#!/usr/bin/perl
####################################################### 
#thatsanorder_LE 1.0						  
#											  
#by Command-O Software							  
#http://www.command-o.com	
#					  
#Programmer: Kendall Comey, kendall@command-o.com		  
#										   
#Copyright, 1999, All Rights Reserved					  
#
#By using this script Licensee agrees to all terms of the License  
#Agreement.									  
#
#######################################################
# Client Customization Variables
$root="/home/virtual/crystalfanaticsclub.com/var/www/html";
require 'cgi-lib.pl';
############################################################
# CHANGING ANYTHING BELOW THIS LINE WITHOUT THE EXPRESS PERMISSION	 
#  OF COMMAND-O SOFTWARE IS A VIOLATION OF THE LICENSE AGREEMENT	  
############################################################
#Turn off Perl buffering
$| = 1;

&ReadParse(*input);
open (GROUP, ".user");
$username = <GROUP>;
close (GROUP);
$server = "$ENV{'SERVER_NAME'}";
$script_secure = "/cgi-bin/thatsanorder_LE";
$server =~ s/^www\.//;
$header = "$root/thatsanorder/header.html";
$footer = "$root/thatsanorder/footer.html";
$setup = "$root/thatsanorder/thatsanorder_LE.setup";
$email_txt = "$root/thatsanorder/cust_email.txt";
$script = "$ENV{'SCRIPT_NAME'}";
$dir_path = "$root/thatsanorder";
$db = "$root/thatsanorder/secure/prod.db";
$mailprog = '/usr/sbin/sendmail -t';
$email_db = "$root/thatsanorder/secure/email.db";
$master = "$root/thatsanorder/secure/master.db";
$order_number = "$root/thatsanorder/secure/order_num.SAVE";
$date_command = "/bin/date";
$date = `$date_command +"%D"`; 

###################################################################
unless (-e "$setup")	{
	print &PrintHeader;
	&error("You must first set up That's An Order LE before you can open shop.");
}

if ($ENV{'QUERY_STRING'} =~ /^checkout/)	{
	($trash, $input{'userid'}, $input{'state'}, $input{'ship_method'}) = split(/\|/,$ENV{'QUERY_STRING'});
	$secure = 1;
	print &PrintHeader;
	&SECURE_CHECKOUT;
	exit;
}

if ($input{'action'} ne "")	{
	$action = $input{'action'};	
	$action =~ s/\s+/_/g;
	unless ($action eq "SECURE_CHECKOUT")	{
	print &PrintHeader;
	}
	&$action;
	exit;
}
else	{
	print &PrintHeader;
	&show_products;
	exit;
}
############################################################
sub PLACE_SECURE_ORDER	{	
	$secure = 1;
	&check_order_info;
	&get_order_num;
	&email_customer_receipt;
	&email_admin_order;
	&write_master_file;
	&write_emails;
	&thank_you;
	&delete_cart;
	exit;
}
############################################################
sub PLACE_ORDER	{	
	&check_order_info;
	&get_order_num;
	&email_customer_receipt;
	&email_admin_order;
	&write_master_file;
	&write_emails;
	&thank_you;
	&delete_cart;
	exit;
}
############################################################
sub SECURE_CHECKOUT	{
unless ($secure == 1)	{
$script_secure = &get_ssl_url;
	if ($input{'state'} eq "Choose State")	{
	print &PrintHeader;
	&error("Please choose a state for your order to be shipped to.");
	}
	if ($input{'ship_method'} eq "Choose Ship Method")	{
	print &PrintHeader;
	&error("Please choose the shipping method you prefer for your order.");
	}
	&UPDATE_ORDER;
	print "Location: $script_secure?checkout|$input{'userid'}|$input{'state'}|$input{'ship_method'}\n\n";
}

&get_order;
&print_order;
&checkout_form;
#&footer;
}	
############################################################
sub REGULAR_CHECKOUT	{
if ($input{'state'} eq "Choose State")	{
	&error("Please choose a state for your order to be shipped to.");
	}
if ($input{'ship_method'} eq "Choose Ship Method")	{
	&error("Please choose the shipping method you prefer for your order.");
	}

&UPDATE_ORDER;
&get_order;
&print_order;
&checkout_form;
#&footer;
}
############################################################
sub header	{
if ($secure != 1)	{
open (FILE, "$header") || die "Can't open $header";
flock(FILE, 2);
while (<FILE>)	{
	print "$_";
}
flock(FILE, 8);
close (FILE);
}
else	{
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/^USERNAME/)	{
	($trash, $username) = split(/\|/, $_);
	chomp($username);
	last;
	}
}
flock(FILE, 8);
close (FILE);

open (FILE, "$header") || die "Can't open $header";
flock(FILE, 2);
while (<FILE>)	{
	if (/img src/)	{
		s/img src\s*=\s*"\/(.+?)"/img src = "\/$username\/$1"/;
		print "$_";
	}
	else	{
		print "$_";
	}
}
flock(FILE, 8);
close (FILE);
}
}
############################################################
sub footer	{
if ($secure != 1)	{
print <<EOT;
<center>
<P>
</center>
<P>
EOT
}
else	{
print <<EOT;
<center>
<P>
</center>
<P>
EOT
}

if ($secure != 1)	{
open (FILE, "$footer") || die "Can't open $footer";
flock(FILE, 2);
while (<FILE>)	{
	print "$_";
}
flock(FILE, 8);
close (FILE);
}
else	{
open (FILE, "$footer") || die "Can't open $footer";
flock(FILE, 2);
while (<FILE>)	{
	if (/img src/)	{
		s/img src\s*=\s*"\/(.+?)"/img src = "\/$username\/$1"/;
		print "$_";
	}
	else	{
		print "$_";
	}
}
flock(FILE, 8);
close (FILE);
}
}
############################################################
sub show_products	{
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/^IMAGES/)	{
		if (/yes/)	{
		$images = 1;
		}
	}
	if (/^SIZES/)	{
		if (/yes/)	{
		$sizes = 1;
		}
	}
	if (/^COLORS/)	{
		if (/yes/)	{
		$colors = 1;
		}
	}
	if (/^DESC/)	{
		if (/yes/)	{
		$desc = 1;
		}
	}
}
flock(FILE, 8);
close (FILE);

open (FILE, "$db") || die "Can't open $db";
flock(FILE, 2);
@prods = <FILE>;
flock(FILE, 8);
close (FILE);

@prods = splice(@prods,0,25);

$start = "1";

$end = @prods;

$loop_start = $start - 1;

&header;
print <<EOT;
<form action="$script" method="post">
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">
Displaying products $start-$end of $end<br>
To order enter the desired quantity in the Qty. box and press the 'Order' button
at the bottom of the page.
<P>
EOT

print "<center><table border=0>";

for ($i=$loop_start; $i<$end; $i++)	{
@fields = split(/\|/, $prods[$i]);

	if ($images == 1 && $fields[3] ne "http://pictures.axxs.net/thatsanorder/images/")	{
	print "<tr valign=top><td><img src=\"$fields[3]\"></td>";
	}
	else	{
	print "<tr valign=top><td></td>";
	}
	print "<td><font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\"><b>$fields[0]</b> \$$fields[1]";
	
	if ($desc == 1)	{
	print "<br>$fields[2]<P>";
	}
	else	{
	print "<P>";
	}
	
	print "Qty. <input name=\"quan|$fields[0]\" size=3> ";
	
	if ($sizes == 1)	{
	@sizes = split(/\:\:/, $fields[4]);
	@sizes = grep(/\w+/, @sizes);
		unless (scalar(@sizes) < 1)	{
		print "<select name=\"size|$fields[0]\">";
			if (scalar(@sizes) > 1)	{
			print "<option>Select size</option>";
			}
			foreach $sizes(@sizes)	{
			print "<option>$sizes</option>";
			}
		print "</select> ";
		}
	}
	
	if ($colors == 1)	{
	chomp($fields[5]);
	@colors = split(/\:\:/, $fields[5]);
	@colors = grep(/\w+/, @colors);
		unless (scalar(@colors) < 1)	{
		print "<select name=\"color|$fields[0]\">";
			if (scalar(@colors) > 1)	{
			print "<option>Select color</option>";
			}
			foreach $colors(@colors)	{
			print "<option>$colors</option>";
			}
		print "</select>";
		}
	}
	
	print "</font></td></tr>\n";
	print "<tr><td colspan = 2 align=center><hr></td></tr>\n";
}
print "</table>";
print "<input type=\"hidden\" name=\"userid\" value=\"$input{'userid'}\">";
print "<P><input type=\"submit\" name=\"action\" value=\"Order\">";
#&footer;
}
############################################################
sub BACK_TO_PRODUCTS	{	
&show_products;
exit;
}
############################################################
sub Order	{
	if ($input{'userid'} eq "")	{
	&create_userid;
	}
	&write_order;
	&get_order;
	&print_cart;
}
############################################################
sub get_admin	{
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/^EMAIL/)	{
	chomp ($_);
	($trash, $email) = split(/\|/, $_);
	last;
	}
}
flock(FILE, 8);
close (FILE);

$admin = "$email";
}
############################################################
sub check_order	{
unless (-e "$root/thatsanorder/secure/orders")	{
$new_dir = "$root/thatsanorder/secure/orders";
mkdir ($new_dir, 0777) || die "Can't make directory";
}

$order = "$root/thatsanorder/secure/orders/order";
}
############################################################
sub get_ssl_url	{
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/^MACHINE/)	{
	chomp ($_);
	($trash, $machine) = split(/\|/, $_);
	}
	if (/^USERNAME/)	{
	chomp ($_);
	($trash, $username) = split(/\|/, $_);
	}
}
flock(FILE, 8);
close (FILE);

$script_secure = "https://$machine.safe-order.net/cgi-$username/thatsanorder_LE";
}
############################################################
sub write_emails	{
if ($input{'email'} ne "")	{
if (-e $email_db)	{
open (DB, "$email_db");
flock(DB, 2);
while (<DB>)	{
	if (/^$input{'email'}/)	{
	$dup = 1;
	last;
	}
}
flock(DB, 8);
close (DB);
}

if ($dup != 1)	{
open (DB, ">>$email_db");
flock(DB, 2);
print DB "$input{'email'}\n";
flock(DB, 8);
close (DB);
}
}
}
############################################################
sub write_master_file	{
$date =~ s/(\d\d)\/(\d\d)\/(\d\d)/$3$1$2/;
chomp($date);
$input{'day_phone'} =~ s/\D//g;
$input{'night_phone'} =~ s/\D//g;

open (FILE, ">>$master");
flock(FILE, 2);
print FILE "$order_num\|$input{'title'} $input{'first_name'} $input{'last_name'}\|$input{'company'}\|$input{'address1'}\|$input{'address2'}\|$input{'city'}\|$input{'state'}\|$input{'zip'}\|$input{'country'}\|$input{'day_phone'}\|$input{'day_exten'}\|$input{'night_phone'}\|$input{'night_exten'}\|$input{'fax'}\|$input{'email'}\|";

for ($i=0; $i<@order; $i++)	{
@fields = split(/\|/, $order[$i]);
print FILE "$fields[0]::$fields[1],";
}
$exp_date = "$input{'Expmonth'}" . "/" . "$input{'Expyear'}";
print FILE "\|$date\|";
print FILE "$input{'card_type'}\|$exp_date\|$subtotal\|$input{'tax'}\|$input{'ship_cost'}\|$total\|$input{'ship_method'}\n";
flock(FILE, 8);
close (FILE);
}
############################################################
sub get_order_num	{
if (-e $order_number)	{
open (FILE, "$order_number");
flock(FILE, 2);
$order_num = <FILE>;
flock(FILE, 8);
close (FILE);
}
else	{
$order_num = "10000";
}

$new_order_num = $order_num;
$new_order_num++;

open (FILE, ">$order_number");
flock(FILE, 2);
print FILE "$new_order_num";
flock(FILE, 8);
close (FILE);
}
############################################################
sub shipping	{
$input{'ship_method'} =~ s/_/ /g;
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while(<FILE>)	{
$line = "$_";
chomp($line);
	if ($line =~ /SHIPRATE/)	{
	@fields = split(/\|/, $line);
		if ($fields[1] eq "item")	{
			if ($fields[2] eq $input{'ship_method'})	{
			$shipping = "$fields[3]";
			$type_ship = 1;
			last;
			}
		}
		elsif ($fields[1] eq "percent")	{
			if ($fields[2] eq $input{'ship_method'})	{
			$shipping = "$fields[3]";
			$type_ship = 2;
			last;
			}
		}
		else	{
			if ($fields[2] eq $input{'ship_method'})	{
				if ($fields[3] >= $input{'subtotal'} && $fields[4] <= $input{'subtotal'})	{
				$shipping = "$fields[5]";
				$type_ship = 3;
				last;
				}
			}
		
		}
	}
}
flock(FILE, 8);
close (FILE);
}
############################################################
sub check_order_info	{
@REQUIRED = ("first_name","last_name","address1","city","zip","email","day_phone","card_no","name_on_card");
# Remove any fields that you do not want to make required

%REQUIRED = ("first_name","First Name", "last_name","Last Name","address1","Address","city","City","zip","Zip Code","email","Email Address","day_phone","Daytime Phone","card_no","Credit Card Number","name_on_card","Name on Card");

foreach $require(@REQUIRED)	{
	while (($key, $value) = each %input)	{
		if ($key eq $require && $value eq "")		{
		$incomplete = 1;
		push (@incomplete, "$require");
		}
	}
}

if ($incomplete == 1)	{
&incomplete_form;
}

unless ($input{'email'} =~ /^(\w|\.|-)+@(\w|\.|-)+\.(\w|\.|-)+$/)	{
$error_message = "Invalid email address.";
push (@errors, "email|$error_message");
}
$day_phone = $input{'day_phone'};
$day_phone =~ s/\D//g;
if (length($day_phone) < 10)	{
$error_message = "Invalid phone number. Please include your area code.";
push (@errors, "day_phone|$error_message");
}

&check_expiration_date;
&validate_credit_card;

if (scalar(@errors) >0)	{
&error_form;
}
}
############################################################
sub incomplete_form	{
if ($secure == 1)	{
#$script_secure = &get_ssl_url;
$script = $script_secure;
}
&header;

print <<EOT;
<center>
<h4>Warning - Incomplete Form</h4>
Your order has not yet been processed. The following information is required.<br>
Please complete the form and press the $type button at the bottom of the page.
EOT

print "<form action=\"$script\" method=\"post\">";

print "<table>";

foreach $order_key(@incomplete)	{	
print "<tr><td align=right><b>$REQUIRED{$order_key}</b>:</td><td align=left><INPUT NAME=\"$order_key\" SIZE=\"40\"></td></tr>\n"; 
}
	
while (($key, $value) = each %input)	{
$no_answer = 0;
	foreach $order_key(@incomplete)	{	
		if ($key eq $order_key)	{
		$no_answer = 1;
		last;
		}
	}
if ($no_answer != 1)	{
print "<input type=\"hidden\" name=\"$key\" value=\"$value\">\n";
}
}

print "</table>";

if ($secure == 1)	{
print "<INPUT TYPE=\"submit\" name=\"send_order\" VALUE=\"Send Secure Order\">";
}
else	{
print "<INPUT TYPE=\"submit\" name=\"send_order\" VALUE=\"Send Order\">";
}

print "<P>";
#&footer;
exit;
}
############################################################
sub error_form	{
if ($secure == 1)	{
#$script_secure = &get_ssl_url;
$script = $script_secure;
}

&header;
print <<EOT;
<center>
<h4>Warning - Error on Form</h4>
Your order has not yet been processed. The following information is invalid.
EOT
print "<form action=\"$script\" method=\"post\">";

print "<table>";

while (($key, $value) = each %input)	{
$no_answer = 0;
	foreach $error(@errors)	{
		($error_key, $message) = split(/\|/, $error);
		if ($error_key eq $key)	{
		print "<tr><td colspan=2><b><font color=\"red\">$message</td><td></td></tr>\n";
			if ($error_key eq "Expmonth")	{
			print "<td align=right><B>Expiration Date</B>:</td><td align=left> <select NAME=\"Expmonth\">\n";
			print "<option selected value=01>01 (January)\n";
			print "<option value=02>02 (February)\n";
			print "<option value=03>03 (March)\n";
			print "<option value=04>04 (April)\n";
			print "<option value=05>05 (May)\n";
			print "<option value=06>06 (June)\n";
			print "<option value=07>07 (July)\n";
			print "<option value=08>08 (August)\n";
			print "<option value=09>09 (September)\n";
			print "<option value=10>10 (October)\n";
			print "<option value=11>11 (November)\n";
			print "<option value=12>12 (December)\n";
			print "</select><select NAME=\"Expyear\">\n";

                        chop ($year = `$date_command +"%Y"`);
                        $end_year = $year + 6;
                        @years = ($year..$end_year);


                        foreach $year(@years)   {
                                if ($year eq "$input{'Expyear'}")       {
                                        print "<option selected>$year";
                                }
                                else    {
                                        print "<option>$year";  
                                }
                           }
                        ###change
                        print "</select></td></tr>";
			$no_answer = 1;
			}
			else	{
			print "<tr><td align=right><b>$REQUIRED{$key}</b>:</td><td align=left><INPUT NAME=\"$key\" SIZE=\"40\"></td></tr>\n"; 
			$no_answer = 1;
			}
		}
		
	}
if ($no_answer != 1)	{
	unless ($key eq "Expyear" && $card_expire == 1)	{
	print "<input type=\"hidden\" name=\"$key\" value=\"$value\">\n";
	}
}
}
print "</table>";
if ($secure == 1)	{
print "<INPUT TYPE=\"submit\" name=\"send_order\" VALUE=\"Send Secure Order\">";
}
else	{
print "<INPUT TYPE=\"submit\" name=\"send_order\" VALUE=\"Send Order\">";
}
print "<P>";
#&footer;
exit;
}
############################################################
sub delete_cart	{
while ($filename = <$dir_path/secure/orders/order.*>)	{
	open (ORDERSLIST, $filename);
		if (-M $filename > .5)	{
		unlink $filename;
		}
}
}
############################################################
sub thank_you	{
&header;
print <<EOT;
<center>
<h4>Thank You</h4>
Thank you for ordering from $storename. We appreciate your business.<br>
You will receive an order confirmation via email.<P>
</center>
EOT
#&footer;
}
############################################################
sub email_admin_order	{
$admin = &get_admin;
open (MAIL, "|$mailprog") || die "Can't open $mailprog!\n";
print MAIL "From: $input{'email'}\n";
print MAIL "To: $admin\n";
print MAIL "Subject: Online Order from $storename\n";
print MAIL "Order Number: $order_num\n\n";
print MAIL "$input{'title'} $input{'first_name'} $input{'last_name'}\n";
if ($input{'company'} ne "")	{
	print MAIL "$input{'company'}\n";
}
print MAIL "$input{'address1'}\n";
if ($input{'address2'} ne "")	{
	print MAIL "$input{'address2'}\n";
}
print MAIL "$input{'city'}, $input{'state'} $input{'zip'} $input{'country'}\n";
print MAIL "Daytime Phone: $input{'day_phone'} ";
if ($input{'day_exten'} ne "")	{
print MAIL "Ext. $input{'day_exten'} ";
}
if ($input{'night_phone'} ne "")	{
	print MAIL "Evening Phone: $input{'night_phone'} ";
if ($input{'night_exten'} ne "")	{
print MAIL "Ext. $input{'night_exten'} ";
}
}
print MAIL "\n";
if ($input{'fax'} ne "")	{
	print MAIL "Fax: $input{'fax'}\n";
}
print MAIL "Email: $input{'email'}\n\n";

$input{'card_no'} =~ s/\D//g;
$input{'card_no'} =~ /(\d\d\d\d)(\d\d\d\d)(\d\d\d\d)(\d+)/;
$cc_num = "$1  $2  $3  $4";
print MAIL "$input{'card_type'} $cc_num     $input{'Expmonth'}/$input{'Expyear'}\n";
print MAIL "Name on card: $input{'name_on_card'}\n\n";

$a = "=" x 75;
print MAIL "$a\n";
print MAIL "Items Ordered:\n";

$subtotal = 0;
	
for ($i=0; $i<@order; $i++)	{
@fields = split(/\|/, $order[$i]);
$fields[4] =~ s/,//g;

$prod_total = ($fields[0] * $fields[4]);

$prod_line = "$fields[0] $fields[1] ";

	if ($fields[2] ne "" && $fields[3] eq "")	{
	$prod_line .= "($fields[2])";
	}
	if ($fields[3] ne "" && $fields[2] eq "")	{
	$prod_line .= "($fields[3])";
	}
	if ($fields[2] ne "" && $fields[3] ne "")	{
	$prod_line .= "($fields[2], $fields[3])";
	}
print MAIL "$prod_line" . ' ' x (50 - length($prod_line));
printf MAIL "%.2f", $prod_total;
print MAIL "\n";

$subtotal += $prod_total;
}
print MAIL "$a\n";

$total = $subtotal + $input{'tax'} + $input{'ship_cost'};

	select (MAIL);
	$~ = "SUB";
	write;
	select (STDOUT);

	select (MAIL);
	$~ = "SHIP";
	write;
	select (STDOUT);

	select (MAIL);
	$~ = "TAX";
	write;
	select (STDOUT);
	
	select (MAIL);
	$~ = "TOTAL";
	write;
	select (STDOUT);

print MAIL "Ship via $input{'ship_method'}\n";	
print MAIL "$a\n\n";
print MAIL "Where did you hear about our site?\n";
print MAIL	"$input{'source'}\n\n";
print MAIL "Special Requests:\n";
print MAIL "$input{'suggest'}\n";
close (MAIL);
}
############################################################
sub email_customer_receipt	{
$admin = &get_admin;

open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/STORENAME/)	{
		chomp($_);
		($trash, $storename) = split(/\|/, $_);
		last;
	}
}
flock(FILE, 8);
close (FILE);

$input{'day_phone'} =~ s/\D//g;
$input{'night_phone'} =~ s/\D//g;
$input{'day_phone'} =~ s/^(\d\d\d)(\d\d\d)(\d+)$/$1\-$2\-$3/;
$input{'night_phone'} =~ s/^(\d\d\d)(\d\d\d)(\d+)$/$1\-$2\-$3/;

open (MAIL, "|$mailprog") || die "Can't open $mailprog!\n";
print MAIL "Reply-to: $admin\n";
print MAIL "From: $admin\n";
print MAIL "To: $input{'email'}\n";
print MAIL "Subject: Confirmation of Online Order from $storename\n";
	if (-e $email_txt)	{
	open (FILE, "$email_txt") || die "Can't open $email_txt";
	flock(FILE, 2);
		while (<FILE>)	{
		print MAIL "$_";
		}
	}
flock(FILE, 8);
close (FILE);
print MAIL "\n\n";

print MAIL "Order Number: $order_num\n\n";

print MAIL "$input{'title'} $input{'first_name'} $input{'last_name'}\n";
if ($input{'company'} ne "")	{
	print MAIL "$input{'company'}\n";
}
print MAIL "$input{'address1'}\n";
if ($input{'address2'} ne "")	{
	print MAIL "$input{'address2'}\n";
}
print MAIL "$input{'city'}, $input{'state'} $input{'zip'} $input{'country'}\n";
print MAIL "Daytime Phone: $input{'day_phone'} ";
if ($input{'day_exten'} ne "")	{
print MAIL "Ext. $input{'day_exten'} ";
}
if ($input{'night_phone'} ne "")	{
	print MAIL "Evening Phone: $input{'night_phone'} ";
if ($input{'night_exten'} ne "")	{
print MAIL "Ext. $input{'night_exten'} ";
}
}
print MAIL "\n";
if ($input{'fax'} ne "")	{
	print MAIL "Fax: $input{'fax'}\n";
}
print MAIL "Email: $input{'email'}\n\n";

&get_order;

$a = "=" x 75;
print MAIL "$a\n";
print MAIL "Items Ordered:\n";

for ($i=0; $i<@order; $i++)	{
@fields = split(/\|/, $order[$i]);

$fields[4] =~ s/,//g;

$prod_total = ($fields[0] * $fields[4]);

$prod_line = "$fields[0] $fields[1] ";

	if ($fields[2] ne "" && $fields[3] eq "")	{
	$prod_line .= "($fields[2])";
	}
	if ($fields[3] ne "" && $fields[2] eq "")	{
	$prod_line .= "($fields[3])";
	}
	if ($fields[2] ne "" && $fields[3] ne "")	{
	$prod_line .= "($fields[2], $fields[3])";
	}
print MAIL "$prod_line" . ' ' x (50 - length($prod_line));
printf MAIL "%.2f", $prod_total;
print MAIL "\n";

$subtotal += $prod_total;
}
print MAIL "$a\n";

$total = $subtotal + $input{'tax'} + $input{'ship_cost'};

	select (MAIL);
	$~ = "SUB";
	write;
	select (STDOUT);

	select (MAIL);
	$~ = "SHIP";
	write;
	select (STDOUT);

	select (MAIL);
	$~ = "TAX";
	write;
	select (STDOUT);
	
	select (MAIL);
	$~ = "TOTAL";
	write;
	select (STDOUT);
	
	
print MAIL "$a\n\n";
print MAIL "Thank you for your order. We appreciate your business!";
close (MAIL);
}	
format SHIP = 
Shipping    @###############.##
$input{'ship_cost'}
.
format TAX =
Tax         @###############.##
$input{'tax'}
.
format SUB =
Subtotal    @###############.##
$subtotal
.
format TOTAL =
Total       @###############.##
$total
.
############################################################
sub checkout_form 	{
if ($secure == 1)	{
$extra = "SECURE";
}
print <<EOT;
<I>Enter your shipping and payment information below, then press 'PLACE $extra ORDER' button. * Required information. </I>
<HR>
<table><tr><td></td><td><I>Shipping Address:</I></td></tr>
<tr valign=top>
<td><B>Title </B>:</td><td><select NAME="title"><option SELECTED>Mr.<option>Mrs.<option>Miss.<option>Ms.<option>Dr.</select></td></tr>
<td><B>     First Name *</B>:</td><td> <INPUT NAME="first_name" MAXLENGTH="40" SIZE="40"></td></tr> 
<td><B>      Last Name *</B>:</td> <td> <INPUT NAME="last_name" MAXLENGTH="40" SIZE="40">   </td></tr>
<td><B>        Company</B>:</td><td>  <INPUT NAME="company" MAXLENGTH="40" SIZE="40"></td></tr>
<td><B>        Address *</B>:</td><td>  <INPUT NAME="address1" MAXLENGTH="40" SIZE="40"></td></tr>
<td><B>        Address</B>:</td><td>  <INPUT NAME="address2" MAXLENGTH="40" SIZE="40"></td></tr>
<td><B>           City *</B>:</td><td>  <INPUT NAME="city" MAXLENGTH="40" SIZE="40"></td></tr>
<td><B>           State </B>:</td><td>  $input{'state'}</td></tr>
<td><B>       Zip Code *</B>:</td><td>  <INPUT NAME="zip" MAXLENGTH="15" SIZE="15"></td></tr>
<td><B>  Email Address *</B>:</td><td>  <INPUT NAME="email" MAXLENGTH="60" SIZE="40"></td></tr>
<td><B>  Daytime Phone *</B>:</td><td>  <INPUT NAME="day_phone" MAXLENGTH="15" SIZE="15"><B>  Extension: </B><INPUT NAME="day_exten" MAXLENGTH="6" SIZE="6"></td></tr>
<td><B>Nighttime Phone</B>:</td><td>  <INPUT NAME="night_phone" MAXLENGTH="15" SIZE="15"><B>  Extension: </B><INPUT NAME="night_exten" MAXLENGTH="6" SIZE="6"></td></tr>
<td><B>            Fax</B>:</td><td>  <INPUT NAME="fax" MAXLENGTH="40" SIZE="40"></td></tr>
</table>
<HR>
<table><tr><td></td><td><I>Credit Card Information:</I><br></td></tr>
<tr>
<td><B>      Card Type</B>:</td><td>  <select NAME="card_type"><option SELECTED>VISA<option >MasterCard</select></td></tr>
<td><B>  Credit Card #</B>:</td><td>  <INPUT NAME="card_no" MAXLENGTH="40" SIZE="40"></td></tr>
<td><b>Name on card:</b></td><td><INPUT SIZE=40 NAME="name_on_card"></td></tr>
<td><B>Expiration Date</B>:</td><td><select NAME="Expmonth">
<option selected value=01>01 (January)
<option value=02>02 (February)
<option value=03>03 (March)
<option value=04>04 (April)
<option value=05>05 (May)
<option value=06>06 (June)
<option value=07>07 (July)
<option value=08>08 (August)
<option value=09>09 (September)
<option value=10>10 (October)
<option value=11>11 (November)
<option value=12>12 (December)
</select>
<select NAME="Expyear">
EOT


chop ($year = `$date_command +"%Y"`);
$end_year = $year + 6;
@years = ($year..$end_year);


foreach $year(@years)   {
        print "<option>$year";  
}


print <<EOT;
</select>
</td></tr>
</table>
<HR>
Where did you hear about our site: <input type="text" name="source" size=40>
<p><b>Special Requests:</b> </p>
<p><textarea NAME="suggest" ROWS="5" COLS="65"></textarea></p>
<INPUT TYPE="submit" name="action" VALUE="PLACE $extra ORDER">
<INPUT TYPE="reset" VALUE="START OVER">
</FORM>
</center>
EOT
}
############################################################
sub create_userid 	{
srand (time|$$);
$userid = int (rand(100000));
$userid .= "$$";
$input{'userid'} = $userid;
}
############################################################
sub write_order 	{
$order = &check_order;
while (($key, $value) = each %input)	{
	if ($key =~ /quan\|(.+)/ && $value ne "")	{
	push (@products, "$value\|$1");
	}
}

while (($key, $value) = each %input)	{
		if ($key =~ /(color)\|(.+)/)	{
		$item{$2}{$1} = "$value";
		}
		if ($key =~ /(size)\|(.+)/)	{
		$item{$2}{$1} = "$value";
		}
}

foreach $products(@products)	{
($quan, $prodname) = split(/\|/, $products);

	if ($item{$prodname}{'size'} eq "Select size")	{
	&error("Please select a size for the product '$prodname'");
	}
	if ($item{$prodname}{'color'} eq "Select color")	{
	&error("Please select a color for the product '$prodname'");
	}
}

if (-e "$order.$input{'userid'}")	{
foreach $products(@products)	{
($quan, $prodname) = split(/\|/, $products);

open (ORDER, "$order.$input{'userid'}") || print "Can't open";
flock(ORDER, 2);
while (<ORDER>)	{
	($quantity, $prod_name, $prod_color, $prod_size) = split(/\|/, $_);
	chomp($prod_size);
	if ($prod_name eq $prodname && $item{$prodname}{'size'} eq $prod_size && $item{$prodname}{'color'} eq $prod_color)	{
	$line = $_;
	last;
	}
}
flock(ORDER, 8);
close (ORDER);

if ($line ne "")	{
open (ORDER, "$order.$input{'userid'}");
flock(ORDER, 2);
@lines = <ORDER>;
flock(ORDER, 8);
close (ORDER);

open (ORDER, ">$order.$input{'userid'}");
flock(ORDER, 2);
foreach $lines(@lines)	{
	unless ($line eq $lines)	{
	print ORDER "$lines";
	}
}
flock(ORDER, 8);
close (ORDER);

open (ORDER, ">>$order.$input{'userid'}");
flock(ORDER, 2);
($quantity, $trash) = split(/\|/, $line);
$new_quan = $quan + $quantity;
print ORDER "$new_quan\|$prodname\|$item{$prodname}{'color'}\|$item{$prodname}{'size'}\n";
flock(ORDER, 8);
close (ORDER); 
}
else	{
open (ORDER, ">>$order.$input{'userid'}");
flock(ORDER, 2);
print ORDER "$quan\|$prodname\|$item{$prodname}{'color'}\|$item{$prodname}{'size'}\n";
flock(ORDER, 8);
close (ORDER);
}
}
}
else	{
open (ORDER, ">>$order.$input{'userid'}");
flock(ORDER, 2);
foreach $products(@products)	{
($quan, $prodname) = split(/\|/, $products);
print ORDER "$quan\|$prodname\|$item{$prodname}{'color'}\|$item{$prodname}{'size'}\n";
}
flock(ORDER, 8);
close (ORDER); 
}
}
############################################################
sub UPDATE_ORDER	{
$order = &check_order;
open (ORDER, "$order.$input{'userid'}") || die ("I am sorry, but I was unable to open the file.");
flock(ORDER, 2);
@old_order = <ORDER>;
flock(ORDER, 8);
close (ORDER);

while (($key, $value) = each %input)	{
if ($key =~ /(quan)\|(\d+)/)	{
$lines{$2}{$1} = $value;
}
}

open (FILE, ">$order.$input{'userid'}");
flock(FILE, 2);
for ($i=0; $i<@old_order; $i++)	{
@fields = split(/\|/, $old_order[$i]);
	unless ($lines{$i}{'quan'} eq "0" || $lines{$i}{'quan'} eq "")	{
		$fields[0] = $lines{$i}{'quan'};
		$new_line = join('|', @fields);
		print FILE "$new_line";
	}
}
flock(FILE, 8);
close (FILE);

unless ($action eq "SECURE_CHECKOUT" || $action eq "REGULAR_CHECKOUT")	{
&get_order;
&print_cart;
}
}
############################################################
sub get_state	{
print <<EOT;
<select name= "state">
<option selected>Choose State
<option>Alabama
<option>Alaska
<option>Arizona
<option>Arkansas
<option>California
<option>Colorado
<option>Connecticut
<option>Washington D.C.
<option>Delaware
<option>Florida
<option>Georgia
<option>Hawaii 
<option>Idaho
<option>Illinois
<option>Indiana 
<option>Iowa 
<option>Kansas 
<option>Kentucky 
<option>Louisiana 
<option>Maine
<option>Maryland 
<option>Massachusetts  
<option>Michigan 
<option>Minnesota 
<option>Mississippi 
<option>Missouri 
<option>Montana 
<option>Nebraska 
<option>Nevada 
<option>New Hampshire 
<option>New Jersey 
<option>New Mexico 
<option>New York 
<option>North Carolina 
<option>North Dakota 
<option>Ohio 
<option>Oklahoma 
<option>Oregon 
<option>Pennsylvania 
<option>Puerto Rico
<option>Rhode Island 
<option>South Carolina 
<option>South Dakota 
<option>Tennessee 
<option>Texas 
<option>Utah 
<option>Vermont 
<option>Virginia 
<option>Washington 
<option>West Virginia 
<option>Wisconsin 
<option>Wyoming
</select>
EOT
}
############################################################
sub get_order	{
$order = &check_order;
if (-e "$order.$input{'userid'}")	{
open (ORDER, "$order.$input{'userid'}") || die ("I am sorry, but I was unable to open the file.");
flock(ORDER, 2);
@order_numbers = <ORDER>;
flock(ORDER, 8);
close (ORDER);

foreach $order_numbers(@order_numbers)	{
($quan, $name, $color, $size) = split(/\|/, $order_numbers);
chomp($size);
open (DB, "$db");
flock(DB, 2);
while (<DB>)	{
	@fields = split(/\|/, $_);
	if ($name eq $fields[0])	{
	push (@order, "$quan|$name|$color|$size|$fields[1]");
	last;
	}
}
flock(DB, 8);
close (DB);
}
}
else	{
&header;
print <<EOT;
<center><h4>There are currently no items in your cart.</h4></center>
EOT
#&footer;
exit;
}
}
############################################################
sub print_order	{
if ($secure == 1)	{
#$script_secure = &get_ssl_url;
$script = $script_secure;
}

$empty = @order;
if ($empty >= 1)	{
&header;
print <<EOT;
<center>
<P>
<table border=1><tr><th>Quantity</th><th>Product Name</th><th>Color</th><th>Size</th><th>Unit Price</th><th>Item Total</th></tr>
EOT
for ($i=0; $i<@order; $i++)	{
@fields = split(/\|/, $order[$i]);

$fields[4] =~ s/,//g;

$prod_total = ($fields[0] * $fields[4]);

if ($fields[2] eq "")	{
$fields[2] = "N/A";
}
if ($fields[3] eq "")	{
$fields[3] = "N/A";
}

$item_total += $fields[0];

$line = $i/2;

if ($line =~ /\d*\./)	{
print "<tr><td bgcolor=\"E8E8E8\" align=\"center\">$fields[0]</td><td bgcolor=\"E8E8E8\" NOWRAP>$fields[1]</td><td bgcolor=\"E8E8E8\" NOWRAP align=\"center\">$fields[2]</td><td bgcolor=\"E8E8E8\" NOWRAP align=\"center\">$fields[3]</td><td align=\"right\" bgcolor=\"E8E8E8\" NOWRAP>\$";
printf "%.2f", $fields[4];
print "</td><td align=\"right\" bgcolor=\"E8E8E8\" NOWRAP>\$";
printf "%.2f", $prod_total;
print "</td></tr>\n";
}
else	{
print "<tr><td align=\"center\">$fields[0]</td><td NOWRAP>$fields[1]</td><td NOWRAP align=\"center\">$fields[2]</td><td NOWRAP align=\"center\">$fields[3]</td><td align=\"right\" NOWRAP>\$";
printf "%.2f", $fields[4];
print "</td><td align=\"right\" NOWRAP>\$";
printf "%.2f", $prod_total;
print "</td></tr>\n";
}
$subtotal += $prod_total;
}

&get_tax_rate;
&shipping;

if ($type_ship == 1)	{
	$ship_cost = $item_total * $shipping;
}
elsif ($type_ship == 2)	{
	$ship_cost = $subtotal * $shipping;
}
else	{
	$ship_cost = $shipping;
}

$total = $subtotal + $tax + $ship_cost;

print <<EOT;
<tr><td colspan=5 align=right>Subtotal</td><td align=right nowrap><b>\$
EOT
printf "%.2f", $subtotal;
print <<EOT;
</b></td></tr>
<tr></td><td colspan=5 align=right>Tax</td><td align=right><b>\$
EOT
printf "%.2f", $tax;
print <<EOT;
</b></td></tr>
EOT

print <<EOT;
<tr></td><td colspan=5 align=right>Shipping ($input{'ship_method'})</td><td align=right><b>
EOT

print "\$";
printf "%.2f", $ship_cost;

print <<EOT;
</b></td></tr>
<tr></td><td colspan=5 align=right><b>Total</b></td><td align=right><b>\$
EOT
printf "%.2f", $total;
print <<EOT;
</b></td></tr>
</table>
<FORM action="$script" method="post">
<input type="hidden" name="state" value="$input{'state'}">
<input type="hidden" name="tax" value="$tax">
<input type="hidden" name="ship_cost" value="$ship_cost">
<input type="hidden" name="ship_method" value="$input{'ship_method'}">
<input type="hidden" name="userid" value="$input{'userid'}">
EOT
}
else	{
print "<center><h4>There are currently no items in your shopping cart</h4><center>";
}
}
############################################################
sub get_tax_rate	{
open (FILE, "$setup") || die "Can't open";
flock(FILE, 2);
while (<FILE>)	{
$line = $_;
	if ($line =~ /^TAXRATE/)	{
	@tax_fields = split(/\|/, $line);
		if ($tax_fields[2] =~ /$input{'state'}/)	{
		$tax = $subtotal * $tax_fields[1];
		$tax_match = 1;
		last;
		}
	}
}
flock(FILE, 8);
close (FILE);

if ($tax_match != 1)	{
$tax = "0.00";
}

}
############################################################
sub print_cart	{
$empty = @order;
if ($empty >= 1)	{
&header;

print <<EOT;
<center>
<table border=1><tr><th>Quantity</th><th>Product Name</th><th>Color</th><th>Size</th><th>Unit Price</th><th>Item Total</th></tr>
<form action="$script" method="post">
EOT

for ($i=0; $i<@order; $i++)	{
chomp($order[$i]);
@fields = split(/\|/, $order[$i]);
$fields[4] =~ s/,//g;
$prod_total = ($fields[0] * $fields[4]);
$item_total += $fields[0];

if ($fields[2] eq "")	{
$fields[2] = "N/A";
}
if ($fields[3] eq "")	{
$fields[3] = "N/A";
}

$line = $i/2;

if ($line =~ /\d*\./)	{
print "<tr><td bgcolor=\"E8E8E8\" align=\"center\"><input type=\"text\" name=\"quan|$i\" size=\"3\" value=\"$fields[0]\" NOWRAP></td><td bgcolor=\"E8E8E8\" NOWRAP>$fields[1]</td><td bgcolor=\"E8E8E8\" NOWRAP align=\"center\">$fields[2]</td><td bgcolor=\"E8E8E8\" NOWRAP align=\"center\">$fields[3]</td><td align=\"right\" bgcolor=\"E8E8E8\" NOWRAP>\$";
printf "%.2f", $fields[4];
print "</td><td align=\"right\" bgcolor=\"E8E8E8\" NOWRAP>\$";
printf "%.2f", $prod_total;
print "</td></tr>\n";
}
else	{
print "<tr><td align=\"center\"><input type=\"text\" name=\"quan|$i\" size=\"3\" value=\"$fields[0]\"></td><td NOWRAP>$fields[1]</td><td NOWRAP align=\"center\">$fields[2]</td><td NOWRAP align=\"center\">$fields[3]</td><td align=\"right\" NOWRAP>\$";
printf "%.2f", $fields[4];
print "</td><td align=\"right\" NOWRAP>\$";
printf "%.2f", $prod_total;
print "</td></tr>\n";
}
$subtotal += $prod_total;
}
print <<EOT;
<tr><td colspan=5 align=right>Subtotal</td><td align=right nowrap><b>\$
EOT
printf "%.2f", $subtotal;
print <<EOT;
</b></td></tr>
</table>
<center>
<P>
<h4>Domestic Shipping</h4>
EOT
&get_state;
&get_shipping;
print <<EOT;
<br><font size=1>Orders shipped to $tax_state will include state sales tax</font><br>
<table border=0>
<tr><td colspan=5 align="center">
<input type="hidden" name="userid" value="$input{'userid'}">
<input type="hidden" name="subtotal" value="$subtotal">
<input type="submit" name="action" value="SECURE CHECKOUT"><br>
<input type="submit" name="action" value="REGULAR CHECKOUT"><br>
<input type="submit" name="action" value="UPDATE ORDER"><BR>
<input type="submit" name="action" value="BACK TO PRODUCTS"><P>
</td></tr>
EOT
print "</form>";
print "</table><P>";

print <<EOT;
<table>
<tr><td>
<ul><li>To change a product quantity, enter the new quantity and then press the UPDATE ORDER button.<br>
<li>To remove a product from your cart, change the quantity to 0 (zero) and then press the UPDATE ORDER button.<br>
<li>If have finished shopping, press the SECURE CHECKOUT button to continue.<br>
<li>If you wish to return to the products page, press the BACK TO PRODUCTS button.<br></ul>
</td></tr></table>
EOT
#&footer;
}
else	{
&header;
print <<EOT;
<center><h4>There are currently no items in your cart.</h4></center>
EOT
#&footer;
exit;
}
}
############################################################
sub get_shipping	{
open (FILE, "$setup") || die "Can't open $setup";
flock(FILE, 2);
while (<FILE>)	{
	if (/SHIPRATE/)	{
		@fields = split(/\|/, $_);
		push (@shipping, $fields[2]);
	}
	if (/TAXRATE/)	{
		chomp($_);
		@fields = split(/\|/, $_);
		push (@tax_states, $fields[2]);
	}
}
flock(FILE, 8);
close (FILE);

@shipping = grep(/\w+/, @shipping);

$last = pop(@tax_states);
push(@tax_states, $last);

foreach $tax(@tax_states)	{
	if ($tax eq $last)	{
		if (scalar(@tax_states) > 1)	{
		$tax_state =~ s/,\s*$//;
		$tax_state .= " and $tax";
		}
		else	{
		$tax_state = "$tax";
		}
	}
	else	{
	$tax_state .= "$tax, ";
	}
}
	
print "<select name=\"ship_method\"><option selected>Choose Ship Method</option>";
foreach $ship(@shipping)	{
$new_ship = $ship;
$new_ship =~ s/\s+/_/g;
	print "<option value=\"$new_ship\">$ship</option>";
}
print "</select>";
}
############################################################
sub error 	{
&header;
print <<EOT;
<P>
<center>
<h4>Warning Error!</h4>
@_
<P>
</center>
EOT
#&footer;
exit;
}
############################################################
sub validate_credit_card	{
#This routine was written by Doug Miles, modified by me
$credit_card_number = $input{'card_no'};
$credit_card_name = $input{'card_type'};
$credit_card_number =~ s/-//g;
$credit_card_number =~ s/ //g;
$credit_card_number_length = length($credit_card_number);

if($credit_card_name eq "VISA" && ($credit_card_number_length != 13 && $credit_card_number_length != 16))	{
$error_message = "Invalid number of digits for given credit card.";
$card_error = 1;
push (@errors, "card_no|$error_message");
}
if($credit_card_name eq "MasterCard" && $credit_card_number_length != 16)	{
$error_message = "Invalid number of digits for given credit card.";
$card_error = 1;
push (@errors, "card_no|$error_message");
}

@credit_card_number_digit = split(/ */, reverse($credit_card_number));
for ($digit_position = 1; $digit_position < $credit_card_number_length;
      $digit_position += 2)	{
	$digit_times_two = ($credit_card_number_digit[$digit_position] * 2);
if ($digit_times_two > 9)	{
	$credit_card_number_digit[$digit_position] = ($digit_times_two - 9);
}
else	{
$credit_card_number_digit[$digit_position] = $digit_times_two;
}
}
$validation_number = 0;
foreach $digit (@credit_card_number_digit)	{
$validation_number += $digit;
}
$validation_number = $validation_number/10;

if ($validation_number =~ /\d*\./)	{
	if ($card_error != 1)	{
	$error_message = "Invalid card number.";
	push (@errors, "card_no|$error_message");
	}
}
}
############################################################

sub check_expiration_date       {
#This routine was written by Doug Miles, modified by me


      my ($year, $month);


      # Get entered month and year.
      my $expiration_year = "$input{'Expyear'}";
      my $expiration_month = "$input{'Expmonth'}";


      # Get current month and year.
      chop ($month = $date_command +"%m");
      chop ($year = $date_command +"%Y");


      if($expiration_year . $expiration_month < $year . $month) {
              $error_message = "Credit card has expired.";
              $card_expire = 1;
              push (@errors, "Expmonth|$error_message");
      }
}