproduction, disclosure or copying
'of any kind without the express and written permission of Internet Business
'Solutions SL is forbidden.
'Author: Vince Reid, vince@virtualred.net
Dim sSQL,rs,alldata,success,cnn,netnav,errmsg,rowcounter,startfont,endfont,sd,ed,smonth,allorders,delAfter,addcomma,delStr,useEuro,saveLCID,delOptions,stockManage,ordAddInfo,ordCNum
lisuccess=0
Set rs = Server.CreateObject("ADODB.RecordSet")
Set cnn=Server.CreateObject("ADODB.Connection")
cnn.open sDSN
if Session("loggedon") <> "virtualstore" AND Trim(request.cookies("WRITECKL"))<>"" then
sSQL="SELECT adminID FROM admin WHERE adminUser='" & Replace(request.cookies("WRITECKL"),"'","''") & "' AND adminPassword='" & Replace(request.cookies("WRITECKP"),"'","''") & "'"
rs.Open sSQL,cnn,0,1
if NOT (rs.EOF OR rs.BOF) then
Session("loggedon") = "virtualstore"
else
lisuccess=2
end if
rs.Close
end if
if Session("loggedon") <> "virtualstore" AND lisuccess<>2 then response.end
netnav = true
if instr(Request.ServerVariables("HTTP_USER_AGENT"), "compatible") > 0 OR instr(Request.ServerVariables("HTTP_USER_AGENT"), "Gecko") > 0 then netnav = false
function atb(size)
if netnav then
atb = CInt(size / 2 + 1)
else
atb = size
end if
end function
Sub release_stock(smOrdId)
if stockManage <> 0 then
sSQL="SELECT cartProdID, cartQuantity FROM cart WHERE cartCompleted=1 AND cartOrderID=" & smOrdId
rs.Open sSQL,cnn,0,1
do while NOT rs.EOF
sSQL = "UPDATE products SET pInStock=pInStock+"&rs("cartQuantity")&" WHERE pID='"&rs("cartProdID")&"'"
cnn.Execute(sSQL)
rs.MoveNext
loop
rs.Close
end if
End Sub
if lisuccess=2 then
%>
<table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
<tr>
<td width="100%">
<table width="100%" border="0" cellspacing="0" cellpadding="3" bgcolor="">
<tr>
<td width="100%" colspan="4" align="center"><p> </p><p> </p>
<p><b>Operation Failed !</b></p><p> </p>
<p>It seems you have a corrupt cookie or have changed your login. Please <a href="login.asp">click here</a> to login, delete your cookie and set it again.</p>
</td>
</tr>
</table>
</td>
</tr>
</table>
<%
else
success=true
if Request("sd") = "" then
sd=Date()
else
sd=Request("sd")
end if
if Request("ed") = "" then
ed=Date()
else
ed=Request("ed")
end if
on error resume next
sd = DateValue(sd)
ed = Datevalue(ed)
if err.number <> 0 then
sd = Date()
ed = Date()
success=false
errmsg="One of your date values was invalid."
end if
on error goto 0
if ed < sd then ed = sd
sSQL = "SELECT countryLCID,countryCurrency,adminDelUncompleted,adminStockManage,adminDelCC FROM admin INNER JOIN countries ON admin.adminCountry=countries.countryID WHERE adminID=1"
rs.Open sSQL,cnn,0,1
delAfter = Int(rs("adminDelUncompleted"))
if Int(rs("countryLCID"))<>0 then Session.LCID = Int(rs("countryLCID"))
useEuro=(rs("countryCurrency")="EUR")
stockManage=Int(rs("adminStockManage"))
delccafter = Int(rs("adminDelCC"))
rs.Close
saveLCID = session.LCID
if Request.QueryString("id")<>"" then
if Request.Form("delccdets")<>"" then
sSQL = "UPDATE orders SET ordCNum='' WHERE ordID="&Request.QueryString("id")
cnn.Execute(sSQL)
end if
sSQL = "SELECT ordID,ordName,ordAddress,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTotal,ordDate,ordStateTax,ordCountryTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordDiscountText,ordHandling,ordComLoc,ordAddInfo FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID="&Request.QueryString("id")
rs.Open sSQL,cnn,0,1
alldata = ""
if NOT rs.EOF then alldata=rs.getrows
rs.Close
sSQL = "SELECT cartProdId,cartProdName,cartProdPrice,cartQuantity,cartID FROM cart WHERE cartOrderID="&Request.QueryString("id")
rs.Open sSQL,cnn,0,1
allorders = ""
if NOT rs.EOF then allorders=rs.getrows
rs.Close
else
' Delete old uncompleted orders.
session.LCID = 1033
if delccafter<>0 then
tdt = Date()-delccafter
sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<"&datedelim & VSUSDate(tdt) & datedelim
cnn.Execute(sSQL)
end if
if delAfter<>0 then
tdt = Date()-delAfter
sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<"&datedelim & VSUSDate(tdt) & datedelim
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
delStr=""
delOptions=""
do while NOT rs.EOF
delStr = delStr & addcomma & rs("cartOrderID")
delOptions = delOptions & addcomma & rs("cartID")
addcomma = ","
rs.MoveNext
loop
sSQL = "DELETE FROM orders WHERE ordID IN ("&delStr&")"
cnn.Execute(sSQL)
sSQL = "DELETE FROM cartOptions WHERE coCartID IN ("&delOptions&")"
cnn.Execute(sSQL)
sSQL = "DELETE FROM cart WHERE cartID IN ("&delOptions&")"
cnn.Execute(sSQL)
end if
rs.Close
else
tdt = Date() - 3
sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<"&datedelim & VSUSDate(tdt) & datedelim
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
delStr=""
delOptions=""
do while NOT rs.EOF
delStr = delStr & addcomma & rs("cartOrderID")
delOptions = delOptions & addcomma & rs("cartID")
addcomma = ","
rs.MoveNext
loop
sSQL = "DELETE FROM cartOptions WHERE coCartID IN ("&delOptions&")"
cnn.Execute(sSQL)
sSQL = "DELETE FROM cart WHERE cartID IN ("&delOptions&")"
cnn.Execute(sSQL)
end if
rs.Close
end if
session.LCID = saveLCID
end if
if Request.QueryString("id")<>"" then
%>
<table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
<tr>
<td width="100%">
<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
<tr>
<td width="100%" colspan="4" align="center"><b>Order number <%=alldata(0,0)%>, from <%=alldata(18,0)%></b></td>
</tr>
<tr>
<td width="20%" align="right"><b>Name:</b></td>
<td width="30%" align="left"><%=alldata(1,0)%></td>
<td width="20%" align="right"><b>Email:</b></td>
<td width="30%" align="left"><a href="mailto:<%=alldata(7,0)%>"><%=alldata(7,0)%></a></td>
</tr>
<tr>
<td align="right"><b>Address:</b></td>
<td align="left"><%=alldata(2,0)%></td>
<td align="right"><b>City:</b></td>
<td align="left"><%=alldata(3,0)%></td>
</tr>
<tr>
<td align="right"><b>State:</b></td>
<td align="left"><%=alldata(4,0)%></td>
<td align="right"><b>Country:</b></td>
<td align="left"><%=alldata(6,0)%></td>
</tr>
<tr>
<td align="right"><b>Zip:</b></td>
<td align="left"><%=alldata(5,0)%></td>
<td align="right"><b>Phone:</b></td>
<td align="left"><%=alldata(8,0)%></td>
</tr>
<tr>
<td align="right"><b>IP Address:</b></td>
<td align="left"><%=alldata(23,0)%></td>
<td align="right"><b>Affiliate:</b></td>
<td align="left"><%=alldata(24,0)%></td>
</tr>
<% if Trim(alldata(26,0))<>"" then %>
<tr>
<td align="right" valign="top"><b>Applicable Discounts:</b></td>
<td align="left" colspan="3"><%=alldata(26,0)%></td>
</tr>
<% end if %>
<% if alldata(10,0)<>"" OR alldata(11,0)<>"" OR alldata(12,0)<>"" then %>
<tr>
<td width="100%" align="center" colspan="4"><b>Shipping Details.</b></td>
</tr>
<tr>
<td align="right"><b>Name:</b></td>
<td align="left" colspan="3"><%=alldata(9,0)%></td>
</tr>
<tr>
<td align="right"><b>Address:</b></td>
<td align="left"><%=alldata(10,0)%></td>
<td align="right"><b>City:</b></td>
<td align="left"><%=alldata(11,0)%></td>
</tr>
<tr>
<td align="right"><b>State:</b></td>
<td align="left"><%=alldata(12,0)%></td>
<td align="right"><b>Country:</b></td>
<td align="left"><%=alldata(14,0)%></td>
</tr>
<tr>
<td align="right"><b>Zip:</b></td>
<td align="left" colspan="3"><%=alldata(13,0)%></td>
</tr>
<% end if
if alldata(22,0) <> "" OR alldata(28,0)>0 then %>
<tr>
<td align="right"><b>Shipping Method:</b></td>
<td align="left"><% response.write alldata(22,0)
if (alldata(28,0) AND 2)=2 then response.write " (With Insurance)"%></td>
<td align="right"><b>Commercial Loc:</b></td>
<td align="left"><% if (alldata(28,0) AND 1)=1 then response.write "Yes" else response.write "No"%></td>
</tr>
<% end if
ordAddInfo = Trim(alldata(29,0))
if ordAddInfo <> "" then %>
<tr>
<td align="right" valign="top"><b>Additional info:</b></td>
<td align="left" colspan="3"><%=Replace(ordAddInfo,vbNewLine,"<BR>")%></td>
</tr>
<% end if %>
<tr>
<td width="100%" align="center" colspan="4"><b>Order Totals.</b></td>
</tr>
<tr>
<td width="50%" align="right" colspan="2"><b>Order Total:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency(alldata(17,0))%></td>
</tr>
<% if alldata(19,0) > 0 then %>
<tr>
<td width="50%" align="right" colspan="2"><b>State Tax:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency(alldata(19,0))%></td>
</tr>
<% end if
if alldata(20,0) > 0 then %>
<tr>
<td width="50%" align="right" colspan="2"><b>Country Tax:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency(alldata(20,0))%></td>
</tr>
<% end if
if alldata(21,0) > 0 then %>
<tr>
<td width="50%" align="right" colspan="2"><b>Shipping:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency(alldata(21,0))%></td>
</tr>
<% end if
if cDbl(alldata(27,0))<>0.0 then %>
<tr>
<td width="50%" align="right" colspan="2"><b>Handling:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency(alldata(27,0))%></td>
</tr>
<% end if
if cDbl(alldata(25,0))<>0.0 then %>
<tr>
<td width="50%" align="right" colspan="2"><b>Discounts:</b></td>
<td width="50%" align="left" colspan="2"><font color="#FF0000"><%=FormatEuroCurrency(alldata(25,0))%></font></td>
</tr>
<% end if %>
<tr>
<td width="50%" align="right" colspan="2"><b>Grand Total:</b></td>
<td width="50%" align="left" colspan="2"><%=FormatEuroCurrency((alldata(17,0)+alldata(19,0)+alldata(20,0)+alldata(21,0)+alldata(27,0))-alldata(25,0))%></td>
</tr>
<% if Int(alldata(15,0))=10 then %>
<tr>
<td width="50%" align="center" colspan="4"><hr width="50%">
</td>
</tr>
<% if request.servervariables("HTTPS")<>"on" AND nochecksslserver<>true then %>
<tr>
<td width="50%" align="right" colspan="4"><b><font color="#FF0000">You do not appear to be viewing this page on a secure (https) connection. Credit card information cannot be shown.</b></td>
</tr>
<% else
sSQL = "SELECT ordCNum FROM orders WHERE ordID="&Request.QueryString("id")
rs.Open sSQL,cnn,0,1
ordCNum = rs("ordCNum")
rs.Close
if encryptmethod="aspencrypt" OR encryptmethod="" then %>
<OBJECT classid="CLSID:F9463571-87CB-4A90-A1AC-2284B7F5AF4E"
codeBase="http://www.ecommercetemplates.com/aspencrypt.dll"
id="XEncrypt">
</OBJECT>
<% end if %>
<tr>
<td width="50%" align="right" colspan="2"><b>Card Number:</b></td>
<td width="50%" align="left" colspan="2">
<% if ordCNum<>"" then
if encryptmethod="none" then
cnumarr = Split(ordCNum, "&")
if IsArray(cnumarr) then response.write cnumarr(0)
elseif encryptmethod="aspencrypt" OR encryptmethod="" then
%>
<SCRIPT LANGUAGE="VBScript">
' Set Context = XEncrypt.OpenContextEx("Microsoft Enhanced Cryptographic Provider v1.0", "mycontainer", False)
Set Context = XEncrypt.OpenContext("mycontainer", False)
Set Msg = Context.CreateMessage(True) ' use 3DES
on error resume next
err.number=0
cnum = Msg.DecryptText("<%=Replace(ordCNum,vbNewLine,"")%>", "")
If err.number = 0 then
cnumarr = Split(cnum, "&")
else
Document.Write err.description
end if
on error goto 0
if IsArray(cnumarr) then Document.Write cnumarr(0)
</SCRIPT>
<% end if
else
response.write "(no data)"
end if %>
</td>
</tr>
<tr>
<td width="50%" align="right" colspan="2"><b>Expiry Date:</b></td>
<td width="50%" align="left" colspan="2">
<% if encryptmethod="none" then
if IsArray(cnumarr) then
if UBOUND(cnumarr)>=1 then response.write cnumarr(1)
end if
elseif encryptmethod="aspencrypt" OR encryptmethod="" then
%>
<SCRIPT LANGUAGE="VBScript">
if IsArray(cnumarr) then
if UBOUND(cnumarr)>=1 then Document.Write cnumarr(1)
end if
</SCRIPT>
<% end if %>
</td>
</tr>
<tr>
<td width="50%" align="right" colspan="2"><b>CVV Code:</b></td>
<td width="50%" align="left" colspan="2">
<% if encryptmethod="none" then
if IsArray(cnumarr) then
if UBOUND(cnumarr)>=2 then response.write cnumarr(2)
end if
elseif encryptmethod="aspencrypt" OR encryptmethod="" then
%>
<SCRIPT LANGUAGE="VBScript">
if IsArray(cnumarr) then
if UBOUND(cnumarr)>=2 then Document.Write cnumarr(2)
end if
</SCRIPT>
<% end if %>
</td>
</tr>
<% end if
if ordCNum<>"" then %>
<form method=POST action="adminorders.asp?id=<%=Request.QueryString("id")%>">
<input type="hidden" name="delccdets" value="<%=Request.QueryString("id")%>">
<tr>
<td width="100%" align="center" colspan="4"><input type=submit value="Delete CC Details"></td>
</tr>
</form>
<% end if
end if %>
<tr>
<td width="100%" align="center" colspan="4"><b>Order Lines.</b></td>
</tr>
<%
if IsArray(allorders) then
%>
</table>
<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
<tr>
<td align="left"><b>Product ID</b></td>
<td align="left"><b>Product Name</b></td>
<td align="left"><b>Price</b></td>
<td align="left"><b>Quantity</b></td>
</tr>
<%
for rowcounter=0 to UBOUND(allorders,2)
%>
<tr>
<td align="left"><b><%=allorders(0,rowcounter)%></b></td>
<td align="left"><%=allorders(1,rowcounter)%></td>
<td align="left"><%=FormatEuroCurrency(allorders(2,rowcounter))%></td>
<td align="left"><%=allorders(3,rowcounter)%></td>
</tr>
<%
sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff FROM cartOptions WHERE coCartID="&allorders(4,rowcounter)
rs.Open sSQL,cnn,0,1
do while NOT rs.EOF
%>
<tr>
<td align="right"><b><%=rs("coOptGroup")%>:</b></td>
<td align="left"><%=rs("coCartOption")%></td>
<td align="left"><%if rs("coPriceDiff")=0 then response.write "- " else response.write FormatEuroCurrency(rs("coPriceDiff"))%></td>
<td align="left"> </td>
</tr>
<%
rs.MoveNext
loop
rs.Close
next
end if
%>
</table>
</td>
</tr>
</table>
<%
else
session.LCID = 1033
if request.form("act")="delete" then
release_stock(trim(request.form("id")))
sSQL = "DELETE FROM cartOptions WHERE coCartID IN (SELECT cartID FROM cart WHERE cartOrderID="&request.form("id")&")"
cnn.Execute(sSQL)
sSQL = "DELETE FROM cart WHERE cartOrderID="&request.form("id")
cnn.Execute(sSQL)
sSQL = "DELETE FROM orders WHERE ordID="&request.form("id")
cnn.Execute(sSQL)
elseif request.form("act")="authorize" then
do_stock_management(trim(request.form("id")))
if Trim(request.form("authcode"))<>"" then
sSQL = "UPDATE orders set ordAuthNumber='"&Trim(request.form("authcode"))&"' WHERE ordID="&request.form("id")
else
sSQL = "UPDATE orders set ordAuthNumber='manual auth' WHERE ordID="&request.form("id")
end if
cnn.Execute(sSQL)
sSQL = "UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&request.form("id")
cnn.Execute(sSQL)
end if
tdt = DateValue(sd)
tdt2 = DateValue(ed)+1
sSQL = "SELECT ordID,ordName,payProvName,ordAuthNumber,ordDate FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordDate BETWEEN "&datedelim & VSUSDate(tdt) & datedelim&" AND "&datedelim & VSUSDate(tdt2) & datedelim&" ORDER BY ordDate"
rs.Open sSQL,cnn,0,1
alldata = ""
if NOT rs.EOF then alldata=rs.getrows
rs.Close
session.LCID = saveLCID
%>
<script language="JavaScript">
<!--
function delrec(id) {
cmsg = "Sure you want to delete this record?\n"
if (confirm(cmsg)) {
document.mainform.id.value = id;
document.mainform.act.value = "delete";
document.mainform.sd.value="<%=DateValue(sd)%>";
document.mainform.ed.value="<%=DateValue(ed)%>";
document.mainform.submit();
}
}
function authrec(id) {
var aucode;
cmsg = "Please enter any authorization code for this record.\nLeave blank if you do not know the code."
if ((aucode=prompt(cmsg,'manual auth'))!=null) {
document.mainform.id.value = id;
document.mainform.act.value = "authorize";
document.mainform.authcode.value = aucode;
document.mainform.sd.value="<%=DateValue(sd)%>";
document.mainform.ed.value="<%=DateValue(ed)%>";
document.mainform.submit();
}
}
// -->
</script>
<table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
<tr>
<td width="100%">
<input type="hidden" name="posted" value="1">
<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
<form method="POST" action="adminorders.asp">
<tr>
<td width="100%" colspan="6" align="center"><%
session.LCID = 1033
if NOT success then response.write "<p><font color='#FF0000'>"&errmsg&"</font></p>" %><br><b>Orders between:</b> <input type="text" size="<%=atb(9)%>" name="sd" value="<%=sd%>"> <b>and:</b> <input type="text" size="<%=atb(9)%>" name="ed" value="<%=ed%>"> <input type="submit" value="Go"><br> </td>
</tr>
</form>
<form method="POST" action="adminorders.asp">
<tr>
<td width="100%" colspan="6" align="center"><p><b>Show orders From:</b> <select name="sd" size="1"><%
For rowcounter=0 to Day(Date())-1
response.write "<option value='"&Date()-rowcounter&"'"
if Date()-rowcounter=sd then response.write " selected"
response.write ">"&Date()-rowcounter&"</option>"&vbCrLf
smonth=Date()-rowcounter
Next
For rowcounter=1 to 4
response.write "<option value='"&DateAdd("m",0-rowcounter,smonth)&"'"
if DateAdd("m",0-rowcounter,smonth)=sd then response.write " selected"
response.write ">"&DateAdd("m",0-rowcounter,smonth)&"</option>"&vbCrLf
Next
%></select> <b>To:</b> <select name="ed" size="1"><%
For rowcounter=0 to Day(Date())-1
response.write "<option value='"&Date()-rowcounter&"'"
if Date()-rowcounter=ed then response.write " selected"
response.write ">"&Date()-rowcounter&"</option>"&vbCrLf
smonth=Date()-rowcounter
Next
For rowcounter=1 to 4
response.write "<option value='"&DateAdd("m",0-rowcounter,smonth)&"'"
if DateAdd("m",0-rowcounter,smonth)=ed then response.write " selected"
response.write ">"&DateAdd("m",0-rowcounter,smonth)&"</option>"&vbCrLf
Next
session.LCID = saveLCID
%></select> <input type="submit" value="Go"><br> </p></td>
</tr>
</form>
<tr>
<td align="center"><p><b>Order ID</b></p></td>
<td align="center"><p><b>Name</b></p></td>
<td align="center"><p><b>Method</b></p></td>
<td align="center"><p><b>Auth Code</b></p></td>
<td align="center"><p><b>Date</b></p></td>
<td align="center"><p><b>Delete</b></p></td>
</tr>
<form method="POST" name="mainform" action="adminorders.asp">
<input type="hidden" name="act" value="xxx">
<input type="hidden" name="id" value="xxx">
<input type="hidden" name="authcode" value="xxx">
<input type="hidden" name="ed" value="xxx">
<input type="hidden" name="sd" value="xxx">
<% if IsArray(alldata) then
for rowcounter=0 to UBOUND(alldata,2)
if alldata(3,rowcounter)="" OR IsNull(alldata(3,rowcounter)) then
startfont="<font color='#FF0000'>"
endfont="</font>"
else
startfont=""
endfont=""
end if
%>
<tr>
<td align="center"><a href="adminorders.asp?id=<%=alldata(0,rowcounter)%>"><%="<b>"&startfont&alldata(0,rowcounter)&endfont&"</b>"%></a></td>
<td align="center"><a href="adminorders.asp?id=<%=alldata(0,rowcounter)%>"><%=startfont&alldata(1,rowcounter)&endfont%></a></td>
<td align="center"><%=startfont&alldata(2,rowcounter)&endfont%></td>
<td align="center"><%
if alldata(3,rowcounter)="" OR IsNull(alldata(3,rowcounter)) then
response.write "<input type='button' name='auth' value='Authorize' onClick=""authrec('"&alldata(0,rowcounter)&"')"">"
else
response.write startfont&alldata(3,rowcounter)&endfont
end if %></td>
<td align="center"><font size="1"><%=startfont&Replace(alldata(4,rowcounter)," ","<BR>",1,1)&endfont%></font></td>
<td align="center"><input type=button name=delete value="Delete" onClick="delrec('<%=alldata(0,rowcounter)%>')"></td>
</tr>
<% next %>
</form>
<form method="POST" action="dumporders.asp" name="dumpform">
<% session.LCID = 1033 %>
<input type="hidden" name="sd" value="<%=VSUSDate(DateValue(sd))%>">
<input type="hidden" name="ed" value="<%=VSUSDate(DateValue(ed))%>">
<% session.LCID = saveLCID %>
<input type="hidden" name="details" value="false">
<tr>
<td width="100%" colspan="3" align="center">
<input type="submit" value="Dump orders to CSV file" onClick="document.dumpform.details.value='false';">
</td>
<td width="100%" colspan="3" align="center">
<input type="submit" value="Dump details to CSV file" onClick="document.dumpform.details.value='true';">
</td>
</tr>
<% else %>
<tr>
<td width="100%" colspan="6" align="center">
<p> </p>
<p><%
if sd=ed then
response.write "There were no orders on "&sd&"."
else
response.write "There were no orders between "&sd&" and "&ed&"."
end if %></p>
<p> </p>
</td>
</tr>
<% end if %>
</form>
<tr>
<td width="100%" colspan="6" align="center">
<% session.LCID = 1033 %>
<p><br>
<a href="adminorders.asp?sd=<%=DateAdd("m",-1,sd)%>&ed=<%=DateAdd("m",-1,ed)%>"><b>- Month</b></a> |
<a href="adminorders.asp?sd=<%=DateValue(sd)-7%>&ed=<%=DateValue(ed)-7%>"><b>- Week</b></a> |
<a href="adminorders.asp?sd=<%=DateValue(sd)-1%>&ed=<%=DateValue(ed)-1%>"><b>- Day</b></a> |
<a href="adminorders.asp?sd=<%=Date()%>&ed=<%=Date()%>"><b>Today</b></a> |
<a href="adminorders.asp?sd=<%=DateValue(sd)+1%>&ed=<%=DateValue(ed)+1%>"><b>Day +</b></a> |
<a href="adminorders.asp?sd=<%=DateValue(sd)+7%>&ed=<%=DateValue(ed)+7%>"><b>Week +</b></a> |
<a href="adminorders.asp?sd=<%=DateAdd("m",1,sd)%>&ed=<%=DateAdd("m",1,ed)%>"><b>Month +</b></a>
</p>
<% session.LCID = saveLCID %>
</td>
</tr>
</table>
</td>
</tr>
</table>
<%
end if
end if
cnn.Close
%>