File: D:/web/homefly/inc/incthanks.asp
<!--#include file="incemail.asp"-->
<%
Dim orderid,rs,rs2,sSQL,useEuro,stockManage,orderText,errtext
success=true
errtext=""
Sub order_success(sorderid,sEmail,bSendEmail)
Dim custEmail, ordAddInfo, affilID
affilID = ""
sSQL = "SELECT ordID,ordName,ordAddress,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHandling,ordShipping,ordAffiliate,ordShipType,ordDiscount,ordDiscountText,ordAddInfo FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID="&sorderid
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
orderText = xxOrdId & ": " & rs("ordID") & vbCrLf
orderText = orderText & xxCusDet & ": " & vbCrLf
orderText = orderText & rs("ordName") & vbCrLf
orderText = orderText & rs("ordAddress") & vbCrLf
orderText = orderText & rs("ordCity") & ", " & rs("ordState") & vbCrLf
orderText = orderText & rs("ordZip") & vbCrLf
orderText = orderText & rs("ordCountry") & vbCrLf
orderText = orderText & xxEmail & ": " & rs("ordEmail") & vbCrLf
custEmail = rs("ordEmail")
orderText = orderText & xxPhone & ": " & rs("ordPhone") & vbCrLf
if Trim(rs("ordShipName")) <> "" OR Trim(rs("ordShipAddress")) <> "" then
orderText = orderText & xxShpDet & ": " & vbCrLf
orderText = orderText & rs("ordShipName") & vbCrLf
orderText = orderText & rs("ordShipAddress") & vbCrLf
orderText = orderText & rs("ordShipCity") & ", " & rs("ordShipState") & vbCrLf
orderText = orderText & rs("ordShipZip") & vbCrLf
orderText = orderText & rs("ordShipCountry") & vbCrLf
end if
ordShipType = rs("ordShipType")
if ordShipType <> "" then
orderText = orderText & vbCrLf & xxShpMet & ": " & ordShipType & vbCrLf
end if
ordAddInfo = Trim(rs("ordAddInfo"))
if ordAddInfo <> "" then
orderText = orderText & vbCrLf & xxAddInf & ": " & vbCrLf
orderText = orderText & ordAddInfo & vbCrLf
end if
ordTotal = rs("ordTotal")
ordDate = rs("ordDate")
ordStateTax = rs("ordStateTax")
ordDiscount = rs("ordDiscount")
ordDiscountText = rs("ordDiscountText")
ordCountryTax = rs("ordCountryTax")
ordShipping = rs("ordShipping")
ordHandling = rs("ordHandling")
affilID = Trim(rs("ordAffiliate"))
else
orderText = "Cannot find customer details" & vbCrLf
end if
rs.Close
sSQL = "SELECT cartProdId,cartProdName,cartProdPrice,cartQuantity,cartID FROM cart WHERE cartOrderID="&sorderid
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
do while not rs.EOF
orderText = orderText & "--------------------------" & vbCrLf
orderText = orderText & xxPrId & ": " & rs("cartProdId") & vbCrLf
orderText = orderText & xxPrNm & ": " & rs("cartProdName") & vbCrLf
orderText = orderText & xxQuant & ": " & rs("cartQuantity") & vbCrLf
orderText = orderText & xxUnitPr & ": " & FormatEmailEuroCurrency(rs("cartProdPrice")) & vbCrLf
optPriceDiff=0
sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff FROM cartOptions WHERE coCartID="&rs("cartID")
rs2.Open sSQL,cnn,0,1
do while NOT rs2.EOF
orderText = orderText & " > " & rs2("coOptGroup") & " : " & rs2("coCartOption")
if rs2("coPriceDiff")=0 then
orderText = orderText & vbCrlf
else
orderText = orderText & " ("
if rs2("coPriceDiff") > 0 then orderText = orderText & "+" else orderText = orderText & "-"
orderText = orderText & FormatEmailEuroCurrency(rs2("coPriceDiff")) & ")" & vbCrLf
end if
rs2.MoveNext
loop
rs2.Close
rs.MoveNext
loop
orderText = orderText & "--------------------------" & vbCrLf
orderText = orderText & xxOrdTot & " : " & FormatEmailEuroCurrency(ordTotal) & vbCrLf
if cDbl(ordStateTax)<>0.0 then orderText = orderText & xxStaTax & " : " & FormatEmailEuroCurrency(ordStateTax) & vbCrLf
if cDbl(ordCountryTax)<>0.0 then orderText = orderText & xxCntTax & " : " & FormatEmailEuroCurrency(ordCountryTax) & vbCrLf
orderText = orderText & xxShippg & " : " & FormatEmailEuroCurrency(ordShipping) & vbCrLf
if cDbl(ordHandling)<>0.0 then orderText = orderText & xxHndlg & " : " & FormatEmailEuroCurrency(ordHandling) & vbCrLf
if cDbl(ordDiscount)<>0.0 then orderText = orderText & xxDscnts & " : " & FormatEmailEuroCurrency(ordDiscount) & vbCrLf
orderText = orderText & xxGndTot & " : " & FormatEmailEuroCurrency((ordTotal+ordStateTax+ordCountryTax+ordShipping+ordHandling)-ordDiscount) & vbCrLf
else
orderText = orderText & "Cannot find order details" & vbCrLf
end if
rs.Close
if bSendEmail then
Call DoSendEmail(sEmail,sEmail,xxOrdStr,orderText)
end if
' And one for the customer
Call DoSendEmail(custEmail,sEmail,xxTnxOrd,xxTouSoo & vbCrLf & vbCrLf & orderText)
if affilID<>"" then
sSQL = "SELECT affilEmail,affilInform FROM affiliates WHERE affilID='"&affilID&"'"
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
if Int(rs("affilInform"))=1 then
affiltext = xxAff1 & " "&FormatEmailEuroCurrency(ordTotal)&"."&vbCrLf&vbCrLf&xxAff2&vbCrLf&vbCrLf&xxThnks&vbCrLf
Call DoSendEmail(Trim(rs("affilEmail")),sEmail,xxAff3,affiltext)
end if
end if
rs.Close
end if
%>
<table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
<tr>
<td width="100%">
<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
<tr>
<td width="100%" align="center"><%=xxThkYou%>
</td>
</tr>
<tr>
<td width="100%"><%response.write Replace(Replace(orderText,vbCrLf,"<BR>")," "," ")%>
</td>
</tr>
<tr>
<td width="100%" align="center"><br><br>
<%=xxRecEml%><br><br>
<a href="<%=storeUrl%>"><b><%=xxCntShp%></b></a><br>
<img src="images/clearpixel.gif" width="350" height="3">
</td>
</tr>
</table>
</td>
</tr>
</table>
<%
End sub
Sub order_failed
%>
<table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
<tr>
<td width="100%">
<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
<tr>
<td width="100%" colspan="2" align="center"><%=xxThkErr%>
<% if errtext<>"" then response.write "<p><strong>" & errtext & "</strong></p>" %>
<a href="<%=storeUrl%>"><b><%=xxCntShp%></b></a><br>
<img src="images/clearpixel.gif" width="350" height="3">
</td>
</tr>
</table>
</td>
</tr>
</table>
<%
End sub
Set rs = Server.CreateObject("ADODB.RecordSet")
Set rs2 = Server.CreateObject("ADODB.RecordSet")
Set cnn=Server.CreateObject("ADODB.Connection")
cnn.open sDSN
sSQL="SELECT adminEmail,adminEmailConfirm,adminStoreURL,countryLCID,countryCurrency,adminStockManage,adminCert FROM admin INNER JOIN countries ON admin.adminCountry=countries.countryID WHERE adminID=1"
rs.Open sSQL,cnn,0,1
emailAddr = rs("adminEmail")
sendEmail = Int(rs("adminEmailConfirm"))=1
storeUrl = rs("adminStoreURL")
if (left(LCase(storeurl),7) <> "http://") AND (left(LCase(storeurl),8) <> "https://") then
storeurl = "http://" & storeurl
end if
if Right(storeurl,1) <> "/" then storeurl = storeurl & "/"
if Int(rs("countryLCID"))<>0 then Session.LCID = Int(rs("countryLCID"))
useEuro=(rs("countryCurrency")="EUR")
stockManage=Int(rs("adminStockManage"))
thecert=rs("adminCert")
rs.Close
if Request.Form("custom")<>"" then
Call order_success(Request.Form("custom"),emailAddr,sendEmail)
elseif Request.Form("xxpreauth")<>"" then
Call order_success(Request.Form("xxpreauth"),emailAddr,sendEmail)
elseif Request.Form("cart_order_id") <> "" AND request.form("order_number")<>"" then ' 2Checkout Transaction
if Trim(request.form("credit_card_processed"))="Y" then
do_stock_management(trim(request.form("cart_order_id")))
sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&trim(request.form("cart_order_id"))
cnn.Execute(sSQL)
sSQL="UPDATE orders SET ordAuthNumber='"&trim(request.form("order_number"))&"' WHERE ordID="&trim(request.form("cart_order_id"))
cnn.Execute(sSQL)
Call order_success(Request.Form("cart_order_id"),emailAddr,sendEmail)
else
Call order_failed
end if
elseif Request.Form("CUSTID") <> "" AND Request.Form("AUTHCODE") <> "" then ' PayFlow Link
if Trim(request.form("RESULT"))="0" then
do_stock_management(trim(request.form("CUSTID")))
sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&trim(request.form("CUSTID"))
cnn.Execute(sSQL)
sSQL="UPDATE orders SET ordAuthNumber='"&trim(request.form("CSCMATCH"))&trim(request.form("AVSDATA"))&"-"&trim(request.form("AUTHCODE"))&"' WHERE ordID="&trim(request.form("CUSTID"))
cnn.Execute(sSQL)
Call order_success(Request.Form("CUSTID"),emailAddr,sendEmail)
else
Call order_failed
end if
elseif Request.Form("emailorder")<>"" then
do_stock_management(trim(request.form("emailorder")))
sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&trim(request.form("emailorder"))
cnn.Execute(sSQL)
sSQL="UPDATE orders SET ordAuthNumber='Email Only' WHERE ordID="&trim(request.form("emailorder"))
cnn.Execute(sSQL)
Call order_success(Request.Form("emailorder"),emailAddr,sendEmail)
elseif Request.QueryString("OrdNo")<>"" AND Request.QueryString("RefNo")<>"" then ' PSiGate
do_stock_management(trim(request.QueryString("OrdNo")))
sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&trim(request.QueryString("OrdNo"))
cnn.Execute(sSQL)
sSQL="UPDATE orders SET ordAuthNumber='"&trim(request.QueryString("RefNo"))&"' WHERE ordID="&trim(request.QueryString("OrdNo"))
cnn.Execute(sSQL)
Call order_success(Request.QueryString("OrdNo"),emailAddr,sendEmail)
elseif Request.Form("docapture")="vsprods" then
if encryptmethod<>"none" then
thecert = Replace(thecert,"-----BEGIN CERTIFICATE-----","")
thecert = Trim(Replace(thecert,"-----END CERTIFICATE-----",""))
err.number = 0
on error resume next
Set CM = Server.CreateObject("Persits.CryptoManager")
if err.number <> 0 then
success=false
errmsg = "Error ! Cannot invoke Persits ASPEncrypt"
end if
if success then
Set Blob = CM.CreateBlob
err.number = 0
' Set Context = CM.OpenContextEx( "Microsoft Enhanced Cryptographic Provider v1.0", "mycontainer", True)
Set Context = CM.OpenContext("", True)
if err.number = 0 then
Blob.Base64 = thecert
Set Cert = CM.ImportCertFromBlob(Blob)
if err.number <> 0 then
success=false
errmsg = "Error ! Cannot import certificate."
end if
else
success=false
errmsg = "Error ! Trying to invoke Microsoft Enhanced Cryptographic Provider v1.0"
end if
end if
on error goto 0
end if
if success then
if encryptmethod="none" then
enctext = Trim(Replace(Request.Form("ACCT"),"'","")) & "&" & Trim(Replace(Request.Form("EXMON"),"'",""))&"/"&Trim(Replace(Request.Form("EXYEAR"),"'","")) & "&" & Trim(Replace(Request.Form("CVV2"),"'",""))
elseif encryptmethod="aspencrypt" OR encryptmethod="" then
' response.write "Cert Version: " & Cert.Version & ":" & Cert.SerialNumber & ":" & Cert.NotAfter & ":" & Cert.NotBefore & "<BR>"
Set Msg = Context.CreateMessage(True)
Msg.AddRecipientCert Cert
enctext = Msg.EncryptText(Trim(Replace(Request.Form("ACCT"),"'","")) & "&" & Trim(Replace(Request.Form("EXMON"),"'",""))&"/"&Trim(Replace(Request.Form("EXYEAR"),"'","")) & "&" & Trim(Replace(Request.Form("CVV2"),"'","")))
end if
do_stock_management(trim(request.form("ordernumber")))
sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&trim(request.form("ordernumber"))
cnn.Execute(sSQL)
sSQL="UPDATE orders SET ordAuthNumber='Card Capture',ordCNum='"&enctext&"' WHERE ordID="&trim(request.form("ordernumber"))
cnn.Execute(sSQL)
Call order_success(Request.Form("ordernumber"),emailAddr,sendEmail)
else
response.write "<p> </p><p align='center'><b><font color='#FF0000'>"&errmsg&"</font></b></p>"
Call order_failed
end if
elseif Request.QueryString("OrdNo")<>"" AND Request.QueryString("ErrMsg") <> "" then ' PSiGate Error Reporting
errtext = Request.QueryString("ErrMsg")
Call order_failed
else
%>
<!--#include file="customppreturn.asp"-->
<%
end if
cnn.Close
%>