403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/functions_cart.php
<?php
function cartCount($memberID) {
	$cart_sql = mysql_query("SELECT count(itemID) FROM cms_billing_cart WHERE memberID = '" . $memberID . "'") or die(mysql_error());
	return mysql_num_rows($cart_sql);
}

function cartTotal($memberID) {
	$cart_sql = mysql_query("SELECT SUM(itemPrice) as cartTotal FROM cms_billing_cart WHERE memberID = '" . $memberID . "'") or die(mysql_error());
	if (mysql_num_rows($cart_sql) > 0) {
		$cartDetail = mysql_fetch_object($cart_sql);
		return number_format((float)$cartDetail->cartTotal, 2, '.', '');
	} else {
		return 0;
	}
}

function cartItems($memberID,$itemID) {
	
	if($itemID == 0) {
		$addsql = "";
	} else {
		$addsql = " AND itemID = '".$itemID."' ";
	}
	
	$cartDetails_sql = mysql_query("SELECT * FROM cms_billing_cart WHERE memberID = '" . $memberID . "'" . $addsql) or die(mysql_error());
	if (mysql_num_rows($cartDetails_sql) > 0) {
		$cartDetails = array();
		while ($cartDetail = mysql_fetch_object($cartDetails_sql)) {
			$cartDetails[] = $cartDetail;
		}
		return $cartDetails;
	} else {
		return 0;
	}
	
}

function cartContent($itemID) {
	$itemID = mysql_real_escape_string($itemID);
	$query = "SELECT * from cms_content WHERE content_id = '" . $itemID . "'";
	$item_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($item_sql) == 1) {
		if ($item = mysql_fetch_object($item_sql)) {
			return $item;
		} else {
			return FALSE;
		}
	}
}

function cartModel($modelID,$itemType) {
	$modelID = mysql_real_escape_string($modelID);
	$itemType = mysql_real_escape_string($itemType);
	if($itemType == 3){
		$titleAdd = "Custom Video from: ";
	} elseif ($itemType == 4) {
		$titleAdd = "Special Request for: ";
	} elseif ($itemType == 5) {
		$titleAdd = "A tip for: ";
	} elseif ($itemType == 6) {
		$titleAdd = "One on One with: ";
	}
	$query = "SELECT *, name AS title, model_id AS content_id FROM `cms_models` WHERE `model_id` = '" . $modelID . "'";
	$model_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($model_sql) == 1) {
		if ($model = mysql_fetch_object($model_sql)) {
			$model->title = $titleAdd . $model->title;
			return $model;
		} else {
			return FALSE;
		}
	}
}

function cartRemoveItem($memberID, $cartID) {
	$cartID = mysql_real_escape_string($cartID);
	$delete = mysql_query("DELETE FROM cms_billing_cart WHERE memberID = '" . $memberID . "' AND cartID = '" . $cartID . "'") or die(mysql_error());
	return msgSystem('That item has been removed.', 'success');
}

function cartCustomDetails($memberID, $customID) {
	$query = "SELECT * FROM cms_billing_custom WHERE customID = '" . $customID . "' AND memberID = '".$memberID."'";
	$custom_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($custom_sql) == 1) {
		if ($custom = mysql_fetch_object($custom_sql)) {
			//$custom->
				// modelID
				// customType
				// categoryID
				// cvpoIDduration
				// cvpoIDdelivery
				// status
				// description
			
			
			$category_sql = mysql_query("SELECT category FROM cms_categories WHERE id = '".$custom->categoryID."'") or die(mysql_error());
			$duration_sql = mysql_query("SELECT cvpo_name FROM `cms_custom_video_pricing_options` WHERE `type` = 'length' AND id = '".$custom->cvpoIDduration."'") or die(mysql_error());
			$delivery_sql = mysql_query("SELECT cvpo_name FROM `cms_custom_video_pricing_options` WHERE `type` = 'delivery' AND id = '".$custom->cvpoIDdelivery."'") or die(mysql_error());

			if (mysql_num_rows($category_sql) == 1) {
				$custom->categoryName = mysql_result($category_sql, 0, 'category');
			} else {
				$custom->categoryName = "ERROR!";
			}

			if (mysql_num_rows($duration_sql) == 1) {
				$custom->durationName = mysql_result($duration_sql, 0, 'cvpo_name');
			} else {
				$custom->durationName = "ERROR!";
			}
			
			if (mysql_num_rows($delivery_sql) == 1) {
				$custom->deliveryName = mysql_result($delivery_sql, 0, 'cvpo_name');
			} else {
				$custom->deliveryName = "ERROR!";
			}
			
			return $custom;

		}
	}	
}

function cartCustomPrice($modelID,$categoryID,$cvpoIDduration,$cvpoIDdelivery) {
	$category_sql = mysql_query("SELECT price FROM cms_cvpo_match WHERE model_id = '" . $modelID . "' AND category_id = '" . $categoryID . "'") or die(mysql_error());
	$duration_sql = mysql_query("SELECT price FROM `cms_cvpo_match` WHERE `model_id` = '" . $modelID . "' AND `cvpo_id` = '" . $cvpoIDduration . "'") or die(mysql_error());
	$delivery_sql = mysql_query("SELECT price FROM `cms_cvpo_match` WHERE `model_id` = '" . $modelID . "' AND `cvpo_id` = '" . $cvpoIDdelivery . "'") or die(mysql_error());
	
	if (mysql_num_rows($category_sql) == 1 && mysql_num_rows($duration_sql) == 1 && mysql_num_rows($delivery_sql) == 1) {
		$customPrice = mysql_result($category_sql, 0, 'price') + mysql_result($duration_sql , 0, 'price') + mysql_result($delivery_sql, 0, 'price');
		return $customPrice;
	} else {
		return 0;
	}
}

function cartPrivateDetails($memberID, $privateID) {
	$query = "SELECT * FROM cms_billing_private WHERE privateID = '" . $privateID . "' AND memberID = '".$memberID."'";
	$private_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($private_sql) == 1) {
		if ($private= mysql_fetch_object($private_sql)) {
			//$private->
				// modelID
				// duration
				// preferredtime
				// status
				// description
			return $private;

		}
	}	
}

function cartPrivatePrice($modelID,$duration) {
	$model_call_options_sql = mysql_query("SELECT a15min_video, a30min_video, a45min_video, a60min_video FROM cms_model_call_options WHERE model_id = '" . $modelID . "'");
	if (mysql_num_rows($model_call_options_sql) == 1) {
		if($duration == 15) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a15min_video');
		} elseif($duration == 30) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a30min_video');
		} elseif($duration == 45) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a45min_video');
		} elseif($duration == 60) {
			$privatePrice = mysql_result($model_call_options_sql, 0, 'a60min_video');
		}
		return $privatePrice;
	} else {
		return 0;
	}
}

/*

ORDER BASED FUNCTIONS FROM PREVIOUS DEVELOPER
 
 */
 
 /*
function createOrder($userID, $paymentMethod, $paymentID, $uniqid, $message = "") {
	$cartTotal = getcartTotal($userID, 1);
	$cart = getCart($userID, 1);
	$buyer_query = "SELECT * FROM `cms_members` WHERE `member_id` = '" . $userID . "'";
	$buyer_sql = mysql_query($buyer_query) or die(mysql_error());
	if (mysql_num_rows($buyer_sql) == 1) {
		$buyer = mysql_fetch_object($buyer_sql);
	}
	$today = date('Y-m-d H:i:s');
	if (isset($cart) && is_array($cart)) {
		$query = "INSERT INTO `orders` (`buyerID`, `paymentMethod`, `paymentID`, `timestamp`, `status`, `orderTotal`, `uniqid`, `message`) VALUES ('" . $userID . "', '" . $paymentMethod . "', '" . $paymentID . "', '" . time() . "', '0', '" . $cartTotal . "', '" . $uniqid . "', '" . $message . "')";
		mysql_query($query) or die(mysql_error());
		$query = "SELECT * FROM `orders` WHERE uniqid = '" . $uniqid . "'";
		$result = mysql_query($query) or die(mysql_error());
		if (mysql_num_rows($result) == 1) {
			$orderInfo = mysql_fetch_object($result);
			foreach ($cart AS $cartItem) {
				$orderDetails_query = "INSERT INTO `orderDetails` (`orderID`, `itemID`, `itemType`, `itemName`, `price`) VALUES ('" . $orderInfo -> orderID . "', '" . $cartItem -> itemID . "', '" . $cartItem -> itemType . "', '" . $cartItem -> itemName . "', '" . $cartItem -> price . "')";
				mysql_query($orderDetails_query) or die(mysql_error());
				// Change access
				$access_query = "INSERT INTO `cms_members_access` (`date`, `member_id`, `content_id`, `paid`) VALUES ('" . $today . "', '" . $userID . "', '" . $cartItem -> itemID . "', '" . $cartItem -> price . "')";
				mysql_query($access_query) or die(mysql_error());
				$cartID = $cartItem -> cartID;
			}
			mysql_query("DELETE FROM `cart` WHERE `uniqid` = '" . $uniqid . "'") or die(mysql_error());

			if (isset($cartID) && is_numeric($cartID)) {
				mysql_query("DELETE FROM `cartDetails` WHERE `cartID` = '" . $cartID . "'") or die(mysql_error());
			}
			$orderCount = count($cart);
			$message = (isset($buyer -> userName) ? $buyer -> userName : "A user") . ' has just ordered ' . $orderCount . ' item' . ($orderCount == 1 ? "" : "s") . ' for $' . $cartTotal;
			if (isset($admin_email_contact)) {
				sendMail($admin_email_contact, 'Admin', 'An order has been placed', $message);
			}
			return msgSystem('Your Purchase was Successful!', 'success');
		} else {
			msgSystem('There was an error saving your order, please contact support to verify.', 'error');
		}
	} else {
		msgSystem('There was an error retrieving your cart, please contact support and we can retrieve this data from our records.', 'error');
	}
}

function getOrder($orderClause) {
	$query = "SELECT * FROM orders " . $orderClause;
	$result = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($result) > 0) {
		return mysql_fetch_object($result);
	} else {
		return FALSE;
	}

}



function getorderDetails($orderID) {
	$query = "SELECT * FROM `orderDetails` WHERE `orderID` = '" . $orderID . "'";
	$result = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($result) > 0) {
		$orderDetails = array();
		while ($orderDetail = mysql_fetch_object($result)) {
			$orderDetails[] = $orderDetail;
		}
		return $orderDetails;
	} else {
		return "There are no order details.";
	}
}


function getallOrders($userID, $status, $type) {
	$orderCount = 0;
	$orders = array();
	if (is_numeric($status)) {
		$statusModifier = " AND `status` = " . $status;
	} else {
		$statusModifier = "";
	}
	$itemList = "";
	$query = "SELECT * from `cms_content` WHERE `owner_id` = '" . $userID . "'";
	$itemList_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($itemList_sql) > 0) {
		while ($items = mysql_fetch_object($itemList_sql)) {
			if (isset($itemList) && $itemList != "") {
				$itemList .= ', ';
			}
			$itemList = $items -> id;
		}
	}

	if (isset($itemList) && $itemList != "") {
		$query = "SELECT * FROM `orderDetails` WHERE `itemID` IN (" . $itemList . ") GROUP BY orderID ORDER BY orderID DESC";
		$result = mysql_query($query) or die(mysql_error());
		if (mysql_num_rows($result) > 0) {
			while ($orderDetail = mysql_fetch_object($result)) {
				$order_query = "SELECT * FROM `orders` WHERE `orderID` = '" . $orderDetail -> orderID . "'" . $statusModifier . "";
				$order_result = mysql_query($order_query) or die(mysql_error());
				if (mysql_num_rows($order_result) > 0) {
					if ($type == "count") {
						$orderCount++;
					} else {
						while ($order = mysql_fetch_object($order_result)) {
							$orders[] = $order;
						}
					}
				}
			}
		}
	}

	if ($type == "count") {
		return $orderCount;
	} else {
		return $orders;
	}
}

*/
?>

Youez - 2016 - github.com/yon3zu
LinuXploit