<%option explicit%>
<%
shopcheckadmin "shopa_displayorders.asp"
setsess "currenturl","shopa_trackingorder.asp"
'************************************************
' VP-ASP 6.50
' Tracking Format for Merchant
' ordertracking table is updated and e-mail sent to customer
' Dec 6, 2006 remove arrayemailst
'************************************************
Dim sAction, oid, myconn
dim my_to, my_toaddress,my_system,my_from,my_fromaddress,my_subject,mailtype
dim mailer, my_attachment
dim body
dim trackingemail, trackingname, trackingcomment, trackingtemplate
dim trackingview
dim orderstatus, orderstatusdefault, sAction2, StatusTypeCount
dim StatusTypes(50), statuslist
'VP-ASP 6.50 - removed and added to shopmail.asp
'dim arrayemaillinkscount
'dim arrayemaillinks(50,2)
Oid=request("oid")
'VP-ASP 6.09 - precautionary security fix
if oid > "" then
if not isnumeric(Oid) then
shoperror "Order ID must be numeric"
end if
end if
setsess "oid",""
Openorderdb myconn
sAction=Request("Action")
sAction2=Request("Action2")
Serror=""
adminPageHeader
statuslist=getconfig("xorderstatus")
If statuslist="" then
statustypecount=0
else
parserecord statuslist,StatusTypes,StatusTypeCount,","
end if
If sAction2<>"" Then
orderstatus=Request("orderstatus")
UpdateOrderStatus
end if
If sAction = "" Then
DisplayForm()
Else
ValidateData()
if sError = "" Then
UpdateTrackingRecord
generatedisplayheader getlang("LangEdit03")
generatedisplaybodyheader
SendTrackingEmail
Writeinfo
else
DisplayForm
end if
end if
ShopCloseDatabase myconn
adminpagetrailer
'
Sub DisplayForm()
Getdefaultvalues
GetStatusValue
generatedisplayheader "Add New Tracking Message"
Generatedisplaybodyheader
if sError > "" then
shopwriteerror "" & sError & ""
end if
%><%
GenerateDisplayBodyFooter
generatedisplayheader "Change Order Status"
Generatedisplaybodyheader
'New Tracking Form
shopwriteheader getlang("LangProductOrder") & " " & getlang("LangstatusStatus")
Response.Write("")
GenerateDisplayBodyFooter
generatedisplayheader "Tracking Message History"
Generatedisplaybodyheader
shopFormattracking myconn, oid,"admin"
Generatedisplaybodyfooter
End Sub
Sub ValidateData()
oid = Request.Form("oid")
'VP-ASP 6.09 - precautionary security fix
if oid > "" then
if not isnumeric(oid) then
shoperror "Order ID must be numeric"
end if
end if
trackingcomment = Request("trackingcomment")
trackingemail=request("trackingemail")
trackingname=request("trackingname")
trackingview=request("trackingview")
stremail=request("stremail")
If trackingview="Yes" then
trackingview=1
else
trackingview=0
end if
If trackingname="" then
sError = sError & getlang("LangYourName") & getlang("Langcustrequired") & "
"
end if
If trackingcomment="" then
sError = sError & getlang("Langtrackingcomment") & getlang("Langcustrequired") & "
"
end if
If stremail="" then
sError = sError & getlang("LangLoginEmail") & getlang("Langcustrequired") & "
"
end if
end sub
'
Sub WriteInfo
'VP-ASP 6.09 -removed page=1 from below URL to stop errors if shopa_displayorders.asp hasn't been previously visited
%>
<%=getlang("langcommoncontinue")%>
<%
generatedisplaybodyfooter
end sub
'
Sub SendTrackingEmail
If trackingemail<>"Yes" Then exit sub
ShopTrackingEmailToCustomer myconn, oid, trackingname
end sub
'
Sub UpdateTrackingRecord
dim sql
trackingname=replace(trackingname,"'","''")
trackingcomment=replace(trackingcomment,"'","''")
sql="insert into ordertracking (orderid, trackdate, tracktime, trackcomment, trackname, trackview,trackemail) values ("
sql= sql & oid & "," & datedelimit(date())
sql= sql & "," & timedelimit(formatdatetime(time(),vbshorttime))
sql = sql & "," & "'" & trackingcomment & "'"
sql = sql & "," & "'" & trackingname & "'"
sql = sql & "," & trackingview
sql = sql & "," & "'" & stremail & "'"
sql=sql & ")"
'debugwrite sql
myconn.execute(sql)
end sub
Sub UpdateOrderStatus
dim sql, torderstatus
orderstatus=Request("orderstatus")
orderstatus=replace(orderstatus,"'","''")
If Orderstatus= getlang("langcommonselect") or orderstatus="" then
torderstatus="NULL"
else
torderstatus="'" & orderstatus & "'"
end if
sql="UPDATE orders SET ostatus =" & torderstatus & " WHERE orderid = " & oid
myconn.execute(sql)
Serror= getlang("LangAddUpdate") & "
"
end sub
Sub GetStatusValue
dim sql2
dim records
sql2 = "SELECT * FROM orders WHERE "
sql2=sql2 & " orderid=" & oid
'debugwrite sql2
Set records = myconn.execute(sql2)
If Not records.EOF Then
orderstatus=records("ostatus")
If isnull(orderstatus) then
orderstatus=""
end if
end if
records.close
set records=nothing
end sub
Sub Getdefaultvalues
if stremail="" then
stremail=getconfig("xemail")
end if
end sub
%>