<?php
if (isset($_POST['Ecom_Ezic_TransactionId'])) {
	if ($_POST['Ecom_Ezic_Response_StatusCode'] == 1) {
		include ('site.config.php');
		$Ecom_ConsumerOrderID = @mysql_real_escape_string($_POST['Ecom_ConsumerOrderID']);
		$Ecom_Ezic_TransactionId = @mysql_real_escape_string($_POST['Ecom_Ezic_TransactionId']);
		$Ecom_Ezic_Response_IssueDate = @mysql_real_escape_string($_POST['Ecom_Ezic_Response_IssueDate']);
		$Ecom_Cost_Total = @mysql_real_escape_string($_POST['Ecom_Cost_Total']);
		$Ecom_Receipt_Description = @mysql_real_escape_string($_POST['Ecom_Receipt_Description']);
		$Ecom_Ezic_Misc_Information = @mysql_real_escape_string($_POST['Ecom_Ezic_Misc_Information']);
		$Ecom_Ezic_Security_HashFields = @mysql_real_escape_string($_POST['Ecom_Ezic_Security_HashFields']);
		$Ecom_Ezic_Security_HashValue_MD5 = @mysql_real_escape_string($_POST['Ecom_Ezic_Security_HashValue_MD5']);
		$Ecom_BillTo_Online_Email = @mysql_real_escape_string($_POST['Ecom_BillTo_Online_Email']);
		$Ecom_Ezic_ProofOfPurchase_MD5 = @mysql_real_escape_string($_POST['Ecom_Ezic_ProofOfPurchase_MD5']);

		$netbillinglog = @mysql_query("INSERT INTO cms_billing_netbillinglog SET
										Ecom_ConsumerOrderID = '" . $Ecom_ConsumerOrderID . "',
										Ecom_Ezic_TransactionId = '" . $Ecom_Ezic_TransactionId . "',
										Ecom_Ezic_Response_IssueDate = '" . $Ecom_Ezic_Response_IssueDate . "',
										Ecom_Cost_Total = '" . $Ecom_Cost_Total . "',
										Ecom_Receipt_Description = '" . $Ecom_Receipt_Description . "',
										Ecom_Ezic_Misc_Information = '" . $Ecom_Ezic_Misc_Information . "',
										Ecom_Ezic_Security_HashFields = '" . $Ecom_Ezic_Security_HashFields . "',
										Ecom_Ezic_Security_HashValue_MD5 = '" . $Ecom_Ezic_Security_HashValue_MD5 . "',
										Ecom_BillTo_Online_Email = '" . $Ecom_BillTo_Online_Email . "',
										Ecom_Ezic_ProofOfPurchase_MD5 = '" . $Ecom_Ezic_ProofOfPurchase_MD5 . "'");

		$items = explode(";", $Ecom_Ezic_Misc_Information);
		foreach ($items as $item) {
			$itemInfo = explode(",", $item);
			
			if(isset($itemInfo[1])) {
				
				$t_memberID = $itemInfo[0];
				$t_cartID = $itemInfo[1];
				$t_itemType = $itemInfo[2];
				$t_itemID = $itemInfo[3];
				$t_itemPrice = $itemInfo[4];
				$t_relatedID = $itemInfo[5];
				
				if($t_itemType < 3) {
					$setStatus = 1;	
				} else {
					$setStatus = 0;	
				}
				$purchaseAdd = @mysql_query("INSERT INTO cms_billing_purchases SET
												purchaseDate = '".$timestamp ."',
												memberID = '" . $t_memberID . "',
												transactionID = '".$Ecom_Ezic_TransactionId."',
												itemType = '" . $t_itemType . "',
												itemID = '" . $t_itemID . "',
												status = '" . $setStatus . "',
												itemPrice = '" . $t_itemPrice . "',
												relatedID = '" . $t_relatedID . "'");
												
				if($t_itemType == 3) { // Custom
					$customUpdate = @mysql_query("UPDATE cms_billing_custom SET status = '1' WHERE customID = '".$t_relatedID."'");
					$customDetails = cartCustomDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"customOrder");
				} elseif ($t_itemType == 4) { // Private
					$customUpdate = @mysql_query("UPDATE cms_billing_custom SET status = '1' WHERE customID = '".$t_relatedID."'");
					$customDetails = cartCustomDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"customOrder");
				} elseif ($t_itemType == 6) { // Private
					$privateUpdate = @mysql_query("UPDATE cms_billing_private SET status = '1' WHERE privateID = '".$t_relatedID."'");
					$privateDetails = cartPrivateDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"privateOrder");
					
				}
				
				$cartClear = @mysql_query("DELETE FROM cms_billing_cart WHERE cartID = '" . $t_cartID . "' AND memberID = '" . $t_memberID . "'");
				
			}
		}
	}
}
?>