| 123 | $_COOKIE = $clean->clean_all($_COOKIE); | = | 123 | $_COOKIE = $clean->clean_all($_COOKIE); |
| 124 | $_REQUEST = $clean->clean_all($_REQUEST); | 124 | $_REQUEST = $clean->clean_all($_REQUEST); | |
| 125 | 125 | |||
| 126 | /* END INITIAL SECURITY CHECKS */ | 126 | /* END INITIAL SECURITY CHECKS */ | |
| 127 | 127 | |||
| 128 | // version info | 128 | // version info | |
| 129 | $ini['ver'] = '3.0.15'; | <> | 129 | $ini['ver'] = '3.0.16'; |
| 130 | $ini['CCver'] = '30020'; | 130 | $ini['CCver'] = '30021'; | |
| 131 | // Brute Force Protection | = | 131 | // Brute Force Protection |
| 132 | $ini['bftime'] = 600; // seconds | 132 | $ini['bftime'] = 600; // seconds | |
| 133 | $ini['bfattempts'] = 5; // login attempts | 133 | $ini['bfattempts'] = 5; // login attempts | |
| 134 | 134 | |||
| 135 | // Pages that should be server under SSL (if enabled) | 135 | // Pages that should be server under SSL (if enabled) | |
| 136 | $sslPages = array("unsubscribe" => 1,"login" => 1,"logout" => 1,"forgotPass" => 1,"account" => 1,"profile" => 1,"changePass" => 1,"newsletter" => 1,"cart" => 1,"step1" => 1,"step2" => 1,"step3" => 1,"step4" => 1,"step5" => 1,"reg" => 1,"viewOrders" => 1,"viewOrder" => 1,"confirmed" => 1); | 136 | $sslPages = array("unsubscribe" => 1,"login" => 1,"logout" => 1,"forgotPass" => 1,"account" => 1,"profile" => 1,"changePass" => 1,"newsletter" => 1,"cart" => 1,"step1" => 1,"step2" => 1,"step3" => 1,"step4" => 1,"step5" => 1,"reg" => 1,"viewOrders" => 1,"viewOrder" => 1,"confirmed" => 1); | |
| 137 | ?> | 137 | ?> |
| 119 | <tr> | = | 119 | <tr> |
| 120 | <td class="tdRichText"> | 120 | <td class="tdRichText"> | |
| 121 | <?php | 121 | <?php | |
| 122 | $oFCKeditor = new FCKeditor('FCKeditor') ; | 122 | $oFCKeditor = new FCKeditor('FCKeditor') ; | |
| 123 | $oFCKeditor->BasePath = $GLOBALS['rootRel'].'admin/includes/rte/'; | 123 | $oFCKeditor->BasePath = $GLOBALS['rootRel'].'admin/includes/rte/'; | |
| 124 | if(isset($results[0]['doc_content'])){ | 124 | if(isset($results[0]['doc_content'])){ | |
| 125 | $oFCKeditor->Value = $results[0]['doc_content']; | <> | 125 | $oFCKeditor->Value = (!get_magic_quotes_gpc ()) ? stripslashes($results[0]['doc_content']) : $results[0]['doc_content']; |
| 126 | } else { | = | 126 | } else { |
| 127 | $oFCKeditor->Value = ""; | 127 | $oFCKeditor->Value = ""; | |
| 128 | } | 128 | } | |
| 129 | $oFCKeditor->Create(); | 129 | $oFCKeditor->Create(); | |
| 130 | ?></td> | 130 | ?></td> | |
| 131 | </tr> | 131 | </tr> |
| 94 | <td valign="top" class="tdText"> | = | 94 | <td valign="top" class="tdText"> |
| 95 | <input type="text" name="module[container]" value="<?php echo $module['container']; ?>" class="textbox" size="4 | 95 | <input type="text" name="module[container]" value="<?php echo $module['container']; ?>" class="textbox" size="4 | |
| 96 | " /> | 96 | " /> | |
| 97 | </td> | 97 | </td> | |
| 98 | </tr> | 98 | </tr> | |
| 99 | <tr> | 99 | <tr> | |
| -+ | 100 | <td class="tdText"><strong>Rate:</strong></td> | ||
| 101 | <td> | |||
| 102 | <select name="module[rate]"> | |||
| 103 | <option value="RDP" <?php if($module['rate']=="RDP") echo "selected='selected'"; ?>>Regular Daily Pickup</option> | |||
| 104 | <option value="OCA" <?php if($module['rate']=="OCA") echo "selected='selected'"; ?>>On Call Air</option> | |||
| 105 | <option value="OTP" <?php if($module['rate']=="OTP") echo "selected='selected'"; ?>>One Time Pickup</option> | |||
| 106 | <option value="LC" <?php if($module['rate']=="LC") echo "selected='selected'"; ?>>Letter Center</option> | |||
| 107 | <option value="CC" <?php if($module['rate']=="CC") echo "selected='selected'"; ?>>Customer Counter</option> | |||
| 108 | </select> | |||
| 109 | </td> | |||
| 110 | </tr> | |||
| 111 | <tr> | |||
| 112 | <td class="tdText"><strong>Address Type:</strong> (Destination) </td> | |||
| 113 | <td> | |||
| 114 | <select name="module[rescom]"> | |||
| 115 | <option value="RES" <?php if($module['rescom']=="RES") echo "selected='selected'"; ?>>Residential</option> | |||
| 116 | <option value="COM" <?php if($module['rescom']=="COM") echo "selected='selected'"; ?>>Commercial</option> | |||
| 117 | </select> | |||
| 118 | </td> | |||
| 119 | </tr> | |||
| 120 | <tr> | |||
| 100 | <td colspan="2" class="tdTitle">UPS Products</td> | = | 121 | <td colspan="2" class="tdTitle">UPS Products</td> |
| 101 | </tr> | 122 | </tr> | |
| 102 | <td align="left" class="tdText"><strong>Next Day Air Early AM</strong></td> | 123 | <td align="left" class="tdText"><strong>Next Day Air Early AM</strong></td> | |
| 103 | <td class="tdText"><select name="module[product_1DM]"> | 124 | <td class="tdText"><select name="module[product_1DM]"> | |
| 104 | <option value="1" <?php if($module['product_1DM']==1) echo "selected='selected'"; ?>>Enabled</option> | 125 | <option value="1" <?php if($module['product_1DM']==1) echo "selected='selected'"; ?>>Enabled</option> | |
| 105 | <option value="0" <?php if($module['product_1DM']==0) echo "selected='selected'"; ?>>Disabled</option> | 126 | <option value="0" <?php if($module['product_1DM']==0) echo "selected='selected'"; ?>>Disabled</option> |
| 124 | = | 124 | ||
| 125 | $basket = $cart->unsetVar("invArray"); | 125 | $basket = $cart->unsetVar("invArray"); | |
| 126 | $basket = $cart->remove($_GET['remove']); | 126 | $basket = $cart->remove($_GET['remove']); | |
| 127 | headerRedir(); | 127 | headerRedir(); | |
| 128 | 128 | |||
| 129 | } elseif(isset($_POST['quan'])){ | 129 | } elseif(isset($_POST['quan'])){ | |
| <> | 130 | |||
| 131 | $basket = $cart->unsetVar("invArray"); | |||
| 130 | = | 132 | ||
| 131 | foreach($_POST['quan'] as $key => $value){ | 133 | foreach($_POST['quan'] as $key => $value){ | |
| 132 | 134 | |||
| 133 | $basket = $cart->update($key,$value); | 135 | $basket = $cart->update($key,$value); | |
| 134 | 136 | |||
| 135 | } | 137 | } |
| 66 | = | 66 | ||
| 67 | $_POST['remember'] = treatGet($_POST['remember']); | 67 | $_POST['remember'] = treatGet($_POST['remember']); | |
| 68 | if($_POST['remember']==1){ | 68 | if($_POST['remember']==1){ | |
| 69 | setcookie("ccRemember","1",time()+$config['sqlSessionExpiry'], $GLOBALS['rootRel']); | 69 | setcookie("ccRemember","1",time()+$config['sqlSessionExpiry'], $GLOBALS['rootRel']); | |
| 70 | } | 70 | } | |
| 71 | 71 | |||
| -+ | 72 | $redir = treatGet(base64_decode($_GET['redir'])); | ||
| 73 | ||||
| 74 | if(eregi("^http://|^https://",$redir) && !eregi("^".$glob['storeURL']."|^".$config['storeURL_SSL'],$redir)){ | |||
| 75 | die("Redirect URL not allowed!"); | |||
| 76 | } | |||
| 77 | ||||
| 72 | // redirect | = | 78 | // redirect |
| 73 | // "login","reg","unsubscribe","forgotPass" | 79 | // "login","reg","unsubscribe","forgotPass" | |
| 74 | if(isset($_GET['redir']) && !empty($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){ | 80 | if(isset($_GET['redir']) && !empty($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){ | |
| 75 | 81 | |||
| 76 | header("Location: ".str_replace("amp;","",treatGet(base64_decode($_GET['redir'])))); | <> | 82 | header("Location: ".str_replace("amp;","",$redir)); |
| 77 | exit; | = | 83 | exit; |
| 78 | 84 | |||
| 79 | } else { | 85 | } else { | |
| 80 | 86 | |||
| 81 | header("Location: ".$GLOBALS['rootRel']."index.php"); | 87 | header("Location: ".$GLOBALS['rootRel']."index.php"); | |
| 82 | exit; | 88 | exit; |
| 119 | = | 119 | ||
| 120 | $sessData['customer_id'] = $db->insertid(); | 120 | $sessData['customer_id'] = $db->insertid(); | |
| 121 | $update = $db->update($glob['dbprefix']."CubeCart_sessions", $sessData,"sessId=".$db->mySQLSafe($_SESSION['ccUser'])); | 121 | $update = $db->update($glob['dbprefix']."CubeCart_sessions", $sessData,"sessId=".$db->mySQLSafe($_SESSION['ccUser'])); | |
| 122 | 122 | |||
| 123 | $redir = treatGet(base64_decode($_GET['redir'])); | 123 | $redir = treatGet(base64_decode($_GET['redir'])); | |
| 124 | 124 | |||
| -+ | 125 | if(eregi("^http://|^https://",$redir) && !eregi("^".$glob['storeURL']."|^".$config['storeURL_SSL'],$redir)){ | ||
| 126 | die("Redirect URL not allowed!"); | |||
| 127 | } | |||
| 128 | ||||
| 125 | require_once("classes/cart.php"); | = | 129 | require_once("classes/cart.php"); |
| 126 | $cart = new cart(); | 130 | $cart = new cart(); | |
| 127 | $basket = $cart->cartContents($ccUserData[0]['basket']); | 131 | $basket = $cart->cartContents($ccUserData[0]['basket']); | |
| 128 | 132 | |||
| 129 | if(is_array($basket['conts']) && !empty($basket['conts'])) { | 133 | if(is_array($basket['conts']) && !empty($basket['conts'])) { | |
| 130 | 134 |
| 49 | = | 49 | ||
| 50 | $view_doc=new XTemplate ("skins/".$config['skinDir']."/styleTemplates/content/viewDoc.tpl"); | 50 | $view_doc=new XTemplate ("skins/".$config['skinDir']."/styleTemplates/content/viewDoc.tpl"); | |
| 51 | 51 | |||
| 52 | if(isset($result) && $result == TRUE){ | 52 | if(isset($result) && $result == TRUE){ | |
| 53 | 53 | |||
| 54 | $view_doc->assign("DOC_NAME",validHTML($result[0]['doc_name'])); | 54 | $view_doc->assign("DOC_NAME",validHTML($result[0]['doc_name'])); | |
| 55 | $view_doc->assign("DOC_CONTENT",$result[0]['doc_content']); | <> | 55 | $view_doc->assign("DOC_CONTENT",(!get_magic_quotes_gpc ()) ? stripslashes($result[0]['doc_content']) : $result[0]['doc_content']); |
| 56 | = | 56 | ||
| 57 | $meta['siteTitle'] = $config['siteTitle']." - ".$result[0]['doc_name']; | 57 | $meta['siteTitle'] = $config['siteTitle']." - ".$result[0]['doc_name']; | |
| 58 | $meta['metaDescription'] = substr(strip_tags($result[0]['doc_content']),0,35); | 58 | $meta['metaDescription'] = substr(strip_tags($result[0]['doc_content']),0,35); | |
| 59 | 59 | |||
| 60 | } else { | 60 | } else { | |
| 61 | 61 |
| 42 | $lkParsed = "PC9ib2R5Pg==PC9odG1sPg=="; | = | 42 | $lkParsed = "PC9ib2R5Pg==PC9odG1sPg=="; |
| 43 | 43 | |||
| 44 | if( !isset($_SESSION['ccUser']) && (isset($_COOKIE['ccUser']) || isset($_GET['ccUser'])) ){ | 44 | if( !isset($_SESSION['ccUser']) && (isset($_COOKIE['ccUser']) || isset($_GET['ccUser'])) ){ | |
| 45 | 45 | |||
| 46 | if(isset($_COOKIE['ccUser'])){ | 46 | if(isset($_COOKIE['ccUser'])){ | |
| 47 | 47 | |||
| 48 | $_COOKIE['ccUser'] = treatGet($_COOKIE['ccUser']); | <> | ||
| 49 | $sessId = base64_decode($_COOKIE['ccUser']); | 48 | $sessId = base64_decode(treatGet($_COOKIE['ccUser'])); | |
| 50 | = | 49 | ||
| 51 | } elseif(isset($_GET['ccUser'])){ | 50 | } elseif(isset($_GET['ccUser'])){ | |
| 52 | 51 | |||
| 53 | $_GET['ccUser'] = treatGet($_GET['ccUser']); | <> | ||
| 54 | $sessId = $_GET['ccUser']; | 52 | $sessId = treatGet($_GET['ccUser']); | |
| 55 | = | 53 | ||
| 56 | } | 54 | } | |
| -+ | 55 | ## remove possible CRLF injection | ||
| 56 | $sessId = str_replace(array('%0d', '%0a'), '', $sessId); | |||
| 57 | = | 57 | ||
| 58 | // see if session is still in db | 58 | // see if session is still in db | |
| 59 | $query = "SELECT sessId FROM ".$glob['dbprefix']."CubeCart_sessions WHERE sessId=".$db->mySQLSafe($sessId); | 59 | $query = "SELECT sessId FROM ".$glob['dbprefix']."CubeCart_sessions WHERE sessId=".$db->mySQLSafe($sessId); | |
| 60 | $results = $db->select($query); | 60 | $results = $db->select($query); | |
| 61 | 61 | |||
| 62 | if($results == TRUE){ | 62 | if($results == TRUE){ |
| 1133 | 'tellafriend' => "Tips en venn", | = | 1133 | 'tellafriend' => "Tips en venn", |
| 1134 | 'quantity' => "Antall:", | 1134 | 'quantity' => "Antall:", | |
| 1135 | 'more_images' => "[+] Flere bilder", | 1135 | 'more_images' => "[+] Flere bilder", | |
| 1136 | 'add_to_basket' => "Legg i handlekurv", | 1136 | 'add_to_basket' => "Legg i handlekurv", | |
| 1137 | 'location' => "Sted:", | 1137 | 'location' => "Sted:", | |
| 1138 | 'no_instock' => "På lager:", | 1138 | 'no_instock' => "På lager:", | |
| 1139 | 'instock' => "Ikke på lager", | <> | 1139 | 'instock' => "På lager", |
| 1140 | 'out_of_stock' => "UTSOLGT", | = | 1140 | 'out_of_stock' => "UTSOLGT", |
| 1141 | 'prod_opts' => "Produkt valg:", | 1141 | 'prod_opts' => "Produkt valg:", | |
| 1142 | 'prod_not_found' => "Produktet finnes ikke.", | 1142 | 'prod_not_found' => "Produktet finnes ikke.", | |
| 1143 | ); | 1143 | ); | |
| 1144 | 1144 | |||
| 1145 | $lang['front']['step1'] = array( | 1145 | $lang['front']['step1'] = array( |
| 36 | if($module['debug'] == 1){ | = | 36 | if($module['debug'] == 1){ |
| 37 | $DEBUGGING = 1; # Display additional information to track down problems | 37 | $DEBUGGING = 1; # Display additional information to track down problems | |
| 38 | } | 38 | } | |
| 39 | 39 | |||
| 40 | $authnet_values = array | 40 | $authnet_values = array | |
| 41 | ( | 41 | ( | |
| -+ | 42 | "x_invoice" => $basket['cart_order_id'], | ||
| 42 | "x_login" => $auth_net_login_id, | = | 43 | "x_login" => $auth_net_login_id, |
| 43 | "x_version" => "3.1", | 44 | "x_version" => "3.1", | |
| 44 | "x_delim_char" => "|", | 45 | "x_delim_char" => "|", | |
| 45 | "x_delim_data" => "TRUE", | 46 | "x_delim_data" => "TRUE", | |
| 46 | "x_url" => "FALSE", | 47 | "x_url" => "FALSE", | |
| 47 | "x_type" => "AUTH_CAPTURE", | 48 | "x_type" => "AUTH_CAPTURE", |
| 100 | <tr align="left"> | = | 100 | <tr align="left"> |
| 101 | <td><strong>Country: </strong> | 101 | <td><strong>Country: </strong> | |
| 102 | <td colspan="3"> | 102 | <td colspan="3"> | |
| 103 | <!--<input type="hidden" name="country" value="{VAL_COUNTRY_ISO}" size="10" maxlength="15" class="textbox" />--> | 103 | <!--<input type="hidden" name="country" value="{VAL_COUNTRY_ISO}" size="10" maxlength="15" class="textbox" />--> | |
| 104 | 104 | |||
| 105 | <select name="country" class="textbox"> | 105 | <select name="country" class="textbox"> | |
| 106 | BEGIN: repeat_countries | <> | 106 | <!-- BEGIN: repeat_countries --> |
| 107 | <option value="{VAL_COUNTRY_ISO}" {COUNTRY_SELECTED}>{VAL_COUNTRY_NAME}</option> | = | 107 | <option value="{VAL_COUNTRY_ISO}" {COUNTRY_SELECTED}>{VAL_COUNTRY_NAME}</option> |
| 108 | END: repeat_countries | <> | 108 | <!-- END: repeat_countries --> |
| 109 | </select> | = | 109 | </select> |
| 110 | </td> | 110 | </td> | |
| 111 | </tr> | 111 | </tr> | |
| 112 | </table> | 112 | </table> | |
| 113 | <input type="hidden" name="cart_order_id" value="{VAL_CART_ORDER_ID}" /> | 113 | <input type="hidden" name="cart_order_id" value="{VAL_CART_ORDER_ID}" /> | |
| 114 | <input type="hidden" name="amount" value="{VAL_GRAND_TOTAL}" /> | 114 | <input type="hidden" name="amount" value="{VAL_GRAND_TOTAL}" /> | |
| 115 | <input type="hidden" name="gateway" value="HSBC" /> | 115 | <input type="hidden" name="gateway" value="HSBC" /> | |
| 116 | <!-- END: form --> | 116 | <!-- END: form --> |
| 130 | = | 130 | ||
| 131 | } | 131 | } | |
| 132 | 132 | |||
| 133 | /////////////////////////// | 133 | /////////////////////////// | |
| 134 | // Other Vars | 134 | // Other Vars | |
| 135 | //////// | 135 | //////// | |
| 136 | $formAction = "https://www.paymate.com.au/PayMate/ExpressPayment"; | <> | 136 | $formAction = "https://www.paymate.com.au/PayMate/GenExpressPayment?mid=".$module['email']."&ref"; |
| 137 | $formMethod = "post"; | 137 | $formMethod = "get"; | |
| 138 | $formTarget = "_self"; | = | 138 | $formTarget = "_self"; |
| 139 | $transfer = "auto"; | 139 | $transfer = "auto"; | |
| 140 | $stateUpdate = TRUE; | 140 | $stateUpdate = TRUE; | |
| 141 | ?> | 141 | ?> |
| 11 | $productCode = substr($key,8,3); | = | 11 | $productCode = substr($key,8,3); |
| 12 | 12 | |||
| 13 | $rate = new Ups; | 13 | $rate = new Ups; | |
| 14 | $rate->upsProduct($productCode); // See upsProduct() function for codes | 14 | $rate->upsProduct($productCode); // See upsProduct() function for codes | |
| 15 | $rate->origin($module['postcode'], countryIso($config['siteCountry'])); // Use ISO country codes! | 15 | $rate->origin($module['postcode'], countryIso($config['siteCountry'])); // Use ISO country codes! | |
| 16 | $rate->dest($basket['delInf']['postcode'], countryIso($basket['delInf']['country'])); // Use ISO country codes! | 16 | $rate->dest($basket['delInf']['postcode'], countryIso($basket['delInf']['country'])); // Use ISO country codes! | |
| <> | 17 | |||
| 18 | if(!isset($module['rate'])) | |||
| 19 | { | |||
| 17 | $rate->rate("RDP"); // See the rate() function for codes | 20 | $rate->rate("RDP"); // See the rate() function for codes | |
| 21 | } | |||
| 22 | else | |||
| 23 | { | |||
| 24 | $rate->rate(strtoupper($module['rate'])); // See the rate() function for codes | |||
| 25 | } | |||
| 26 | ||||
| 18 | $rate->container($module['container']); // See the container() function for codes | = | 27 | $rate->container($module['container']); // See the container() function for codes |
| 19 | $rate->weight($totalWeight); | 28 | $rate->weight($totalWeight); | |
| <> | 29 | |||
| 30 | if(!isset($module['rescom'])) | |||
| 31 | { | |||
| 20 | $rate->rescom("RES"); // See the rescom() function for codes | 32 | $rate->rescom("RES"); // See the rescom() function for codes | |
| 33 | } | |||
| 34 | else | |||
| 35 | $rate->rescom(strtoupper($module['rescom'])); // See the rescom() function for codes | |||
| 36 | } | |||
| 21 | = | 37 | ||
| 22 | switch ($productCode) { | 38 | switch ($productCode) { | |
| 23 | 39 | |||
| 24 | case "1DM": | 40 | case "1DM": | |
| 25 | $desc = $lang['misc']['nextDayEarlyAm']; | 41 | $desc = $lang['misc']['nextDayEarlyAm']; | |
| 26 | break; | 42 | break; |
| 569 | } | = | 569 | } |
| 570 | 570 | |||
| 571 | curl_setopt($ch, CURLOPT_POSTFIELDS, $msg); | 571 | curl_setopt($ch, CURLOPT_POSTFIELDS, $msg); | |
| 572 | curl_setopt($ch, CURLOPT_URL, $this->url); | 572 | curl_setopt($ch, CURLOPT_URL, $this->url); | |
| 573 | curl_setopt($ch, CURLOPT_POST, 1); | 573 | curl_setopt($ch, CURLOPT_POST, 1); | |
| 574 | curl_setopt($ch, CURLOPT_FAILONERROR, 0); | 574 | curl_setopt($ch, CURLOPT_FAILONERROR, 0); | |
| <> | 575 | ## Error supress for safe mode should still work | ||
| 575 | curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); | 576 | @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); | |
| 576 | curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); | = | 577 | curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); |
| 577 | curl_setopt($ch, CURLOPT_HEADER, 1); | 578 | curl_setopt($ch, CURLOPT_HEADER, 1); | |
| 578 | if (defined('CURLOPT_HTTP_VERSION')) { | 579 | if (defined('CURLOPT_HTTP_VERSION')) { | |
| 579 | curl_setopt($ch, CURLOPT_HTTP_VERSION, 1); | 580 | curl_setopt($ch, CURLOPT_HTTP_VERSION, 1); | |
| 580 | } | 581 | } | |
| 581 | 582 |
| 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> | = | 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> |
| 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | |
| 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | |
| 51 | </tr> | 51 | </tr> | |
| 52 | <!-- BEGIN: repeat_products --> | 52 | <!-- BEGIN: repeat_products --> | |
| 53 | <tr> | 53 | <tr> | |
| 54 | <td class="<?php echo $cellColor; ?>"> | <> | 54 | <td class="{TD_CLASS}"> |
| 55 | {VAL_PRODUCT}<br /> | = | 55 | {VAL_PRODUCT}<br /> |
| 56 | {VAL_PRODUCT_OPTS} | 56 | {VAL_PRODUCT_OPTS} | |
| 57 | <!-- BEGIN: digital_link --> | 57 | <!-- BEGIN: digital_link --> | |
| 58 | <br /> | 58 | <br /> | |
| 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | |
| 60 | <!-- END: digital_link --> | 60 | <!-- END: digital_link --> |
| 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> | = | 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> |
| 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | |
| 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | |
| 51 | </tr> | 51 | </tr> | |
| 52 | <!-- BEGIN: repeat_products --> | 52 | <!-- BEGIN: repeat_products --> | |
| 53 | <tr> | 53 | <tr> | |
| 54 | <td class="<?php echo $cellColor; ?>"> | <> | 54 | <td class="{TD_CLASS}"> |
| 55 | {VAL_PRODUCT}<br /> | = | 55 | {VAL_PRODUCT}<br /> |
| 56 | {VAL_PRODUCT_OPTS} | 56 | {VAL_PRODUCT_OPTS} | |
| 57 | <!-- BEGIN: digital_link --> | 57 | <!-- BEGIN: digital_link --> | |
| 58 | <br /> | 58 | <br /> | |
| 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | |
| 60 | <!-- END: digital_link --> | 60 | <!-- END: digital_link --> |
| 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> | = | 48 | <td class="subHead"><strong>{LANG_PRODUCT_CODE}</strong></td> |
| 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | 49 | <td class="subHead"><strong>{LANG_QUANTITY}</strong></td> | |
| 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | 50 | <td align="right" class="subHead"><strong>{LANG_PRICE}</strong></td> | |
| 51 | </tr> | 51 | </tr> | |
| 52 | <!-- BEGIN: repeat_products --> | 52 | <!-- BEGIN: repeat_products --> | |
| 53 | <tr> | 53 | <tr> | |
| 54 | <td class="<?php echo $cellColor; ?>"> | <> | 54 | <td class="{TD_CLASS}"> |
| 55 | {VAL_PRODUCT}<br /> | = | 55 | {VAL_PRODUCT}<br /> |
| 56 | {VAL_PRODUCT_OPTS} | 56 | {VAL_PRODUCT_OPTS} | |
| 57 | <!-- BEGIN: digital_link --> | 57 | <!-- BEGIN: digital_link --> | |
| 58 | <br /> | 58 | <br /> | |
| 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | 59 | [<a href="{VAL_DOWNLOAD_LINK}" class="txtDefault">{LANG_DOWNLOAD_LINK}</a>] | |
| 60 | <!-- END: digital_link --> | 60 | <!-- END: digital_link --> |
| 73 | } | = | 73 | } |
| 74 | $body->assign("CURRENCY_VER",$currencyVer); | 74 | $body->assign("CURRENCY_VER",$currencyVer); | |
| 75 | $body->assign("VAL_ISO",$charsetIso); | 75 | $body->assign("VAL_ISO",$charsetIso); | |
| 76 | $body->assign("VAL_SKIN",$config['skinDir']); | 76 | $body->assign("VAL_SKIN",$config['skinDir']); | |
| 77 | 77 | |||
| 78 | // START META DATA | 78 | // START META DATA | |
| 79 | $body->assign("META_TITLE",htmlspecialchars($config['siteTitle']).c()); | <> | 79 | $body->assign("META_TITLE",htmlspecialchars(str_replace("'","'",$config['siteTitle'])).c()); |
| 80 | $body->assign("META_DESC",$config['metaDescription']); | = | 80 | $body->assign("META_DESC",$config['metaDescription']); |
| 81 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | 81 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | |
| 82 | 82 | |||
| 83 | // START MAIN CONTENT | 83 | // START MAIN CONTENT | |
| 84 | switch (treatGet($_GET['act'])) { | 84 | switch (treatGet($_GET['act'])) { | |
| 85 | 85 |
| 161 | // START META DATA | = | 161 | // START META DATA |
| 162 | if(isset($meta)){ | 162 | if(isset($meta)){ | |
| 163 | $body->assign("META_TITLE",htmlspecialchars($meta['siteTitle']).c()); | 163 | $body->assign("META_TITLE",htmlspecialchars($meta['siteTitle']).c()); | |
| 164 | $body->assign("META_DESC",$meta['metaDescription']); | 164 | $body->assign("META_DESC",$meta['metaDescription']); | |
| 165 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | 165 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | |
| 166 | } else { | 166 | } else { | |
| 167 | $body->assign("META_TITLE",htmlspecialchars($config['siteTitle']).c()); | <> | 167 | $body->assign("META_TITLE",htmlspecialchars(str_replace("'","'",$config['siteTitle'])).c()); |
| 168 | $body->assign("META_DESC",$config['metaDescription']); | = | 168 | $body->assign("META_DESC",$config['metaDescription']); |
| 169 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | 169 | $body->assign("META_KEYWORDS",$config['metaKeyWords']); | |
| 170 | } | 170 | } | |
| 171 | 171 | |||
| 172 | // START CONTENT BOXES | 172 | // START CONTENT BOXES | |
| 173 | include("includes/boxes/searchForm.inc.php"); | 173 | include("includes/boxes/searchForm.inc.php"); |