<?php
  session_start();
  //connect to the database - either include a connection variable file 
  //or type the following lines:
  $connect\; =\; mysql\_connect("localhost",\; "bp5am",\; "bp5ampass")\; or\; die\; ("Hey\; loser,\; check\; your\; server\; connection.");\; mysql\_select\_db("ecommerce");$//Let's make the variables easy to access in our queries
  firstname = $\_POST[\text{'}firstname\text{'}];$lastname = $\_POST[\text{'}lastname\text{'}];$firstname = $\_POST[\text{'}firstname\text{'}];$add1 = $\_POST[\text{'}add1\text{'}];$add2 = $\_POST[\text{'}add2\text{'}];$city = $\_POST[\text{'}city\text{'}];$state = $\_POST[\text{'}state\text{'}];$zip = $\_POST[\text{'}zip\text{'}];$phone = $\_POST[\text{'}phone\text{'}];$fax = $\_POST[\text{'}fax\text{'}];$email = $\_POST[\text{'}email\text{'}];$shipfirst = $\_POST[\text{'}shipfirst\text{'}];$shiplast = $\_POST[\text{'}shiplast\text{'}];$shipadd1 = $\_POST[\text{'}shipadd1\text{'}];$shipadd2 = $\_POST[\text{'}shipadd2\text{'}];$shipcity = $\_POST[\text{'}shipcity\text{'}];$shipstate = $\_POST[\text{'}shipstate\text{'}];$shipzip = $\_POST[\text{'}shipzip\text{'}];$shipstate = $\_POST[\text{'}shipstate\text{'}];$shipphone = $\_POST[\text{'}shipphone\text{'}];$shipemail = $\_POST[\text{'}shipemail\text{'}];$total = $\_POST[\text{'}total\text{'}];$sessid = session_id();
  $today\; =\; date("Y-m-d");$//1) Assign Customer Number to new Customer, or find existing customer number
  query = "SELECT * FROM customers WHERE
            (customers_firstname = '$firstname\text{'}\; AND\; customers\_lastname\; =\; \text{'}$lastname' AND
            customers_add1 = '$add1\text{'}\; AND\; customers\_add2\; =\; \text{'}$add2' AND
            customers_city = '$city\text{'})";$results = mysql_query($query)\; or\; (mysql\_error());$rows = mysql_num_rows($results);\; if\; ($rows < 1) {
    //assign new custnum
    $query2\; =\; "INSERT\; INTO\; customers\; (\; customers\_firstname,\; customers\_lastname,\; customers\_add1,\; customers\_add2,\; customers\_city,\; customers\_state,\; customers\_zip,\; customers\_phone,\; customers\_fax,\; customers\_email)\; VALUES\; (\; \text{'}$firstname',
              '$lastname\text{'},\; \text{'}$add1',
              '$add2\text{'},\; \text{'}$city',
              '$state\text{'},\; \text{'}$zip',
              '$phone\text{'},\; \text{'}$fax',
              '$email\text{'})";$insert = mysql_query($query2)\; or\; (mysql\_error());$custid = mysql_insert_id();
  }
  
  //If custid exists, we want to make it equal to custnum
  //Otherwise we will use the existing custnum
  if ($custid)\; \{$customers_custnum = $custid;\; \}$//2) Insert Info into ordermain
  //determine shipping costs based on order total (25% of total)
  shipping = $total\; *\; 0.25;$query3 = "INSERT INTO ordermain (
             ordermain_orderdate, ordermain_custnum,
             ordermain_subtotal,ordermain_shipping,
             ordermain_shipfirst, ordermain_shiplast,
             ordermain_shipadd1, ordermain_shipadd2,
             ordermain_shipcity, ordermain_shipstate,
             ordermain_shipzip, ordermain_shipphone,
             ordermain_shipemail)
             VALUES (
             '$today\text{'},\; \text{'}$customers_custnum',
             '$total\text{'},\; \text{'}$shipping'
             '$shipfirst\text{'},\; \text{'}$shiplast',
             '$shipadd1\text{'},\; \text{'}$shipadd2',
             '$shipcity\text{'},\; \text{'}$shipstate',
             '$shipzip\text{'},\; \text{'}$shipphone',
             '$shipemail\text{'})";$insert2 = mysql_query($query3)\; or\; (mysql\_error());$orderid = mysql_insert_id();
  
  //3) Insert Info into orderdet
  //find the correct cart information being temporarily stored
  $query\; =\; "SELECT\; *\; FROM\; carttemp\; WHERE\; carttemp\_sess=\text{'}$sessid'";
  $results\; =\; mysql\_query($query)
    or (mysql_error());
  
  //put the data into the database one row at a time
  while ($row\; =\; mysql\_fetch\_array($results)) {
    extract($row);$query4 = "INSERT INTO orderdet (
               orderdet_ordernum, orderdet_qty, orderdet_prodnum)
               VALUES (
               '$orderid\text{'},\; \text{'}$carttemp_quan',
               '$carttemp\_prodnum\text{'})";$insert4 = mysql_query($query4)\; or\; (mysql\_error());\; \}$//4)delete from temporary table
  query = "DELETE FROM carttemp WHERE carttemp_sess='$sessid\text{'}";$delete = mysql_query($query);$//5)email confirmations to us and to the customer
  /* recipients */
  to = "<" . $email\; .">";$/* subject */
  subject = "Order Confirmation";
  
  /* message */
    /* top of message */
    $message\; =\; "$<html>
      <head>
      <title>Order Confirmation</title>
      </head>
      <body>
      Here is a recap of your order:<br><br>
      Order date: ";
    message .= $today;$message .= "
      <br>
      Order Number: ";
    $message\; .=$orderid;
    $message\; .=\; "$<table width=\"50%\" border=\"0\">
        <tr>
          <td>
            <p>Bill to:<br>";
    message .= $firstname;$message .= " ";
    $message\; .=$lastname;
    $message\; .=\; "$<br>";
    message .= $add1;$message .= "<br>";
    if ($add2)\; \{$message .= $add2\; .\; "$<br>";
    }
    message .= $city\; .\; ",\; "\; .$state . "  " . $zip;$message .= "</p></td>
      <td>
        <p>Ship to:<br>";
    $message\; .=$shipfirst . " " . $shiplast;$message .= "<br>";
    $message\; .=$shipadd1 . "<br>";
    if ($shipadd2)\; \{$message .= $shipadd2\; .\; "$<br>";
    }
    message .= $shipcity\; .\; ",\; "\; .$shipstate . "  " . $shipzip;$message .= "</p>
          </td>
        </tr>
      </table>
      <hr width=\"250px\" align=\"left\">
      <table cellpadding=\"5\">";
  
  //grab the contents of the order and insert them
  //into the message field
  
  $query\; =\; "SELECT\; *\; FROM\; orderdet\; WHERE\; orderdet\_ordernum\; =\; \text{'}$orderid'";
  $results\; =\; mysql\_query($query)
    or die (mysql_query());
  while ($row\; =\; mysql\_fetch\_array($results)) {
    extract($row);$prod = "SELECT * FROM products
             WHERE products_prodnum = '$orderdet\_prodnum\text{'}";$prod2 = mysql_query($prod);$prod3 = mysql_fetch_array($prod2);\; extract($prod3);
    $message\; .=\; "$<tr><td>";
    message .= $orderdet\_qty;$message .= "</td>";
    $message\; .="$<td>";
    message .= $products\_name;$message .= "</td>";
    $message\; .=\; "$<td align=\"right\">";
    message .= $products\_price;$message .= "</td>";
    $message\; .=\; "$<td align=\"right\">";
    //get extended price
    extprice = number_format($products\_price\; *$orderdet_qty, 2);
    $message\; .=$extprice;
    $message\; .=\; "$</td>";
    message .= "</tr>";
  }
  
    $message\; .=\; "$<tr>
      <td colspan=\"3\" align=\"right\">
        Your total before shipping is:
      </td>
      <td align=\"right\">";
    message .= number_format($total,\; 2);$message .= "
        </td>
      </tr>
      <tr>
        <td colspan=\"3\" align=\"right\">
          Shipping Costs:
        </td>
        <td align=\"right\">";
    $message\; .=\; number\_format($shipping, 2);
    $message\; .=\; "$</td>
      </tr>
      <tr>
        <td colspan=\"3\" align=\"right\">
          Your final total is:
        </td>
        <td align=\"right\"> ";
    message .= number_format(($total\; +$shipping), 2);
    $message\; .=\; "$</td>
        </tr>
      </table>
      </body>
      </html>";
  
  /* headers */
  headers = "MIME-Version: 1.0\r\n";
  $headers\; .=\; "Content-type:\; text/html;\; charset=iso-8859-1\backslash r\backslash n";$headers .= "From: <storeemail@email.com>\r\n";
  $headers\; .=\; "Cc:$<storeemail@email.com>\r\n";
  headers .= "X-Mailer: PHP / ".phpversion()."\r\n";
  
  /* mail it */
  mail($to,$subject, $message,$headers);
  
  //6)show them their order & give them an order number
  
  echo "Step 1 - Please Enter Billing and Shipping Information<br>";
  echo "Step 2 - Please Verify Accuracy and Make Any Necessary Changes<br>";
  echo "<strong>Step 3 - Order Confirmation and Receipt</strong><br><br>";
  
  echo $message;\; ?>$