<?php
include ('site.config.php');

if (isset($member_id) && $member_id == 0) {
	header('Location: acct.php');
	exit();
}

if(isset($_GET['r'])) {
	cartRemoveItem($member_id, $_GET['r']);
}

$cartCount = cartCount($memberID);
$cartTotal = cartTotal($memberID);
$cartItems = cartItems($memberID,0);


include ('site.header.php');

if (isset($cartItems) && is_array($cartItems)) {
	$descSecret = "";
	$descDisplay = "";
?>
  <h3>SHOPPING CART CONTENTS</h3>
  <table class="table table-bordered table-hover table-condensed">
    <thead>
      <tr>
        <th class="col-md-1"></th>
        <th>Details</th>
        <th class="col-md-1">Price</th>
        <th class="col-md-2"></th>
      </tr>
    </thead>
    <tbody>
	<?php
	foreach($cartItems AS $cartItem) {
		if (isset($cartItem->itemID) && $cartItem->itemID > 0) {
			if (isset($cartItem->itemType) && $cartItem->itemType > 2) {
				$itemDetails = cartModel($cartItem->itemID,$cartItem->itemType);
				$modelID = $cartItem->itemID;
				if($cartItem->itemType == 3) { //CUSTOM VIDEO
					$customDetails = cartCustomDetails($member_id, $cartItem->relatedID);
					/*
					$itemDetails->title = $itemDetails->title . "<br />";
					$itemDetails->title .= "Category: " . $customDetails->categoryName . "<br />";
					$itemDetails->title .= "Base: " . $customDetails->baseName . "<br />";
					$itemDetails->title .= "Delivery: " . $customDetails->deliveryName;
					*/
					$compareCustomPrice = cartCustomPrice($cartItem->itemID,$customDetails->baseOption, $customDetails->categoryOption, $customDetails->deliveryOption);
					if($compareCustomPrice == 0) { // REMOVE FROM CART
						cartRemoveItem($memberID, $cartItem->cartID);
					} elseif($compareCustomPrice != $cartItem->itemPrice) { //echo 'error with custom pricing!';	
						cartUpdate($cartItem->cartID, $compareCustomPrice);
						$cartItem->itemPrice = $compareCustomPrice;
					}
				} elseif($cartItem->itemType == 4) { //CUSTOM PHOTOSET
					$customDetails = cartCustomDetails($member_id, $cartItem->relatedID);
					/*
					$itemDetails->title = $itemDetails->title . "<br />";
					$itemDetails->title .= "Category: " . $customDetails->categoryName . "<br />";
					$itemDetails->title .= "Base: " . $customDetails->baseName . "<br />";
					$itemDetails->title .= "Delivery: " . $customDetails->deliveryName;
					*/
					$compareCustomPrice = cartCustomPrice($cartItem->itemID,$customDetails->baseOption, $customDetails->categoryOption, $customDetails->deliveryOption);
					if($compareCustomPrice == 0) { // REMOVE FROM CART
						cartRemoveItem($memberID, $cartItem->cartID);
					} elseif($compareCustomPrice != $cartItem->itemPrice) { //echo 'error with custom pricing!';	
						cartUpdate($cartItem->cartID, $compareCustomPrice);
						$cartItem->itemPrice = $compareCustomPrice;
					}
				} elseif($cartItem->itemType == 6) { //PRIVATE CHAT
					$privateDetails = cartPrivateDetails($member_id, $cartItem->relatedID);
					/*
					$itemDetails->title = $itemDetails->title . "<br />";
					$itemDetails->title .= "Duration: " . $privateDetails->duration . "<br />";
					$itemDetails->title .= "Preferred date and time: " . $privateDetails->preferredtime;
					*/
					$comparePrivatePrice = cartPrivatePrice($cartItem->itemID, $privateDetails->duration);
					if($comparePrivatePrice == 0) { // REMOVE FROM CART
					} elseif($comparePrivatePrice != $cartItem->itemPrice) { //echo 'error with private pricing!';	
						cartUpdate($cartItem->cartID, $comparePrivatePrice);
						$cartItem->itemPrice = $comparePrivatePrice;
					}
				}
			} else {
				$itemDetails = cartContent($cartItem->itemID);
				$modelID = $itemDetails->model_id;
				if($itemDetails->price != $cartItem->itemPrice) {
					//echo 'error with content pricing!';
					cartUpdate($cartItem->cartID, $itemDetails->price);
					$cartItem->itemPrice = $itemDetails->price;
				}
			}
		}
	
		if (isset($itemDetails->content_id) && is_numeric($itemDetails->content_id)) {
			$getModel = mysql_query("SELECT * FROM cms_models WHERE model_id = '".$modelID."'");
			$modelDetails = mysql_fetch_object($getModel);
			if (isset($cartItem->itemType) && $cartItem->itemType > 2) {
				$thumbnail = "content/models/" . $itemDetails->content_id . '_mProfileSmall.jpg';
				$url = "model.php?id=" . $itemDetails->content_id;
			} else {
				$thumbnail = 'content/models/' . $itemDetails->directory . '/tn.jpg';
				if($cartItem->itemType == 1){
					$url = "content.photoset.php?id=" . $itemDetails->content_id;
				} else {
					$url = "content.video.php?id=" . $itemDetails->content_id;
				}
			}
			
			?>
			<tr>
				<td align="center"><a href="<?php echo $url; ?>"><img src="<?php echo $thumbnail; ?>" style="max-height: 150px; max-width: 150px;" border="0" /></a></td>
				<td><?php
				if($cartItem->itemType == 1) { // PHOTOSET
					$descTitle = '<strong>Instant Photoset Download from:</strong> ' . '<a href="/' . modelOutputName($modelDetails->name) . '">' . $modelDetails->name . '</a><br />';
					echo $descTitle;
					echo '<strong>Title:</strong> ' . $itemDetails->title;
					echo '<strong>Quantity:</strong> ' . $itemDetails->num_photos;
				} elseif($cartItem->itemType == 2) { // VIDEO
					$descTitle = '<strong>Instant Video Download from:</strong> ' . '<a href="/' . modelOutputName($modelDetails->name) . '">' . $modelDetails->name . '</a><br />';
					echo $descTitle;
					echo '<strong>Title:</strong> ' . $itemDetails->title;
				} elseif($cartItem->itemType == 3) { // Custom Video
					$descTitle = '<strong>Custom Video from:</strong> ' . '<a href="/' . modelOutputName($modelDetails->name) . '">' . $modelDetails->name . '</a><br />';
					echo $descTitle;
					echo '<strong>Category:</strong> ' . $customDetails->categoryName . '<br />';
					echo '<strong>Duration:</strong> ' . $customDetails->baseName . '<br />';
					echo '<strong>Delivery:</strong> ' . $customDetails->deliveryName;
				} elseif($cartItem->itemType == 4) { // Custom Photoset
					$descTitle = '<strong>Custom Photos from:</strong> ' . '<a href="/' . modelOutputName($modelDetails->name) . '">' . $modelDetails->name . '</a><br />';
					echo $descTitle;
					echo '<strong>Category:</strong> ' . $customDetails->categoryName . '<br />';
					echo '<strong>Photos:</strong> ' . $customDetails->baseName . '<br />';
					echo '<strong>Delivery:</strong> ' . $customDetails->deliveryName;
				} elseif($cartItem->itemType == 5) { // TIP
				
				} elseif($cartItem->itemType == 6) { // SKYPE
					$descTitle = '<strong>Skype Private Chat with:</strong> ' . '<a href="/' . modelOutputName($modelDetails->name) . '">' . $modelDetails->name . '</a><br />';
					echo $descTitle;
					echo '<strong>Duration:</strong> ' . $privateDetails->duration . '<br />';
					echo '<strong>Preferred date and time:</strong> ' . $privateDetails->preferredtime;
				} elseif($cartItem->itemType == 7) { // OTHER
				
				}
				?>
                </td>
				<td><h4>$<?php echo $cartItem->itemPrice; ?></h4></td>
				<td><div align="center"><a class="btn btn-danger" href="acct.cart.php?r=<?php echo $cartItem->cartID; ?>" role="button">  REMOVE  </a></div></td>
			</tr>
			<?php
			$descSecret .= $member_id . "," . $cartItem->cartID . "," . $cartItem->itemType . "," . $itemDetails->content_id . "," . $cartItem->itemPrice . "," . $cartItem->relatedID . ";";
			$descDisplay .= strip_tags(ucfirst($descTitle)) . " - $" . $cartItem->itemPrice . "<br />";
		}
	}
$encrypt = "q1T6CToTAZAdAcyXExnS" . $cartTotal . $descDisplay . "SALE" . $member_id . $descSecret;
$md5hash = md5($encrypt);
?>
<!--
<form name="checkout" method="post" action="https://secure.netbilling.com/gw/native/interactive2.2" enctype="application/x-www-form-urlencoded"  data-toggle="validator" role="form">
<input type="hidden" name="Ecom_Ezic_AccountAndSitetag" value="110065717241:XFANCLUBS" />
<input type="hidden" name="Ecom_Ezic_Payment_AuthorizationType" value="SALE" />
<input type="hidden" name="Ecom_BillTo_Online_Email" value="<?php echo $userDetails->email; ?>" />
<input type="hidden" name="Ecom_Cost_Total" value="<?php echo $cartTotal; ?>" />
<input type="hidden" name="Ecom_ConsumerOrderID" value="<?php echo $member_id; ?>" />
<input type="hidden" name="Ecom_Receipt_Description" value="<?php echo $descDisplay; ?>" />
<input type="hidden" name="Ecom_Ezic_Misc_Information" value="<?php echo $descSecret; ?>" />
<input type="hidden" name="Ecom_Ezic_Security_HashFields" value="Ecom_Cost_Total Ecom_Receipt_Description Ecom_Ezic_Payment_AuthorizationType Ecom_ConsumerOrderID Ecom_Ezic_Misc_Information" />
<input type="hidden" name="Ecom_Ezic_Security_HashValue_MD5" value="<?php echo $md5hash; ?>" />

<tr>
<td colspan="2"><div align="right"><h3>ORDER TOTAL:</h3></div></td>
<td colspan="2"><h3>$<?php echo $cartTotal; ?></h3></td>
</tr>

<tr>
<td colspan="2"></td>
<td colspan="2"><strong>By checking this box, I agree to the <a href="/legal.termsofservice.php">terms of service</a>, <a href="/legal.refund.php">refund policy</a>, and I certify that I am 18 years of age or older. <span style="color: red; font-weight: bolder;">ALL SALES FINAL</span></strong><br />
<div class="form-group">
    <div class="checkbox">
      <label>
        <input type="checkbox" id="terms" data-error="You must agree!" required >
        <strong>I agree!</strong>
      </label>
      <div class="help-block with-errors"></div>
    </div>
  </div>
  </td>
 </tr>
 <tr>
 <td colspan="2"></td>
<td colspan="2">
 <div align="center"><input type="submit" value="     CHECKOUT    " class="form-control btn-success"></div>
 
</td>
</tr>
</form>
-->
<!--
<form action="https://bill.ccbill.com/jpost/signup.cgi" method="POST" >

<input type="hidden" name="email" value="<?php echo $userDetails->email; ?>" />
<link rel='stylesheet' href='https://bill.dev.ccbill.com/jpost/css/button.css' />
<input type='hidden' name='clientAccnum' value='937375' />
<input type='hidden' name='clientSubacc' value='0017' />
<input type='hidden' name='consumerUniqueId' value='<?php echo $member_id; ?>' />
<input type='hidden' name='posData' value='<?php echo $descSecret; ?>' />
<input type='hidden' name='formName' value='211cc' />
<input type='hidden' name='formPrice' value='<?php echo $cartTotal; ?>' />
<input type='hidden' name='formPeriod' value='2' />
<input type='hidden' name='currencyCode' value='840' />
<input type='hidden' name='salt' value='trYMjiIrgH737T9ApRSY1qpK' />
<input type='hidden' name='formDigest' value='<?php echo md5($cartTotal . '2' . '840' . 'trYMjiIrgH737T9ApRSY1qpK');?>' />
<tr>
<td colspan="2"><div align="right"><h3>ORDER TOTAL:</h3></div></td>
<td colspan="2"><h3>$<?php echo $cartTotal; ?></h3></td>
</tr>

<tr>
<td colspan="2"></td>
<td colspan="2"><strong>By checking this box, I agree to the <a href="/legal.termsofservice.php">terms of service</a>, <a href="/legal.refund.php">refund policy</a>, and I certify that I am 18 years of age or older. <span style="color: red; font-weight: bolder;">ALL SALES FINAL</span></strong><br />
<div class="form-group">
    <div class="checkbox">
      <label>
        <input type="checkbox" id="terms" data-error="You must agree!" required >
        <strong>I agree!</strong>
      </label>
      <div class="help-block with-errors"></div>
    </div>
  </div>
  </td>
 </tr>
 <tr>
 <td colspan="2"></td>
<td colspan="2">
 <div align="center"><input type="submit" name="submit" value="     PAY WITH CREDIT/DEBIT CARD   " class="form-control btn-success"></div>
 
</td>
</tr>
</form>
-->

<?php
//Calculate epoch digest Key
$epoch_hmac_key = "d2aa867cb97a239b38a2e61b29b492fa";
$query_string = "api=join&pi_code=v&reseller=a&email=" . 
                 $userDetails->email . "&x_member_id=" . $member_id . 
                 "&amount=" . $cartTotal . "&selected_type=CC&currency=USD";
$sorted_query_string = "amount=" . floor($cartTotal) ."&api=join&currency=USD&email=" . 
                 $userDetails->email . "&no_userpass=a&pi_code=crauua1p1127273&reseller=a&selected_type=CC&x_member_id=" . $member_id; 
                 
$sorted_string = str_replace("&", "", str_replace("=", "", $sorted_query_string));               

$epoch_digest = hash_hmac('md5', $sorted_string, $epoch_hmac_key);  


?>
<form method="GET" action="https://wnu.com/secure/services/">
<input type="hidden" name="amount" value="<?php echo floor($cartTotal); ?>" />
<input type="hidden" name="api" value="join" />
<input type="hidden" name="currency" value="USD" />
<input type="hidden" name="email" value="<?php echo $userDetails->email; ?>" />
<input type="hidden" name="no_userpass" value="a" />
<input type='hidden' name='pi_code' value='crauua1p1127273' />
<input type="hidden" name="reseller" value="a" />
<input type="hidden" name="selected_type" value="CC" />
<input type="hidden" name="x_member_id" value="<?php echo $member_id; ?>" />
<input type="hidden" name="epoch_digest" value="<?php echo $epoch_digest;?>" />


<tr>
<td colspan="2"></td>
<td colspan="2"><strong>By checking this box, I agree to the <a href="/legal.termsofservice.php">terms of service</a>, <a href="/legal.refund.php">refund policy</a>, and I certify that I am 18 years of age or older. <span style="color: red; font-weight: bolder;">ALL SALES FINAL</span></strong><br />
<div class="form-group">
    <div class="checkbox">
      <label>
        <input type="checkbox" id="terms" data-error="You must agree!" required >
        <strong>I agree!</strong>
      </label>
      <div class="help-block with-errors"></div>
    </div>
  </div>
  </td>
 </tr>
 <tr>
 <td colspan="2"></td>
<td colspan="2">
 <div align="center"><input type="submit" value="PAY WITH CREDIT/DEBIT CARD" class="form-control btn-success"></div>
 
</td>
</tr>
</form>


<form action="https://bitpay.com/checkout" method="post" >
<tr>
 <td colspan="2"></td>
<td colspan="2">
 <input type="hidden" name="action" value="checkout" />
 <input name="orderID" type="hidden"  value="<?php echo $member_id; ?>" />
  <input type="hidden" name="posData" value="<?php echo $descSecret; ?>" />
   <input name="price" type="hidden" value="<?php echo $cartTotal; ?>" />
   <input name="currency" type="hidden" value="USD" />
   <input type="hidden" name="buyerEmail" value="<?php echo $userDetails->email;?>" />
  <input type="hidden" name="data" value="iKJpebtZgOcX7RtOqEfaVr8NuUbOkNTTDBr3et4WyKPuijkxvmZ0hAdvjjYakIY8Tz6DXujrSrS4QuKbMX5DYR00af0AU1WCvu3dODeuW5GwPSeGSyrhZIkF7rnzJrM1h72NjSwYWW5SEYhe1aBoVdeyRHBCd3Lr9X+Vr/QXZTKhL6StXxulabX17dxrqn0064cDZC6It68i6EtffmZyNRiGZTTuB0TRLQ9zChuKnagjiKDhrcKkz1U+0DFSBJdfY83OyDSTYNT7lr1Lh5HU99Ki2EQ/RchkRUK0wwx56bj21CYDr3hBlkjK3prGRMppXB4LkKRSaTqbroHuA7k6oMCb9Y0Us17Yjum4L6ZBkDX4LxoOBqXRD7lsIAOdJcjE" />
  

 <div align="center"><input type="image" src="https://bitpay.com/img/button2.png"  border="0" name="submit" alt="BitPay, the easy way to pay with bitcoins." ></div>
</td>
</tr>
</form>

    </tbody>
  </table>	
	
<?php
//Place Items into ecomz_bitpay
//This is just a cache for data since we can't pass it throught to bitpay to get it as  a reply'
//So instead the info is stored in this table
//So I can use the same _netbillingprocess.php code

$bitpay_item = mysql_query("REPLACE INTO ecomz_bitpay (consumerID, cost_Total, receipt_description, misc_Information, billTo_Online_Email) 
                             VALUES(
                                        '" . $member_id . "',
										'" . $cartTotal . "',
										'" . $descDisplay . "',
										'" . $descSecret . "',
										'" . $userDetails->email. "'
                                   )
                             ") or die("MySQL Error");


} else {
	echo '<div class="cartEmpty">Your cart is empty!</div>';
}

include('site.footer.php');
?>