Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/
Linux boscustweb5004.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/functions.inc.php
<?php
	function pr($arr){
		echo "<pre>";
		print_r($arr);
	}

	function prx($arr){
		echo "<pre>";
		print_r($arr);
		die();
	}

	function get_safe_value($con,$str){
		if($str!=""){
			$str = trim($str);
			return strip_tags(mysqli_real_escape_string($con,$str));		
		}
	}

	function get_Cat($con,$cat_id){
		$sql = "select categories from t_categories where id='$cat_id'";
		$row = mysqli_fetch_assoc(mysqli_query($con,$sql));
		return isset($row['categories'])?$row['categories']:""; 
	}

	function get_product($con,$limit="",$cat_id="",$product_id="",$search_str="",$sort_order="",$is_best_seller="",$sub_cat_id="",$r_vendor=""){
		$sql = "select a.*,b.categories,b.categories_en from t_product a, t_categories b where a.categories_id=b.id and a.status=1";
		if($cat_id!=""){
			$sql .= " and a.categories_id=$cat_id";
		}
		if($product_id!=""){
			$sql .=" and a.id=$product_id";
		}
		if($sub_cat_id!=""){
			$sql .= " and a.sub_categories_id=$sub_cat_id";
		}
		if($is_best_seller!=""){
			$sql .=" and a.best_seller='1'";
		}
		if($search_str!=""){
			$sql .=" and (a.name like '%$search_str%' or a.description like '%$search_str%')";
		}
		if($r_vendor==""){
			$master_retailer = isset($_SESSION['MASTER_RETAILER'])?$_SESSION['MASTER_RETAILER']:0;
			$sql .=" and (a.r_vendor=0 or a.r_vendor=".$master_retailer.")";
		}else{
			$sql .=" and a.vendor=0 and a.r_vendor=$r_vendor";
		}
		if($sort_order!=""){
			$sql .= " ".$sort_order;
		}else{
			$sql .= " order by a.id desc";	
		}
		if($limit!=""){
			$sql .=" limit $limit";
		}

		$res = mysqli_query($con,$sql);
		$data = array();
		while($row=mysqli_fetch_assoc($res)){
			$data[] = $row;
		}
		return $data;
	}

	function get_presale_product($con,$pid="",$presale_id=""){
		$sql = "select a.*,b.* from t_product a left join t_presale b on a.id=b.pid where b.pid is not null and a.status=1 and b.status=1 and b.due_date>now()";
		if($pid!=""){
			$sql .= " and a.id=$pid";
		}
		if($presale_id!=""){
			$sql .= " and b.id=$presale_id";
		}
		$res = mysqli_query($con,$sql);
		$data = array();
		while($row=mysqli_fetch_assoc($res)){
			$data[] = $row;
		}
		return $data;
	}

	function get_slide_ad($con,$qty="",$pg=""){
		$sql = "select a.*,b.name from t_front_pg_ads a left join t_product b on a.pid=b.id";
		if($qty!=""){
			if(($pg!="")||($pg>0)){
				$sql .= " limit ".$qty*($pg-1).",$qty";
			}else{
				$sql .= " limit ".$qty;
			}
		}
		$res = mysqli_query($con,$sql);
		$data = array();
		while($row=mysqli_fetch_assoc($res)){
			$data[] = $row;
		}
		return $data;
	}

	function wishlist_add($con,$uid,$pid){
		$added_on = date("Y-m-d h:i:s");
		$sql = "insert into t_wishlist (user_id,product_id,added_on) values ('$uid','$pid','$added_on')";
		mysqli_query($con,$sql);
	}

	function requestPost($url,$data,$ssl=true,$timeout=20){
		//curl 完成
		$curl=curl_init();

		//设置curl选项
		curl_setopt($curl,CURLOPT_URL,$url);//URL

		//user_agent,请求代理信息
		$user_agent=isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36';
		curl_setopt($curl,CURLOPT_USERAGENT,$user_agent);

		//referer头，请求来源
		curl_setopt($curl,CURLOPT_AUTOREFERER,true);
		curl_setopt($curl,CURLOPT_TIMEOUT,$timeout); //设置超时时间

		//SSL相关
		if($ssl){
			curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,false); //终止从服务器端进行验证
			curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,2);//检查服务器SSL证书中是否存在一个公用名(common name)
		}
		//处理post相关选项
		curl_setopt($curl,CURLOPT_POST,true);  //是否为post请求
		curl_setopt($curl,CURLOPT_POSTFIELDS,$data); //数据处理
		//响应数据
		curl_setopt($curl,CURLOPT_HEADER,false); //是否处理响应头
		curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);//curl_exec()是否返回响应结果

		//发出请求
		$response=curl_exec($curl);
		if(false === $response){
			/*echo '<br>',curl_error($curl),'<br>';*/
			return false;
		}
		return $response;
	}

	function getSoldQtybyProductId($con,$pid){
		$sql = "select sum(a.qty) qty from t_order_details a left join t_order b on a.order_id=b.id where a.pid='$pid' and b.order_status<>'4'";
		$res = mysqli_query($con,$sql);
		$row = mysqli_fetch_assoc($res);
		return (isset($row['qty']))?$row['qty']:0;
	}

	function getProductQty($con,$pid){
		$sql = "select qty from t_product where id='$pid'";
		$res = mysqli_query($con,$sql);
		$row = mysqli_fetch_assoc($res);
		return (isset($row['qty']))?$row['qty']:0;
	}

	function cvrtToDollar($amount,$currency="$"){
		$amount = (float)$amount/100;
		$new_amount = number_format(($amount!=="")?$amount:0,2);
		return $currency.$new_amount;
	}

	function setInvoice($con,$payment_id,&$email){
		$sql = "select a.*,b.name,b.email from (select t_order.*,t_payment.ref_id from t_order, t_payment where t_order.payment_id=t_payment.id and t_payment.id='$payment_id') a left join t_users b on a.user_id=b.id";
		$user_order_res = mysqli_query($con,$sql);

		$user_order = mysqli_fetch_assoc($user_order_res);
		$email = $user_order['email'];

		$fp = fopen("../temp/invoice.html","r");
		$html = fread($fp,filesize("../temp/invoice.html"));
	 
		$items_html = "";
		$sub_total = 0;

		$items_html = getPmntProductList($con,$payment_id,$sub_total);
		$items_html .= getPmntProductList($con,$payment_id,$sub_total,"pre_order");
	 
		$html=str_replace("{{purchase_date}}",substr($user_order['added_on'],0,10),$html);
		$html=str_replace("{{name}}",$user_order['name'],$html);
		$html=str_replace("{{total}}",cvrtToDollar($user_order['final_price']),$html);
		$html=str_replace("{{invoice_id}}",$user_order['ref_id'],$html);
		$html=str_replace("{{date}}",substr($user_order['added_on'],0,10),$html);
		$html=str_replace("[Product Name]","biyuxiaojia.com",$html);
		$html=str_replace("{{#each invoice_details}}","Invoice Details",$html);
		$html=str_replace("{{each_items}}",$items_html,$html);
		$html=str_replace("{{sub_total}}",cvrtToDollar($sub_total),$html);
		$html=str_replace("{{tax}}",cvrtToDollar($sub_total*TAX_RATE),$html);
		if($user_order["coupon_value"]==0){
			$html=str_replace("{{coupon_discount}}","",$html);
		}else{
			$fp = fopen("../temp/invoice_sum_items.html","r");
			$sum_items_html = fread($fp,filesize("../temp/invoice_sum_items.html"));
			$sum_items_html = str_replace("{{sum_items_name}}","Coupon Discount",$sum_items_html);
			$sum_items_html = str_replace("{{sum_items_value}}",cvrtToDollar($user_order["coupon_value"]),$sum_items_html);
			$html=str_replace("{{coupon_discount}}",$sum_items_html,$html);
		}
		$html=str_replace("{{year}}",date("Y"),$html);
		$html=str_replace("{{Company Name}}","Nail Club III",$html);
		$html=str_replace("{{company address1}}","8601 Warden Ave",$html);
		$html=str_replace("{{company address2}}","Unit 11",$html);
		$html=str_replace("{{support_url}}",SITE_PATH."/contact.php",$html);

		return $html;
	}

	function getPmntProductList($con,$payment_id,&$sub_total,$order_type="order"){
		$order_table = "t_".$order_type;
		$order_details_table = $order_table."_details";
		$fp = fopen("../temp/invoice_items.html","r"); 
		$items_html_temp = fread($fp,filesize("../temp/invoice_items.html"));
		$items_html = "";	

		$sql = "select c.name,c.image,b.qty,b.price,b.qty*b.price as sub_total from (select * from $order_table where payment_id='$payment_id') a left join $order_details_table b on a.id=b.order_id left join t_product c on b.pid=c.id";
		$product_res = mysqli_query($con,$sql);
		while($product = mysqli_fetch_assoc($product_res)){
			$t_str = $items_html_temp;
			$t_str = str_replace("{{description}}",$product['name'],$t_str);
			$t_str = str_replace("{{qty}}",$product['qty'],$t_str);
			$items_html .= str_replace("{{amount}}",cvrtToDollar($product['sub_total']),$t_str);
			$sub_total += $product["sub_total"];
		}
		return $items_html;
	}

	function isValidEmailAddress($emailAddress){
		 $pattern = "/^([0-9A-Za-z\\-_\\.]+)@([0-9a-z]+\\.[a-z]{2,3}(\\.[a-z]{2})?)$/i";
		 return preg_match($pattern, $emailAddress)?true:false;
	}

	/**
	 * 输入 coupon_code，获取coupon_discount金额
	 * 首先验证coupon是否有效使用，然后计算coupon_discount金额
	 * 是否超过有效期
	 * 特定Retailer的用户使用，需判断当前用户的retailer是否和使用的coupon的retailer一致。
	 * 特定Vendor的发的coupon，需判断购买的商品中属于该vendor的商品的价格多少。
	 * 1：平台coupon。
	 * 2：retailer coupon。
	 * 4：vendor coupon。
	 * 有限用户单次使用，需判断总共使用次数是否过了预设使用次数，当前用户是否已经使用过。
	 * 单用户单次使用，需判断该coupon是否已经用过，
	 * 每用户单次使用，需判断当前用户是否已经使用过。
	 *
	 * 函数返回数组，
	 * 如果成功申请使用coupon，返回的数组，数组成员"is_err"=no, 其他数组成员分别是
	 * 		"coupon_id": 申请使用的coupon在DB中的ID.
	 * 		"discount"：实际折扣金额。
	 * 		"final_price"：输入的是税前金额，输出的是税后应收金额。
	 * 如果未能成功申请使用coupon，返回的数组成员"is_err"=yes，另外数组成员"error"是失败的原因。
	 * 
	 * @param  [type] $con         [description]
	 * @param  [type] $coupon_code [description]
	 * @param  [type] $amount      [description]
	 * @return [type]              [description]
	 */
	function applyCoupon($con,$coupon_code){
		$valid = true;
		$valid_price = 0;
		$coupon_discount = 0;
		$amount_before_tax = 0;
		$error="Unknown error happend. Please contact administrator.";

		if(isset($_SESSION['USER_LOGIN'])&($_SESSION['USER_LOGIN']=="yes")){
			$sql = "select * from t_coupon where coupon_code='$coupon_code' and (expire>now() or expire='0000-00-00 00:00:00') and status=".COUPON_STATUS_ACTIVE;
			$res = mysqli_query($con,$sql);
			$check = mysqli_num_rows($res);
			if($check==0){
				//coupon_code不正确，或coupon过期
				$valid = false;
				$error = "You used an invalid or expired coupon code.";
			}else{
				$sql_coupon="select * from t_order where user_id=".$_SESSION['USER_ID'];
				if((($row['coupon_type']&COUPON_FIRST_VISIT)!=0)&&(mysqli_num_rows(mysqli_query($con,$sql_coupon))>0)){
					$valid = false;  //非首次购物使用。
					$error = "Sorry! You only can use this coupon once when you firt time shopping.";
				}else{
					$row = mysqli_fetch_assoc($res);
					$sql_user = "select * from t_users where mobile in (".$row['designated'].") and id=".(isset($_SESSION['USER_ID'])?$_SESSION['USER_ID']:"-1");

					if((($row['coupon_type']&COUPON_DESIGNATED_USER)==0)||(mysqli_num_rows(mysqli_query($con,$sql_user)))>0){
						$valid_a = (($row['coupon_type']&COUPON_ADMIN)!=0);
						$valid_r = (($row['coupon_type']&COUPON_RETAILER)!=0)&&($row['retailer']!=0)&&(isset($_SESSION['MASTER_RETAILER']))&&($_SESSION['MASTER_RETAILER']==$row['retailer']);
						$valid_v = (($row['coupon_type']&COUPON_VENDOR)!=0)&&($row['vendor']!=0);

						foreach($_SESSION['cart'] as $pid=>$value){
							$product = get_product($con,"","",$pid);
							$sub_total = $product[0]['price']*$value['qty'];
							$amount_before_tax += $sub_total;
							if($valid_v&&($product[0]['vendor']==$row['vendor'])){
								$valid_price += $sub_total;
							}else{
								$valid_price = $amount_before_tax;
							}
						}
						
						if($valid_a||$valid_r||$valid_v){
							if(($row['coupon_type']&COUPON_UNLIMITED_TIMES)!=0){
								//coupon可无限次使用
								$valid = true;
							}else{
								if($row['max_times']<=$row['used_times']){
									$valid = true;
								}else{
									$valid = false; //coupon总共使用的次数超过了设计的最多使用次数
									$error = "This coupon code has been used over its times.";
								}
							}
						}else{
							$valid = false; //t_coupon存贮的coupon创建者身份不详
							$error = "This coupons code could not be used due to technical issue.";
						}
					}else{
						$valid = false; //使用者不在指定的有效电话号码列表内。
						$error = "Sorry! This coupon code does not work for you.";
					}
				}



				if($valid){
					if(($row['coupon_type']&COUPON_LIMITED_TIMES_FOR_EACH_CUS)!=0){
						$sql = "select * from t_order a, t_coupon b where a.coupon_id=b.id and b.coupon_code='$coupon_code' and a.user_id='".$_SESSION['USER_ID']."'";
						$res = mysqli_query($conn,$sql);
						if(mysqli_num_rows($res)<$row['mtpc']){
							$valid = true;
						}else{
							$valid = false; //使用者使用coupon的次数超过了规定的一个客户允许使用的最多次数。
							$error = "You only can use this coupon code ".(($row['mtpc']==1)?"once!":($row['mtpc']." times!"));
						}
					}
				}
			}
		}else{
			$valid = false; //coupon使用与用户身份有关，需要登陆后再使用。
			$error = "Please log in first.";
		}

		if($valid){
			if($valid_price>=$row['cart_min_value']){
				switch($row['discount_type']){
					case "Cash_Value":
						$coupon_discount = $row['coupon_value'];
					break;
					case "Percentage":
						$coupon_discount = $valid_price*($row['coupon_value']/100);
					break;
					default:;
				}
				$final_price = $amount_before_tax*(1+TAX_RATE) - $coupon_discount;
				$_SESSION['COUPON']['ID'] = $row['id'];
				$_SESSION['COUPON']['DISCOUNT'] = $coupon_discount;
				$_SESSION['COUPON']['CODE'] = $coupon_code;

				$pre_order_sub_total=0;
				if(isset($_SESSION['pre_cart'])&&(count($_SESSION['pre_cart'])>0)){
					foreach($_SESSION['pre_cart'] as $pid=>$value){
						$pre_product = get_presale_product($con,$pid);
						if(count($pre_product)>0){
							$pre_order_sub_total += $pre_product[0]['price1']*$value['qty'];
						}else{
							unset($_SESSION['pre_cart'][$pid]);
						}
					}
				}
				$pre_order_total = $pre_order_sub_total*(1+TAX_RATE);
				$jsonArr = array("is_err"=>"no","coupon_id"=>$row['id'],"final_price"=>intval($final_price+$pre_order_total),"discount"=>intval($coupon_discount));
			}else{
				unset($_SESSION['COUPON']);
				$jsonArr = array("is_err"=>"yes","error"=>"Not meet the minimum spending requirement");
			}
		}else{
			unset($_SESSION['COUPON']);
			$jsonArr = array("is_err"=>"yes","error"=>$error);	
		}

		return $jsonArr;
	}

	function getHost(){
		return $_SERVER['HTTP_HOST'];
	}

	function getHostWithPort(){
		return (is_https()?'https://':'http://').$_SERVER['SERVER_NAME'].':'.$_SERVER["SERVER_PORT"]."/";
	}

	function getUri(){
		return $_SERVER['REQUEST_URI']; //不包括主机域名或主机名
	}

	function getUrlWithPort(){
		return (is_https()?'https://':'http://').$_SERVER['SERVER_NAME'].':'.$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
	}

	function getUrlDirWithPort(){
		return dirname(getUrlWithPort());
	}

	function getUrl(){
		return (is_https()?'https://':'http://').$_SERVER['SERVER_NAME'].$_SERVER["REQUEST_URI"];
	}

	function getUrlDir(){
		return dirname(getUrl()); 
	}

	function is_https() {
		if ( !empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
			return true;
		} elseif ( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ) {
			return true;
		} elseif ( !empty($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
			return true;
		}
		return false;
	}

	function setDefaultLang(){
		$langs = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
		$def_lang = array("","0");
		$lang = array();
		foreach($langs as $lang){
			$lang = explode(";",$lang);
			$lang[0] = trim($lang[0]);
			$lang[1] = (isset($lang[1]))?floatval(substr($lang[1],strpos($lang[1],"q=")+2)):"0";
			$def_lang = ($lang[1]>$def_lang[1])?$lang:$def_lang;
		}

		switch($def_lang[0]){
			case "zh-CN":
			case "zh":
				$_SESSION['LANG']="ch";
			break;
			default;
				$_SESSION['LANG']="en";
		}
	}

	function getValueByLang($arr,$key){
		if(!isset($_SESSION['LANG'])){
			setDefaultLang();
		}
		$value = "";
		switch($_SESSION['LANG']){
			case "ch":
				$value = ($arr[$key]!="")?$arr[$key]:$arr[$key."_en"];
			break;
			default:
				$value = ($arr[$key."_en"]!="")?$arr[$key."_en"]:$arr[$key];
		}
		return $value;
	}

	function staticText($key){
		global $static_txt;
		return getValueByLang($static_txt[$key],"value");
	}

?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com