<?php
//paginateStuff("adm.accounting.php","v=".$pageView,$pageNumber,$getCount,$pageDisplay,"all");
	
function paginateStuff($url,$urladd,$pageNumber,$count,$pageDisplay,$outputType) {
	$totalPages = ceil($count / $pageDisplay);

	$output = '<div class="paginateStuff">';

	if ($pageNumber > 1) {
		$output .= '<a href="'.$url.'?p='.($pageNumber-1).'&'.$urladd.'" class="pagination"><span>&laquo; prev</span></a>';
	}

	for ($i = 1; $i <= $totalPages; $i++) {
		if ($i == $pageNumber) {
			$output .= '<a href="#" class="currpagination"><span>' . $i . '</span></a>';
		} else {
			$output .= '<a href="' . $url . '?p=' . $i.'&'.$urladd.'"class="pagination"><span>' . $i . '</span></a>';
		}
	}

	if ($pageNumber < $totalPages) {
		$output .= '<a href="' . $url . '?p=' . ($pageNumber + 1).'&'.$urladd.'"class="pagination"><span>next &raquo;</span></a>';
	}

	$output .= '</div>';
	return $output;

}



/* =============================================================================================== */
function purchasedItems($xfcadmin, $memberID, $status, $itemType, $pageNumber, $numResults,$countOnly) {

	if ($pageNumber == 1) {
		$startResults = 0;
	} else {
		$startResults = ($pageNumber - 1) * $numResults;
	}
	
	$add_sql = "";
	
	// STATUS LIMIT
	if($status == "pending") {
		$add_sql = " AND status = '0'";
	} elseif($status == "payable") {
		$add_sql = " AND status = '1'";
	} elseif($status == "paid") {
		$add_sql = " AND status = '2'";
	}
	
	// TYPE LIMIT
	if($itemType > 0){
		$add_sql .= " AND itemType = '".$itemType."' ";
	} 
	
	// ACCESS LEVEL
	if ($xfcadmin == 0) {
		// THIS IS A REGULAR USER, RETURN THEIR PURCHASED ITEMS.
		$query = "SELECT * FROM cms_billing_purchases WHERE memberID = '" . $memberID . "' ".$add_sql." ORDER BY purchaseDate DESC";
	} elseif ($xfcadmin == 1) {
		// THIS IS A MODEL, DISPLAY WHAT THEY HAVE SOLD.
		$query = "SELECT * FROM cms_billing_purchases WHERE (itemID = '" . $memberID . "' AND itemType > 2) OR (itemID IN (SELECT content_id FROM cms_content WHERE owner_1 = '" . $memberID . "' or owner_2 = '" . $memberID . "' or owner_3 = '" . $memberID . "' or owner_4 = '" . $memberID . "') AND itemType < 2)  ".$add_sql."  ORDER BY purchaseDate DESC";
	} elseif ($xfcadmin == 9) {
		// THIS IS TAMMY, DISPLAY ALL.
		$query = "SELECT * FROM cms_billing_purchases  ".$add_sql." ORDER BY purchaseDate DESC";
	}
	
	$quickCount_sql = mysql_query($query) or die(mysql_error());
	if($countOnly == 1) {
		return mysql_num_rows($quickCount_sql);
	}
		
	$query .= " LIMIT " . $startResults . "," . $numResults;
	
	$purchasedArr = array();
	$get_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($get_sql) > 0) {

		while ($row = mysql_fetch_object($get_sql)) {
						
			if ($row->itemType > 2) {
				$itemDetails = cartModel($row->itemID, $row->itemType);
				if ($row->itemType == 3) {
					//CUSTOM VIDEO
					$customDetails = cartCustomDetails($memberID, $row->relatedID);
					$itemDetails->title = $itemDetails->title . "<br />Category: " . $customDetails->categoryName . "<br /> Duration: " . $customDetails->durationName . "<br />Delivery: " . $customDetails->deliveryName;
				} elseif ($row->itemType == 6) {
					//PRIVATE CHAT
					$privateDetails = cartPrivateDetails($memberID, $row->relatedID);
					$itemDetails->title = $itemDetails->title . "<br /> Duration: " . $privateDetails->duration . "<br />Preferred date and time: " . $privateDetails->preferredtime;
				}
			} else {
				$itemDetails = cartContent($row->itemID);
			}
			
			$itemDetails->transactionID = $row->transactionID;
			$itemDetails->purchaseDate = date('m-d-Y', strtotime($row->purchaseDate));
			$itemDetails->purchaseID = $row->purchaseID;
			$itemDetails->relatedID = $row->relatedID;
			$itemDetails->itemPrice = $row->itemPrice;
			
			if ($row->itemType > 2) {
				$url = "model.php?id=" . $row->itemID;
			} else {
				if($row->itemType == 1){
					$url = "photoset.php?id=" . $row->itemID;
					$itemDetails->title = "Photoset: ".$itemDetails->title;
				} else {
					$url = "video.php?id=" . $row->itemID;
					$itemDetails->title = "Video: ".$itemDetails->title;
				}
			}
			
			$itemDetails->url = $url;
			
			if($row->status == 0) {
				$itemDetails->status = "PENDING";
			} elseif($row->status == 1) {
				$itemDetails->status = "UNPAID";
			} elseif($row->status == 2) {
				$itemDetails->status = "PAID";
			}
			
			$itemDetails->owners = "modelname";
			//check owners, if multiple owners work out their pay...
			
			$purchasedArr[] = $itemDetails;
		}
		return $purchasedArr;
	} else {
		return 0;
	}
}

/* =============================================================================================== */

function cartCount($memberID) {
	$cart_sql = mysql_query("SELECT count(itemID) FROM cms_billing_cart WHERE memberID = '" . $memberID . "'") or die(mysql_error());
	return mysql_num_rows($cart_sql);
}

function cartTotal($memberID) {
	$cart_sql = mysql_query("SELECT SUM(itemPrice) as cartTotal FROM cms_billing_cart WHERE memberID = '" . $memberID . "'") or die(mysql_error());
	if (mysql_num_rows($cart_sql) > 0) {
		$cartDetail = mysql_fetch_object($cart_sql);
		return number_format((float)$cartDetail -> cartTotal, 2, '.', '');
	} else {
		return 0;
	}
}

function cartItems($memberID, $itemID) {

	if ($itemID == 0) {
		$addsql = "";
	} else {
		$addsql = " AND itemID = '" . $itemID . "' ";
	}
	$cartDetails_sql = mysql_query("SELECT * FROM cms_billing_cart WHERE memberID = '" . $memberID . "'" . $addsql) or die(mysql_error());
	if (mysql_num_rows($cartDetails_sql) > 0) {
		$cartDetails = array();
		while ($cartDetail = mysql_fetch_object($cartDetails_sql)) {
			$cartDetails[] = $cartDetail;
		}
		return $cartDetails;
	} else {
		return 0;
	}

}

function cartContent($itemID) {
	$itemID = mysql_real_escape_string($itemID);
	$query = "SELECT * from cms_content WHERE content_id = '" . $itemID . "'";
	$item_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($item_sql) == 1) {
		if ($item = mysql_fetch_object($item_sql)) {
			return $item;
		} else {
			return FALSE;
		}
	}
}

function cartModel($modelID, $itemType) {
	$modelID = mysql_real_escape_string($modelID);
	$itemType = mysql_real_escape_string($itemType);
	if ($itemType == 3) {
		$titleAdd = "Custom Video from: ";
	} elseif ($itemType == 4) {
		$titleAdd = "Special Request for: ";
	} elseif ($itemType == 5) {
		$titleAdd = "A tip for: ";
	} elseif ($itemType == 6) {
		$titleAdd = "One on One with: ";
	}
	$query = "SELECT *, name AS title, model_id AS content_id FROM `cms_models` WHERE `model_id` = '" . $modelID . "'";
	$model_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($model_sql) == 1) {
		if ($model = mysql_fetch_object($model_sql)) {
			$model -> title = $titleAdd . $model -> title;
			return $model;
		} else {
			return FALSE;
		}
	}
}

function cartRemoveItem($memberID, $cartID) {
	$cartID = mysql_real_escape_string($cartID);
	$delete = mysql_query("DELETE FROM cms_billing_cart WHERE memberID = '" . $memberID . "' AND cartID = '" . $cartID . "'") or die(mysql_error());
	return msgSystem('That item has been removed.', 'success');
}

function cartCustomDetails($memberID, $customID) {
	$query = "SELECT * FROM cms_billing_custom WHERE customID = '" . $customID . "' AND memberID = '" . $memberID . "'";
	$custom_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($custom_sql) == 1) {
		if ($custom = mysql_fetch_object($custom_sql)) {
			//$custom->
			// modelID
			// customType
			// categoryID
			// cvpoIDduration
			// cvpoIDdelivery
			// status
			// description

			$category_sql = mysql_query("SELECT category FROM cms_categories WHERE id = '" . $custom -> categoryID . "'") or die(mysql_error());
			$duration_sql = mysql_query("SELECT cvpo_name FROM `cms_custom_video_pricing_options` WHERE `type` = 'length' AND id = '" . $custom -> cvpoIDduration . "'") or die(mysql_error());
			$delivery_sql = mysql_query("SELECT cvpo_name FROM `cms_custom_video_pricing_options` WHERE `type` = 'delivery' AND id = '" . $custom -> cvpoIDdelivery . "'") or die(mysql_error());

			if (mysql_num_rows($category_sql) == 1) {
				$custom -> categoryName = mysql_result($category_sql, 0, 'category');
			} else {
				$custom -> categoryName = "ERROR!";
			}

			if (mysql_num_rows($duration_sql) == 1) {
				$custom -> durationName = mysql_result($duration_sql, 0, 'cvpo_name');
			} else {
				$custom -> durationName = "ERROR!";
			}

			if (mysql_num_rows($delivery_sql) == 1) {
				$custom -> deliveryName = mysql_result($delivery_sql, 0, 'cvpo_name');
			} else {
				$custom -> deliveryName = "ERROR!";
			}

			return $custom;

		}
	}
}

function cartCustomPrice($modelID, $categoryID, $cvpoIDduration, $cvpoIDdelivery) {
	$category_sql = mysql_query("SELECT price FROM cms_cvpo_match WHERE model_id = '" . $modelID . "' AND category_id = '" . $categoryID . "'") or die(mysql_error());
	$duration_sql = mysql_query("SELECT price FROM `cms_cvpo_match` WHERE `model_id` = '" . $modelID . "' AND `cvpo_id` = '" . $cvpoIDduration . "'") or die(mysql_error());
	$delivery_sql = mysql_query("SELECT price FROM `cms_cvpo_match` WHERE `model_id` = '" . $modelID . "' AND `cvpo_id` = '" . $cvpoIDdelivery . "'") or die(mysql_error());

	if (mysql_num_rows($category_sql) == 1 && mysql_num_rows($duration_sql) == 1 && mysql_num_rows($delivery_sql) == 1) {
		$customPrice = mysql_result($category_sql, 0, 'price') + mysql_result($duration_sql, 0, 'price') + mysql_result($delivery_sql, 0, 'price');
		return $customPrice;
	} else {
		return 0;
	}
}

function cartPrivateDetails($memberID, $privateID) {
	$query = "SELECT * FROM cms_billing_private WHERE privateID = '" . $privateID . "' AND memberID = '" . $memberID . "'";
	$private_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($private_sql) == 1) {
		if ($private = mysql_fetch_object($private_sql)) {
			//$private->
			// modelID
			// duration
			// preferredtime
			// status
			// description
			return $private;

		}
	}
}

function cartPrivatePrice($modelID, $duration) {
	$model_call_options_sql = mysql_query("SELECT a15min_video, a30min_video, a45min_video, a60min_video FROM cms_model_call_options WHERE model_id = '" . $modelID . "'");
	if (mysql_num_rows($model_call_options_sql) == 1) {
		if ($duration == 15) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a15min_video');
		} elseif ($duration == 30) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a30min_video');
		} elseif ($duration == 45) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a45min_video');
		} elseif ($duration == 60) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a60min_video');
		}
		return $privatePrice;
	} else {
		return 0;
	}
}

function cartAdd($memberID, $itemID, $itemType, $relatedID, $itemPrice) {
	if ($memberID == 0) {
		// REDIRECT TO JOIN PAGE ( ? )
		die("not a member!");
	}
	$generalError = msgSystem('There was a problem adding that item to your cart, please try again.', 'error');
	if (isset($memberID) && isset($itemID) && isset($itemType) && isset($relatedID) && isset($itemPrice)) {
		$result = mysql_query("SELECT * FROM cms_billing_cart WHERE memberID = '" . $memberID . "' AND itemID = '" . $itemID . "' AND itemType = '" . $itemType . "'") or die(mysql_error());
		if (mysql_num_rows($result) == 0) {
			$insert = mysql_query("INSERT INTO cms_billing_cart SET  memberID = '" . $memberID . "', itemID = '" . $itemID . "', itemType = '" . $itemType . "', itemPrice = '" . $itemPrice . "', relatedID = '" . $relatedID . "'") or die(mysql_error());
			if ($itemType == 3) {
				$message = "Your custom video request has been added to your cart.";
			} elseif ($itemType == 4) {
				$message = "A special request has been added to your cart.";
			} elseif ($itemType == 5) {
				$message = "A tip has been added to your cart.";
			} elseif ($itemType == 6) {
				$message = "A One on One has been added to your cart.";
			} else {
				$message = "added to your cart.";
			}
			return msgSystem($message, 'success');
		} else {
			return $generalError . '(Code: 200)';
		}
	} else {
		return $generalError . '(Code: 300)';
	}
}

/*

 ORDER BASED FUNCTIONS FROM PREVIOUS DEVELOPER

 */

/*
 function createOrder($userID, $paymentMethod, $paymentID, $uniqid, $message = "") {
 $cartTotal = getcartTotal($userID, 1);
 $cart = getCart($userID, 1);
 $buyer_query = "SELECT * FROM `cms_members` WHERE `member_id` = '" . $userID . "'";
 $buyer_sql = mysql_query($buyer_query) or die(mysql_error());
 if (mysql_num_rows($buyer_sql) == 1) {
 $buyer = mysql_fetch_object($buyer_sql);
 }
 $today = date('Y-m-d H:i:s');
 if (isset($cart) && is_array($cart)) {
 $query = "INSERT INTO `orders` (`buyerID`, `paymentMethod`, `paymentID`, `timestamp`, `status`, `orderTotal`, `uniqid`, `message`) VALUES ('" . $userID . "', '" . $paymentMethod . "', '" . $paymentID . "', '" . time() . "', '0', '" . $cartTotal . "', '" . $uniqid . "', '" . $message . "')";
 mysql_query($query) or die(mysql_error());
 $query = "SELECT * FROM `orders` WHERE uniqid = '" . $uniqid . "'";
 $result = mysql_query($query) or die(mysql_error());
 if (mysql_num_rows($result) == 1) {
 $orderInfo = mysql_fetch_object($result);
 foreach ($cart AS $cartItem) {
 $orderDetails_query = "INSERT INTO `orderDetails` (`orderID`, `itemID`, `itemType`, `itemName`, `price`) VALUES ('" . $orderInfo -> orderID . "', '" . $cartItem -> itemID . "', '" . $cartItem -> itemType . "', '" . $cartItem -> itemName . "', '" . $cartItem -> price . "')";
 mysql_query($orderDetails_query) or die(mysql_error());
 // Change access
 $access_query = "INSERT INTO `cms_members_access` (`date`, `member_id`, `content_id`, `paid`) VALUES ('" . $today . "', '" . $userID . "', '" . $cartItem -> itemID . "', '" . $cartItem -> price . "')";
 mysql_query($access_query) or die(mysql_error());
 $cartID = $cartItem -> cartID;
 }
 mysql_query("DELETE FROM `cart` WHERE `uniqid` = '" . $uniqid . "'") or die(mysql_error());

 if (isset($cartID) && is_numeric($cartID)) {
 mysql_query("DELETE FROM `cartDetails` WHERE `cartID` = '" . $cartID . "'") or die(mysql_error());
 }
 $orderCount = count($cart);
 $message = (isset($buyer -> userName) ? $buyer -> userName : "A user") . ' has just ordered ' . $orderCount . ' item' . ($orderCount == 1 ? "" : "s") . ' for $' . $cartTotal;
 if (isset($admin_email_contact)) {
 sendMail($admin_email_contact, 'Admin', 'An order has been placed', $message);
 }
 return msgSystem('Your Purchase was Successful!', 'success');
 } else {
 msgSystem('There was an error saving your order, please contact support to verify.', 'error');
 }
 } else {
 msgSystem('There was an error retrieving your cart, please contact support and we can retrieve this data from our records.', 'error');
 }
 }

 function getOrder($orderClause) {
 $query = "SELECT * FROM orders " . $orderClause;
 $result = mysql_query($query) or die(mysql_error());
 if (mysql_num_rows($result) > 0) {
 return mysql_fetch_object($result);
 } else {
 return FALSE;
 }

 }

 function getorderDetails($orderID) {
 $query = "SELECT * FROM `orderDetails` WHERE `orderID` = '" . $orderID . "'";
 $result = mysql_query($query) or die(mysql_error());
 if (mysql_num_rows($result) > 0) {
 $orderDetails = array();
 while ($orderDetail = mysql_fetch_object($result)) {
 $orderDetails[] = $orderDetail;
 }
 return $orderDetails;
 } else {
 return "There are no order details.";
 }
 }

 function getallOrders($userID, $status, $type) {
 $orderCount = 0;
 $orders = array();
 if (is_numeric($status)) {
 $statusModifier = " AND `status` = " . $status;
 } else {
 $statusModifier = "";
 }
 $itemList = "";
 $query = "SELECT * from `cms_content` WHERE `owner_id` = '" . $userID . "'";
 $itemList_sql = mysql_query($query) or die(mysql_error());
 if (mysql_num_rows($itemList_sql) > 0) {
 while ($items = mysql_fetch_object($itemList_sql)) {
 if (isset($itemList) && $itemList != "") {
 $itemList .= ', ';
 }
 $itemList = $items -> id;
 }
 }

 if (isset($itemList) && $itemList != "") {
 $query = "SELECT * FROM `orderDetails` WHERE `itemID` IN (" . $itemList . ") GROUP BY orderID ORDER BY orderID DESC";
 $result = mysql_query($query) or die(mysql_error());
 if (mysql_num_rows($result) > 0) {
 while ($orderDetail = mysql_fetch_object($result)) {
 $order_query = "SELECT * FROM `orders` WHERE `orderID` = '" . $orderDetail -> orderID . "'" . $statusModifier . "";
 $order_result = mysql_query($order_query) or die(mysql_error());
 if (mysql_num_rows($order_result) > 0) {
 if ($type == "count") {
 $orderCount++;
 } else {
 while ($order = mysql_fetch_object($order_result)) {
 $orders[] = $order;
 }
 }
 }
 }
 }
 }

 if ($type == "count") {
 return $orderCount;
 } else {
 return $orders;
 }
 }

 */
/* =============================================================================================== */

/* =============================================================================================== */

function secureFile($filename = "") {
	$filename = "/" . $filename;
	$secret = "LcO1SzLMElKHj";
	$t_hex = sprintf("%08x", time());
	$mash = md5($secret . $filename . $t_hex);
	$url = "http://content.xfanclubs.com:81/dl/" . $mash . "/" . $t_hex . "" . $filename;
	return $url;
}
/* =============================================================================================== */
?>