# 
#
# Note: using the http:// format is less efficient
# converted to taint-mode sub 2/5/2000
sub serve_picture
{
local ($qstr,$sc_path_of_images_directory) = @_;
local ($test, $test2, $my_path_to_image);
$qstr =~ /([\w\-\=\+\/\.\:]+)/;
$qstr = "$1";
$my_path_to_image = $sc_path_of_images_directory . $qstr ;
$test = substr($my_path_to_image,0,6);
$test2 = substr($my_path_to_image,(length($my_path_to_image)-3),3);
if ($test2=~ /jpg/i || $test2 =~ /gif/i || $test2 =~ /png/i) {
# file is ok to display
if ($test2=~ /jpg/i) {# .jpg is jpeg file
$test2 = "jpeg";
}
if ($test=~ /http:\//i || $test =~ /https:/i) {
# need to GET the info .. no implemented here in core
# use LWP::Simple;
# print "Content-type: image/$test2\n\n";
# print get($my_path_to_image);
} else { # is a filename we can load up directly
print "Content-type: image/$test2\n\n";
if (!(-f $my_path_to_image)) {# try adding another slash!
$my_path_to_image = $sc_path_of_images_directory ."/" . $qstr ;
}
open (MYPIC,$my_path_to_image);
$size = 250000;
while ($size > 0) {
$size = read(MYPIC,$the_picture,$size);
print "$the_picture";
}
close(MYPIC);
}
}
}
#######################################################################
# Alias and Override
#
# This routine allows the use of aliases for switches, such as
# using xm= instead of exact_match=
#
# Also, override certain setup variables under certain conditions
#
#######################################################################
sub alias_and_override {
local ($junk,$raw_text)="";
local (@mylibs,$lib);
local ($testval,$testval2,$found_response);
&codehook("alias_and_override_top");
if (defined($form_data{'versions'})) {
print "Content-type: text/html\n\n";
print "\n# # This is the second option modifying item number 0001. # When displayed in the display cart screen, it will read # "Red 0.00, and will not affect the cost of the item. # need to process specific add-to-cart-opt type corescript, if present in # option file(s) $field = &corescript($item_corescript,"add-to-cart-opt-" . $option_number, "$option_location",__FILE__,__LINE__); ($option_name,$option_price,$option_shipping)=split(/\|/,$form_data{$option}); if($option_name) { if ($sc_use_verified_opt_values =~ /yes/i) { $temp = $item_opt_verify{$option . '|' . $option_name}; ($option_price,$option_shipping) = split(/\|/,$temp,2); if ($temp ne "") { $temp = $option_name . '|' . $temp; } else { $option_name=""; # erase it, unverifiable } } else { $temp = $form_data{$option}; } if($option_name) {# still here, either verified or not doing verification # Keep track of the numbers chosen and their value (3.3c) $temp =~ s/\|/~/g; # cannot have pipes, change to ~ char if ($item_option_numbers eq ""){ $item_option_numbers = "${option_number}*$temp"; } else { $item_option_numbers .= ",${option_number}*$temp"; } if ((0 + $option_price) == 0) { #price zero, do not display it $display_option_price = ""; } else { # price non-zero, must format it $display_option_price = " " . &display_price_nospaces($option_price); } #Below displays options in html with comma after each by Lennie #does not affect email layout. # This line displays option and price during check out #$options .= "$option_name$display_option_price, "; # The below line only displays option name with no dollar amount. $options .= "$option_name$display_option_price, "; } } # But the script must also calculate the cost changes with # options. To do so, it will take the current value of # $option_grand_total and add to it the value of the # current option. It will then format the result to # two decimal places using the format_price subroutine # discussed later and assign the new result to # $option_grand_total &codehook("process_cart_options"); $item_shipping = $item_shipping + $option_shipping; $unformatted_option_grand_total = $option_grand_total + $option_price; $option_grand_total = &format_price($unformatted_option_grand_total); # End of if ($option_item_number eq "$item_id_number") } # End of foreach $option (@options) } # Next, calculate $item_number which the script can use to # identify a shopping cart item absolutely. This must be done # so that when we modify and delete from the cart, we will # know exactly which item to affect. We cannot rely simply # on the unique database id number because a client may # purchase two of the same item but with different # options. Unless there is a separate, unique cart row id # number, how would the script know which to delete if the # client asked to delete one of the two. Add 1 to # $highest_item_number, which was set at the beginning of # the subroutine. $item_number = ++$highest_item_number; # Finally, the script makes the last price calculations # and appends every ordered item to $cart_row # # A completed cart row might look like the following: # 2|0001|Vowels|15.98|Letter A|Times New Roman 0.00|15.98|161 $unformatted_item_grand_total = $item_price + $option_grand_total; $item_grand_total = &format_price("$unformatted_item_grand_total"); # now, make the cart value for shipping be the shipping with options $cart_row[$cart{"shipping"}] = $item_shipping; $cart_row[$cart{"shipping_calc_flag"}] = ""; # Add the id #s of the options too $cart_row[$cart{"options_ids"}] = $item_option_numbers; # need to process generic add-to-cart type corescript, if present in # option file(s) $field = &corescript($item_corescript,"add-to-cart", "$option_location",__FILE__,__LINE__); &codehook("before_build_cart_row"); $cart_row[$cart{"user1"}] = $item_user1; $cart_row[$cart{"user2"}] = $item_user2; $cart_row[$cart{"user3"}] = $item_user3; foreach $field (@cart_row) { $cart_row .= "$field\|"; } $cart_row .= "$options\|$item_grand_total\|$item_number\n"; # End of foreach $item_ordered_with_options..... &codehook("foreach_item_ordered_end"); } # When it is done appending all the items to $cart_row, # the script appends the new items to the end of the # shopping cart, which was opened at the beginning of the subroutine. &codehook("before_add_cart_rows"); if (-e "$sc_cart_path") { open (CART, ">>$sc_cart_path") || &file_open_error("$sc_cart_path", "Add to Shopping Cart", __FILE__, __LINE__); &codehook("add_cart_row_to_cart"); print CART "$cart_row"; close (CART); } else { open (CART, ">$sc_cart_path") || &file_open_error("$sc_cart_path", "Add to Shopping Cart", __FILE__, __LINE__); &codehook("add_cart_row_to_cart"); print CART "$cart_row"; close (CART); } &codehook("after_add_cart_rows"); # Then, the script sends the client back to a previous # page. There are two pages that the customer can be sent # of course, the last product page they were on or the # page which displays the customer's cart. Which page the # customer is sent depends on the value of # $sc_should_i_display_cart_after_purchase which is defined # in core.setup.db If the customer should be sent to # the display cart page, the script calls # display_cart_contents, otherwise it calls display_page # if this is an HTML-based cart or # create_html_page_from_db if this is a database-based # cart. &finish_add_to_the_cart; } ############################################################ sub finish_add_to_the_cart { &codehook("finish_add_to_the_cart"); if ($sc_use_html_product_pages eq "yes") { if ($sc_should_i_display_cart_after_purchase eq "yes") { &display_cart_contents; } else { &display_page("$sc_html_product_directory_path/$page", "Display Products for Sale"); } } else { if ($sc_should_i_display_cart_after_purchase eq "yes") { &display_cart_contents; } elsif ($are_any_query_fields_filled_in =~ /yes/i) { $page = ""; &display_products_for_sale; } else { &create_html_page_from_db; } } } ####################################################################### # Output Modify Quantity Form # ####################################################################### # output_modify_quantity_form is the subroutine # responsible for displaying the form which customers can # use to modify the quantity of items in their cart. It # is called with no argumnets with the following syntax: # # &output_modify_quantity_form; sub output_modify_quantity_form { # The subroutine begins by outputting the HTML header # using standard_page_header, adds the modify form using # display_cart_table and finishes off the HTML page with # modify_form_footer. All of these subrotuines are # discussed in core_html_lib.pl &standard_page_header("Change Quantity"); &display_cart_table("changequantity"); &modify_form_footer; } ####################################################################### # Modify Quantity of Items in the Cart # ####################################################################### # The modify_quantity_of_items_in_cart subroutine is # responsible for making quantity modifications in the # customer's cart. It takes no arguments and as called # with the following syntax: # # &modify_quantity_of_items_in_cart; sub modify_quantity_of_items_in_cart { &checkReferrer; # First, the script gathers the keys as it did for the # add_to_cart routine previously, checking to make # sure the customer entered a positive integer (not # fractional and not less than one). @incoming_data = keys (%form_data); foreach $key (@incoming_data) { if (($key =~ /[\d]/) && ($form_data{$key} =~ /\D/) && (!($form_data{$key} < 0)) && (!($form_data{$key} > 0))) { $form_data{$key}=""; } # Just as the script did in the add to cart routine # previuosly, it will create an array (@modify_items) of # valid keys. unless ($key =~ /[\D]/ && $form_data{$key} =~ /[\D]/) { if ($form_data{$key} ne "") { push (@modify_items, $key); } } # End of foreach $key (@incoming_data) } # Then, the script must open up the client's cart and go # through it line by line. File open problems are # handled by file_open_error as usual. open (CART, "<$sc_cart_path") || &file_open_error("$sc_cart_path", "Modify Quantity of Items in the Cart", __FILE__, __LINE__); # As the script goes through the cart, it will split each # row into its database fields placing them as elements in # @database_row. It will then grab the unique cart row # number and subsequently replace it in the array. # # The script needs this number to check the current line # against the list of items to be modified. Recall that # this list will be made up of all the cart items which # are being modified. # # The script also grabs the current quantity of that row. # Since it is not yet sure if it wants the current # quantity, it will hold off on adding it back to the # array. Finally, the script chops the newline character # off the cart row number. while (