HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: D:/web/homefly/vsadmin/wpconfirm.asp
<html>
<head>
<title>Thanks for shopping with us</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
A:link {
	COLOR: #FFFFFF; TEXT-DECORATION: none
}
A:visited {
	COLOR: #FFFFFF; TEXT-DECORATION: none
}
A:active {
	COLOR: #FFFFFF; TEXT-DECORATION: none
}
A:hover {
	COLOR: #f39000; TEXT-DECORATION: underline
}
TD {
	FONT-FAMILY: Verdana; FONT-SIZE: 13px
}
P {
	FONT-FAMILY: Verdana; FONT-SIZE: 13px
}
-->
</style>
</head>
<!--#include file="db_conn_open.asp"-->
<!--#include file="includes.asp"-->
<!--#include file="inc/incemail.asp"-->
<!--#include file="inc/languagefile.asp"-->
<!--#include file="inc/incfunctions.asp"-->
<%
Dim orderid,rs,rs2,sSQL,orderText, custEmail, mailsystem, useEuro, success, isworldpay, isauthnet, stockManage
Sub order_success(sorderid,sEmail,bSendEmail)
Dim custEmail, ordAddInfo
affilID = ""
sSQL = "SELECT ordID,ordName,ordAddress,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHandling,ordShipping,ordAffiliate,ordShipType,ordDiscount,ordDiscountText,ordAddInfo FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID="&sorderid
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
	orderText = xxOrdId & ": " & rs("ordID") & vbCrLf
	if thereference<>"" then orderText = orderText & "Transaction Ref" & ": " & thereference & vbCrLf
	orderText = orderText & xxCusDet & ": " & vbCrLf
	orderText = orderText & rs("ordName") & vbCrLf
	orderText = orderText & rs("ordAddress") & vbCrLf
	orderText = orderText & rs("ordCity") & ", " & rs("ordState") & vbCrLf
	orderText = orderText & rs("ordZip") & vbCrLf
	orderText = orderText & rs("ordCountry") & vbCrLf
	orderText = orderText & xxEmail & ": " & rs("ordEmail") & vbCrLf
	custEmail = rs("ordEmail")
	orderText = orderText & xxPhone & ": " & rs("ordPhone") & vbCrLf
	if Trim(rs("ordShipName")) <> "" OR Trim(rs("ordShipAddress")) <> "" then
		orderText = orderText & xxShpDet & ": " & vbCrLf
		orderText = orderText & rs("ordShipName") & vbCrLf
		orderText = orderText & rs("ordShipAddress") & vbCrLf
		orderText = orderText & rs("ordShipCity") & ", " & rs("ordShipState") & vbCrLf
		orderText = orderText & rs("ordShipZip") & vbCrLf
		orderText = orderText & rs("ordShipCountry") & vbCrLf
	end if
	ordShipType = rs("ordShipType")
	if ordShipType <> "" then
		orderText = orderText & vbCrLf & xxShpMet & ": " & ordShipType & vbCrLf
	end if
	ordAddInfo = Trim(rs("ordAddInfo"))
	if ordAddInfo <> "" then
		orderText = orderText & vbCrLf & xxAddInf & ": " & vbCrLf
		orderText = orderText & ordAddInfo & vbCrLf
	end if
	ordTotal = rs("ordTotal")
	ordDate = rs("ordDate")
	ordStateTax = rs("ordStateTax")
	ordDiscount = rs("ordDiscount")
	ordDiscountText = rs("ordDiscountText")
	ordCountryTax = rs("ordCountryTax")
	ordShipping = rs("ordShipping")
	ordHandling = rs("ordHandling")
	affilID = Trim(rs("ordAffiliate"))
else
	orderText = "Cannot find customer details" & vbCrLf
end if
rs.Close

sSQL = "SELECT cartProdId,cartProdName,cartProdPrice,cartQuantity,cartID FROM cart WHERE cartOrderID="&sorderid
rs.Open sSQL,cnn,0,1
if NOT rs.EOF then
	do while not rs.EOF
		orderText = orderText & "--------------------------" & vbCrLf
		orderText = orderText & xxPrId & ": " & rs("cartProdId") & vbCrLf
		orderText = orderText & xxPrNm & ": " & rs("cartProdName") & vbCrLf
		orderText = orderText & xxQuant & ": " & rs("cartQuantity") & vbCrLf
		orderText = orderText & xxUnitPr & ": " & FormatEmailEuroCurrency(rs("cartProdPrice")) & vbCrLf

		optPriceDiff=0
		sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff FROM cartOptions WHERE coCartID="&rs("cartID")
		rs2.Open sSQL,cnn,0,1
		do while NOT rs2.EOF
			orderText = orderText & "    > " & rs2("coOptGroup") & " : " & rs2("coCartOption")
			if rs2("coPriceDiff")=0 then
				orderText = orderText & vbCrlf
			else
				orderText = orderText & " ("
				if rs2("coPriceDiff") > 0 then orderText = orderText & "+" else orderText = orderText & "-"
				orderText = orderText & FormatEmailEuroCurrency(rs2("coPriceDiff")) & ")" & vbCrLf
			end if
			rs2.MoveNext
		loop
		rs2.Close

		rs.MoveNext
	loop
	orderText = orderText & "--------------------------" & vbCrLf

	orderText = orderText & xxOrdTot & " : " & FormatEmailEuroCurrency(ordTotal) & vbCrLf
	if cDbl(ordStateTax)<>0.0 then orderText = orderText & xxStaTax & " : " & FormatEmailEuroCurrency(ordStateTax) & vbCrLf
	if cDbl(ordCountryTax)<>0.0 then orderText = orderText & xxCntTax & " : " & FormatEmailEuroCurrency(ordCountryTax) & vbCrLf
	orderText = orderText & xxShippg & " : " & FormatEmailEuroCurrency(ordShipping) & vbCrLf
	if cDbl(ordHandling)<>0.0 then orderText = orderText & xxHndlg & " : " & FormatEmailEuroCurrency(ordHandling) & vbCrLf
	if cDbl(ordDiscount)<>0.0 then orderText = orderText & xxDscnts & " : " & FormatEmailEuroCurrency(ordDiscount) & vbCrLf
	orderText = orderText & xxGndTot & " : " & FormatEmailEuroCurrency((ordTotal+ordStateTax+ordCountryTax+ordShipping+ordHandling)-ordDiscount) & vbCrLf
else
	orderText = orderText & "Cannot find order details" & vbCrLf
end if
rs.Close
if bSendEmail then
	Call DoSendEmail(sEmail,sEmail,xxOrdStr,orderText)
end if
' And one for the customer
Call DoSendEmail(custEmail,sEmail,xxTnxOrd,xxTouSoo & vbCrLf & vbCrLf & orderText)
if affilID<>"" then
	sSQL = "SELECT affilEmail,affilInform FROM affiliates WHERE affilID='"&affilID&"'"
	rs.Open sSQL,cnn,0,1
	if NOT rs.EOF then
		if Int(rs("affilInform"))=1 then
			affiltext = xxAff1 & " "&FormatEmailEuroCurrency(ordTotal)&"."&vbCrLf&vbCrLf&xxAff2&vbCrLf&vbCrLf&xxThnks&vbCrLf
			Call DoSendEmail(Trim(rs("affilEmail")),sEmail,xxAff3,affiltext)
		end if
	end if
	rs.Close
end if
End sub

Set rs = Server.CreateObject("ADODB.RecordSet")
Set rs2 = Server.CreateObject("ADODB.RecordSet")
Set cnn=Server.CreateObject("ADODB.Connection")
cnn.open sDSN
sSQL="SELECT adminEmail,adminEmailConfirm,adminStoreURL,countryLCID,countryCurrency,adminStockManage FROM admin INNER JOIN countries ON admin.adminCountry=countries.countryID WHERE adminID=1"
rs.Open sSQL,cnn,0,1
emailAddr = rs("adminEmail")
sendEmail = Int(rs("adminEmailConfirm"))=1
storeUrl = rs("adminStoreURL")
if (left(LCase(storeurl),7) <> "http://") AND (left(LCase(storeurl),8) <> "https://") then
	storeurl = "http://" & storeurl
end if
if Right(storeurl,1) <> "/" then storeurl = storeurl & "/"
if Int(rs("countryLCID"))<>0 then Session.LCID = Int(rs("countryLCID"))
useEuro=(rs("countryCurrency")="EUR")
stockManage=Int(rs("adminStockManage"))
rs.Close
success = false
isworldpay = false
isauthnet = false
isnetbanx = false
issecpay = false
if Trim(request.form("transStatus"))<>"" then ' WorldPay
	isworldpay = true
	if Trim(request.form("transStatus"))="Y" then
		orderid = trim(request.form("cartId"))
		do_stock_management(orderid)
		sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&orderid
		cnn.Execute(sSQL)
		sSQL="UPDATE orders SET ordAuthNumber='"&trim(request.form("transId"))&"' WHERE ordID="&orderid
		cnn.Execute(sSQL)
		Call order_success(orderid,emailAddr,sendEmail)
		success = true
	end if
elseif Trim(request.form("x_response_code"))<>"" then ' Authorize.net
	isauthnet = true
	if Trim(request.form("x_response_code"))="1" then
		orderid = trim(request.form("x_cust_id"))
		do_stock_management(orderid)
		sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&orderid
		cnn.Execute(sSQL)
		sSQL="UPDATE orders SET ordAuthNumber='"&trim(request.form("x_avs_code"))&"-"&trim(request.form("x_auth_code"))&"' WHERE ordID="&orderid
		cnn.Execute(sSQL)
		Call order_success(orderid,emailAddr,sendEmail)
		success = true
	else
		errormsg = Trim(request.form("x_response_reason_text"))
	end if
elseif Trim(request.form("trans_id"))<>"" then ' Secpay
	issecpay = true
	if Trim(request.form("valid"))="true" AND Trim(request.form("auth_code"))<>"" then
		orderid = trim(request.form("trans_id"))
		do_stock_management(orderid)
		sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&orderid
		cnn.Execute(sSQL)
		sSQL="UPDATE orders SET ordAuthNumber='"
		if trim(request.form("cv2avs"))<>"" then sSQL=sSQL & trim(request.form("cv2avs"))&"-"
		sSQL=sSQL & trim(request.form("auth_code"))&"' WHERE ordID="&orderid
		cnn.Execute(sSQL)
		Call order_success(orderid,emailAddr,sendEmail)
		success = true
	else
		errormsg = Trim(request.form("message"))
	end if
elseif Trim(request.form("netbanx_reference"))<>"" then ' Netbanx
	isnetbanx = true
	thereference = Trim(request.form("netbanx_reference"))
	if Trim(Request.ServerVariables("REMOTE_HOST"))<>"195.224.77.2" then
		errormsg = "Error: This transaction does not appear to have been initiated by Netbanx"
	elseif thereference<>"0" AND Trim(request.form("order_id"))<>"" then
		orderid = trim(request.form("order_id"))
		do_stock_management(orderid)
		sSQL="UPDATE cart SET cartCompleted=1 WHERE cartOrderID="&orderid
		cnn.Execute(sSQL)
		if trim(request.form("houseno_auth"))="Matched" then
			allchecks = "Y"
		elseif trim(request.form("houseno_auth"))="Not matched" then
			allchecks = "N"
		else
			allchecks = "X"
		end if
		if trim(request.form("postcode_auth"))="Matched" then
			allchecks = allchecks & "Y"
		elseif trim(request.form("postcode_auth"))="Not matched" then
			allchecks = allchecks & "N"
		else
			allchecks = allchecks & "X"
		end if
		if trim(request.form("CV2_auth"))="Matched" then
			allchecks = allchecks & "Y"
		elseif trim(request.form("CV2_auth"))="Not matched" then
			allchecks = allchecks & "N"
		else
			allchecks = allchecks & "X"
		end if
		sSQL="UPDATE orders SET ordAuthNumber='" & allchecks & "-" & thereference &"' WHERE ordID="&orderid
		cnn.Execute(sSQL)
		Call order_success(orderid,emailAddr,sendEmail)
		success = true
	else
		errormsg = "Transaction Declined"
	end if
end if
%>
<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<table width="100%" border="0" cellspacing="0" cellpadding="0" bgcolor="#F39900">
  <tr>
    <td>
      <table width="100%" border="1" cellspacing="1" cellpadding="3">
        <tr> 
          <td rowspan="4" bgcolor="#333333">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
          <td width="100%" bgcolor="#333333" align="center"><font color="#FFFFFF" face="Arial, Helvetica, sans-serif"><b><% response.write xxInAssc&"&nbsp;"
		if isworldpay then
			response.write "WorldPay"
		elseif isauthnet then
			response.write "Authorize.Net"
		elseif isnetbanx then
			response.write "Netbanx"
		elseif issecpay then
			response.write "SECPay"
		else
			response.write "<a href=""http://www.ecommercetemplates.com"">EcommerceTemplates.com</a>"
		end if %></b></font></td>
          <td rowspan="4" bgcolor="#333333">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
        </tr>
        <tr> 
          <td width="100%" bgcolor="#637BAD" align="center"><font color="#FFFFFF"><b><font face="Verdana, Arial, Helvetica, sans-serif" size="3"><%=xxTnkStr%></font></b></font></td>
        </tr>
        <tr> 
          <td width="100%" align="center" bgcolor="#F5F5F5"> 
<% if isworldpay then %>
			<p>&nbsp;</p>
			<p align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b><%=xxTnkWit%> <WPDISPLAY ITEM=compName></b></font></p>
            <p><wpdisplay item="banner"></p>
            <p>&nbsp;</p>
			<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b><%=xxPlsNt1&" "&xxMerRef&" "&xxPlsNt2%></b></font></p>
			<p>&nbsp;</p>
<% elseif success then %>
		  <table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
			<tr>
			  <td width="100%" align="center">
				<table width="80%" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
				  <tr> 
					<td width="100%" align="center"><%=xxThkYou%>
					</td>
				  </tr>
				  <tr> 
					<td width="100%"><%response.write Replace(Replace(orderText,vbCrLf,"<BR>")," ","&nbsp;")%>
					</td>
				  </tr>
				  <tr> 
					<td width="100%" align="center"><br><br>
					<%=xxRecEml%><br><br>
					<a href="<%=storeUrl%>"><font color="#637BAD"><b><%=xxCntShp%></b></font></a><br>
					<img src="images/clearpixel.gif" width="350" height="3">
					</td>
				  </tr>
				</table>
			  </td>
			</tr>
		  </table>
<% else %>
		  <p>&nbsp;</p>
		  <table border="0" cellspacing="<%=maintablespacing%>" cellpadding="<%=maintablepadding%>" width="<%=maintablewidth%>" bgcolor="<%=maintablebg%>" align="center">
			<tr>
			  <td width="100%">
				<table width="<%=innertablewidth%>" border="0" cellspacing="<%=innertablespacing%>" cellpadding="<%=innertablepadding%>" bgcolor="<%=innertablebg%>">
				  <tr> 
					<td width="100%" colspan="2" align="center"><%=xxThkErr%>
					<p>The error report returned by the server was:<br><b><%=errormsg%></b></p>
					<a href="<%=storeUrl%>"><font color="#637BAD"><b><%=xxCntShp%></b></font></a><br>
					<p>&nbsp;</p>
					</td>
				  </tr>
				</table>
			  </td>
			</tr>
		  </table>
<% end if %>
          </td>
        </tr>
        <tr> 
          <td width="100%" bgcolor="#333333" align="center"><font color="#FFFFFF"><b><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><a href="<%=storeUrl%>"><%=xxClkBck%></a></font></b></font></td>
        </tr>
      </table>
    </td>
  </tr>
</table>
</body>
</html>