#!/usr/bin/perl

#############################################################################
# Online Shopping Cart By JMS Online Systems - Since 1993                   #
# (c) 1993 - 2003 All rights reserved.                                      #
# www.jmsonline.net Custom ecommerce programming is our specialty!          #


# don't bother calling jim: it's been reworked so much he wouldn't recognize it
# joseph frasier admin@cgimasters.com


#############################################################################

# house webmaster ID
my $default_wmid = 1045;

# allow to see cross-sells when free product
my $allow_xsell_on_free = 0;

# allow foreign countries when free product (for domestic-only orders, value must equal 0)
my $allow_foreign_on_free = 0;

# if not allowed, what message should be displayed
my $allow_foreign_on_free_denied_msg = "This product is available to domestic customers only.";

# what processor to use at checkout
## use 'PROC' in FORM variables to determine merchant processor
## NB=Netbilling, GB=Globalbilling, AN=Authorizenet (untested)
my $checkout_processor = ($FORM{'PROC'} ne '') ? $FORM{'PROC'} : $Processor;
my $checkout_tag = "_Checkout";
our $checkout = $checkout_processor.$checkout_tag;


###### COOKIES FOR TRACKING - CJL
my $COOKIE_DATA = $ENV{'HTTP_COOKIE'};
foreach (split(/;/, $COOKIE_DATA)) {   # Extract each pair from the string   
 my($NAME,$VALUE) = split(/=/, $_);   # Split each pair into a NAME and a VALUE   
 $NAME =~ s/\+/ /g;   
 $NAME =~ s/%([0-9|A-F]{2})/pack(C,hex($1))/eg;   
 $VALUE =~ s/\+/ /g;   
 $VALUE =~ s/%([0-9|A-F]{2})/pack(C,hex($1))/eg;   
 $COOKIE{$NAME} = $VALUE;    # Assign the pair to an associative array
 }
 
$SENDROIKWD = $COOKIE{' SENDROI20KWD'};
$SENDROICID = $COOKIE{'SENDROI20CID'};
$SENDROIREFER = $COOKIE{' SENDROI20REF'};
######  COOKIES FOR TRACKING - CJL






print "Content-type: text/html \n\n";
#
#
# global settings
require '/host/users/herbalo/herbalo.com/purecart/shared_subs.pl';
#
# per-site settings
require $purecart_site_dir . 'pathinfo.pl' if ($website ne '');




if ($FORM{cid} > 0)
{$cid = $FORM{cid};}

# the exit pops are in the headers: this is for the links and form submits here
unless ($FORM{NoPop} ne '')
{
	$link_tag = ' onclick="exit=false;" ';  
	$form_tag = ' onsubmit="exit=false;" ';
}


if ($FORM{CartID} ne '') # been here before
{($FORM{wmid}, $trash) = split(/_/, $FORM{CartID});}

else # first time
{
  if ($FORM{ID} ne '')
  {$FORM{wmid} = $FORM{ID};}
  else
  {  unless ($FORM{wmid} ne '') {$FORM{wmid} = $default_wmid ;}  } # the "unless" is a precaution

$FORM{CartID} = $FORM{wmid} . "_" . time();
$FORM{banner}   = substr($FORM{wmid},4);
##-removed by wtorres-##
# $FORM{wmid}     = substr($FORM{wmid},0,4);	# wmid can be bigger than 4 values
  unless ($FORM{banner} > 0) {$FORM{banner} = '000';}

  my ($timestamp, $hour, $period) = &DateHourPeriod;
$timestamp .= $hour;

  unless ($dbh)
  {  $dbh = &OpenSQL(purecart);  }

my $sql_st = qq~SELECT hits FROM traffic WHERE wmid=? AND banner=? AND timestamp=?~;
my $sth = $dbh->prepare($sql_st);
$sth->execute($FORM{wmid}, $FORM{banner}, $timestamp)
  or die "can't execute the query: " . $sth->errstr; 
my ($hits) = $sth->fetchrow_array;
$sth->finish;

$hits++;

  if ($hits > 1)
  {$sql_st = qq~UPDATE traffic SET hits=$hits WHERE wmid='$FORM{wmid}' AND timestamp='$timestamp'~;}
  else
  {$sql_st = qq~INSERT INTO traffic (wmid, banner, timestamp, period, hits) VALUES ('$FORM{wmid}','$FORM{banner}','$timestamp','$period','1')~;}

$sth = $dbh->prepare($sql_st);
$sth->execute()
  or die "can't execute the query: " . $sth->errstr; 
$sth->finish;
}


# populate stuff
$CartID   = $FORM{'CartID'};
$LinkID   = $FORM{'LK'};
$DeptID   = $FORM{'Dept'};
$ItemID   = $FORM{'IT'};
$ReDo     = $FORM{'RD'};
$ChkOut   = $FORM{'CK'};
$Cancel   = $FORM{'CL'};
$AddItem  = $FORM{'OR'};
$ItemOrd  = $FORM{'IO'};
$KeyWord  = $FORM{'KeyWord'};
$PayHow   = $FORM{'PayHow'};
$NewOrder = $FORM{'NewOrder'};
$Referer  = (($FORM{'Referer'} ne '') && ($FORM{'Referer'} ne '(none)')) ? $FORM{'Referer'} : $ENV{'HTTP_REFERER'};
$PROC     = ($FORM{'PROC'} ne '') ? $FORM{'PROC'} : $Processor;




if($ReDo eq "UPDATE"){ &RePost; } # ths sub followed by PrintShipTo
if($PayHow eq "1")   { &PrintCheck; }
if($FORM{DeptID} ne "")    { &PrintDept; }
if($ItemID ne "")    { &PrintItem; }
if($LinkID ne "")    { &PrintMenu; }
if($Cancel eq "1")   { &ResetCart; }
if($KeyWord ne "")   { &PrintSearch; }

print qq~
<!--
Chkout=$ChkOut
AddItem=$AddItem
LinkID=$LinkID
Cancel=$Cancel
ReDo=$ReDo
DeptID=$DeptID
NewOrder=$NewOrder
Referer=$Referer
Xsold=$FORM{Xsold}
-->
~;

  if($AddItem eq "1") # after adding do we
  {
    if ($NewOrder eq "1"){&ResetCartShip;}

    if ($FORM{Xsold} ne '')
    #if (($FORM{Xsold} eq 1) || ($FORM{Xsold} eq 2))
    {  &PostItemOrder; &PrintOrder; exit;  }  # go to payment page?
    else
    {  &PostItemOrder; &PrintShipTo; exit;  }  # or go to shipping page?
  }

if($ChkOut eq "1")   { &PrintOrder; }

# none of the above?
$FORM{Dept} = 1;
&PrintDept;

#&PrintMenu;

#####

sub RePost
{
print qq~<!-- sub RePost-->~;
open(CART,"$CartDir/$CartID.txt");
@ITEMS = <CART>;
close(CART);
$NewCart = "";

  foreach $row (@ITEMS)
  {
  ($Item,$Name,$Desc,$Price,$ShipD,$ShipG,$Qty) = split(/\|/,$row);
    next if ($NoDups{$Item});
  $NoDups{$Item} = 1;
  $ItemDel  = $Item . R;
  $ItemQuan = $Item . Q;
  $Quantity = $FORM{$ItemQuan};
  $Remove   = $FORM{$ItemDel};

    if($Remove eq "1") # this actually means keep it...
    {
    $NewCart .= qq~$Item|$Name|$Desc|$Price|$ShipD|$ShipG|$Quantity|\n~;
    $FORM{$ItemDel} = 0;
    }
  }

open(NCART,">$CartDir/$CartID.txt");
print NCART "$NewCart";
close(NCART);

&PrintShipTo;
exit;
}

#####

sub PrintMenu
{
  &PrintHead if ($website ne '');

print qq~
<!-- sub PrintMenu-->
<div align="center">
<table border="1" width="650" cellpadding="3" cellspacing="3" align="center">
~;

 open(DATA,$DataBase);
 @ROWS = <DATA>;
 close(DATA);
 @ROWS = sort(@ROWS);
 foreach $line (@LINES)
  {
  ($Dept,$Name) = split(/\|/,$line);
  if($Name ne "")
   {
   print "<tr><td colspan=\"2\"><p><ul><a href=\"$Links\?Dept=$Dept\" $link_tag><font face=\"arial\" size=\"2\"><strong>$Name</strong></font></a><br><ul>";
   }
  foreach $row (@ROWS)
   {
   ($Dep,$Item,$Nam,$Desc,$Opt1,$Opt2,$Opt3,$Weight,$Price,$Ship,$Url,$Image,$Tax,$Invt) = split(/\|/,$row);
   if($Dep eq "$Dept")
    {
    print "<li> <a href=\"$Links\?IT=$Item\" $link_tag><font face=\"arial\" size=\"2\">$Nam</font></a><br>\n";
    }
   }
   print "</td></tr>";
  }
 print "</table></div><br>";


  &PrintFoot if ($website ne '');
exit;
}

#####

sub PrintDept
{
  &PrintHead(products_page) if ($website ne '');

print qq~
<!-- sub PrintDept-->
<div class="productList" align="center">

<!--
SEARCH
<table border="1" width="650" cellpadding="3" cellspacing="3" align="center">
<tr><td align="right" width="350">
<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="Dept" value="$DeptID">
<div align="right"><font size="1" face="arial"><strong>Browse: </strong></font><select name="Dept">
~;

  @LINES = &DeptList;

  foreach $line (@LINES)
  {
  ($Dept,$Name) = split(/\|/,$line);

    if ($Name ne "")
    {
      if($DeptID eq "$Dept")
      {print qq~<option value="$Dept" selected>$Name</option>~;}
      else
      {print qq~<option value="$Dept">$Name</option>~;}
    }
  }

print qq~
</select> <input type="image" name="SearchDept" src="$ImageAddr/go.gif" alt="Go" border="0"></div></form></td>
<td align="left" width="300">

<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="Referer" value="$Referer">
<div align="left"><font size="1" face="arial"><strong>Search: </strong></font><input name="KeyWord" size="12" maxlength="25"> <input type="image" name="SearchKey" src="$ImageAddr/go.gif" border="0"></div></form></td></tr>
<tr><td colspan="2"><hr></td></tr>
</table>
-->

<!-- PRODUCTS -->
~;

   # table outside form
   print "<table border=\"0\" width=\"650\" cellpadding=\"3\" cellspacing=\"3\" align=\"center\" summary=\"ProductList\">\n" unless ($product_form_outside_table);

   # get list of product groups (if any)
   my (@prodgroup) = &GetProductGroups("$website","$FORM{Dept}");
   my %prodprices, $order_prod_by;

   # get list of products for site
   if (@prodgroup) {	# to have proper grouping, we must sort by order_in_cart
      $order_prod_by = "order_in_cart,pid asc";
   } else {		# otherwise, just go with most expensive first
      $order_prod_by = "price desc";
   }
   my @ROWS = &ItemList("$website", "$FORM{Dept}", "$order_prod_by"); # send site and dept. and order

   # if we have groups, prune list of products, and group
   if (@prodgroup) {
      my($newrows, $pgprices) = &prune_product_rows(\@prodgroup, \@ROWS);
      @ROWS = @{ $newrows };
      %prodprices = %{ $pgprices };
   }

   my $cg = 0 if (@prodgroup);
   my $prodnum = 0;
   foreach $row (@ROWS)
   {
      $prodnum++;
      ($Dept,$Item,$Name,$Desc,$Blurb,$Price,$ShipD,$ShipG,$Url) = split(/\|/,$row);
      $ItemQuan = $Item . 'Q';
      my ($width,$height) = (0,0);

#      if ($Url ne "") { print qq~<a href="$Url" target="_blank"><font size="1" face="arial">larger image</font></a>~; }

      ##
      ## set some variables to use later
      ##
      # set cart info
      my $cart_form = "\n<form action=\"$CartAction\" method=\"post\" class=\"PureCartMenu\" name=\"PCMProd$prodnum\" $form_tag>\n";
      $cart_form .= "<table border=\"0\" width=\"100%\" cellpadding=\"3\" cellspacing=\"3\" align=\"center\" summary=\"ProductList\">\n" if ($product_form_outside_table);
      $cart_form .= "\t<input type=\"hidden\" name=\"CartID\" value=\"$CartID\">\n";
      $cart_form .= "\t<input type=\"hidden\" name=\"Referer\" value=\"$Referer\">\n";
      $cart_form .= "\t<input type=\"hidden\" name=\"NoPop\" value=\"$FORM{NoPop}\">\n";
      $cart_form .= "\t<input type=\"hidden\" name=\"Dept\" value=\"$FORM{Dept}\">\n";
      $cart_form .= "\t<input type=\"hidden\" name=\"OR\" value=\"1\">\n";
      $cart_form .= "\t<input type=\"hidden\" name=\"NewOrder\" value=\"1\">\n";
      # if no groups, set product ID from current item
      $cart_form .= "\n\t<input type=\"hidden\" name=\"IO\" value=\"$Item\">\n\t<input type=\"hidden\" name=\"$ItemQuan\" value=\"1\">\n" unless(@prodgroup);
      #
      # set image dimensions
      ($width,$height) = &GifSize("$ImagePath/$Item.gif") if (-e "$ImagePath/$Item.gif");
      #
      # set product blurb
      my $cart_blurb = "\n\t<tr>\n\t<td align=\"center\" valign=\"top\">\n\t\t<table ";
      $cart_blurb .= "width=\"$width\" " if ($width);
      $cart_blurb .= "border=\"0\"><tr><td><center>\n";
      $cart_blurb .= "\t\t\t$Blurb\n";
      $cart_blurb .= "\t\t</center></td></tr></table>\n";
      $cart_blurb .= "\t</td></tr>\n" if (@prodgroup);
      #
      # set description or image
      my $cart_desc;
      if (-e "$ImagePath/$Item.gif")
      {
         $cart_desc .= "\t<tr><td align=\"center\">\n";
      	 $cart_desc .= "\t\t<input type=\"image\" src=\"$ImageAddr/$Item.gif\" border=\"0\" width=\"$width\" height=\"$height\" alt=\"Order Now: $Desc\">\n";
      	 $cart_desc .= "\t</td></tr>\n";
      } else {
	 $cart_desc .= "\t<tr><td align=\"center\" valign=\"top\">\n";
	 $cart_desc .= "\t\t<font class=\"productListName\"><strong>$Name</strong>$Desc</font><br>\n";
      	 $cart_desc .= "\t\t<font class=\"productListDesc\"><strong>Price:</strong> \$$Price</font>\n";
      	 $cart_desc .= "\t</td></tr>\n";
      }
      #
      # set product group based dropdown
      my $cart_menu = &get_dropdown_products($cg, \%prodprices) if (@prodgroup);
      #
      # set order button/end of form
      my $cart_order;
      $cart_order .= "\n\t<tr><td align=\"center\">\n" if (@prodgroup);
      $cart_order .= "\t\t<input type=\"image\" name=\"OrderNow\" src=\"$ImageAddr/order.gif\" alt=\"Order Now: $Desc\" border=\"0\"><br>\n";
      if ($product_form_outside_table) {
         $cart_order .= "\t\t</td></tr>\n</table>\n</form>\n\t<tr><td><hr noshade></td></tr>\n";
      } else {
         $cart_order .= "\t\t</td></tr>\n\t</form>\n\t<tr><td><hr noshade></td></tr>\n";
      }

      ## begin displaying the cart
      # first form
      print qq~$cart_form\n~;
      # if in group, blurb next
      print qq~$cart_blurb\n~ if (@prodgroup);
      # description/image
      print qq~$cart_desc\n~;
      # cart menu, grouped products
      print qq~$cart_menu\n~ if ($cart_menu);
      # if not in group, blurb after desc
      print qq~$cart_blurb\n~ if (!@prodgroup);
      # end of cart
      print qq~$cart_order\n~;
      $cg++ if (@prodgroup);
   }

  if ($product_form_outside_table) {
     print "</div><br>\n";
  } else {
     print "\n</table></div><br>\n";
  }

  &PrintFoot(products_page) if ($website ne '');
exit;
}

#####

sub PrintItem
{
 &PrintHead if ($website ne '');
 print qq~
<!-- sub PrintItem-->
 <div align="center">
 <table border="0" width="650" cellpadding="3" cellspacing="3" align="center">
 <tr><td align="right" width="350">
 <form action="$CartAction" method="post" $form_tag>
 <input type="hidden" name="CartID" value="$CartID">
 <input type="hidden" name="Referer" value="$Referer">
 <div align="right">
 <font size="1" face="arial"><strong>Browse: </strong></font><select name="Dept">
 ~;

  @LINES = &DeptList;

 foreach $line (@LINES)
  {
  ($Dept,$Name) = split(/\|/,$line);
  if ($Name ne "")
   {
   if($FORM{'Dept'} eq "$Dept")
    {
    print qq~<option value="$Dept" selected>$Name</option>~;
    } else {
    print qq~<option value="$Dept">$Name</option>~;
    }
   }
  }

print qq~
</select> 
<input type="image" name="SearchDept" src="$ImageAddr/go.gif" alt="Go" border="0"></div></form></td>
<td align="left" width="300">
<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<div align="left"><font size="1" face="arial"><strong>Search: </strong></font><input name="KeyWord" size="12" maxlength="25"> <input type="image" name="SearchKey" src="$ImageAddr/go.gif" border="0"></div></form></td></tr>
<tr><td colspan="2"><hr></td></tr>
~;

 open(DATA,$DataBase);
 @ROWS = <DATA>;
 close(DATA);
 foreach $row (@ROWS)
  {
  ($Dept,$Item,$Name,$Desc,$Opt1,$Opt2,$Opt3,$Weight,$Price,$Ship,$Url,$Image,$Tax,$Invt) = split(/\|/,$row);
  $ItemQuan = $Item . Q;

# this was already turned off 
#  if ($Invt > 0) {
  if ($ItemID eq "$Item")
   {
   print qq~<tr><td valign="top"><font face="arial" size="2"><strong>$Name</strong></font><p><font face="arial" size="2">$Desc</font><br> \n~;
   if ($Url ne "") { print "<a href=\"$Url\" target=\"_blank\"><font size=\"1\" face=\"arial\">larger image</font></a>\n"; }
   print qq~
   </p><form action="$CartAction" method="post" $form_tag>
   <input type="hidden" name="CartID" value="$CartID">
   <input type="hidden" name="Referer" value="$Referer">
   <p><font size="1" face="arial"><strong>
   ~;

#   if ($Invt ne "") { print "In Stock: $Invt <br>"; }

   print qq~
   Price: \$$Price </strong></font>
   <input type="hidden" name="IO" value="$Item">
   <input type="hidden" name="CartID" value="$CartID">
   <input type="hidden" name="Name" value="$Name">
   <input type="hidden" name="Dept" value="$FORM{Dept}">
   <input type="hidden" name="$ItemQuan" value="1">
   <input type="hidden" name="OR" value="1">
   <input type="hidden" name="AID" value="$AID">
   <input type="image" name="OrderNow" src="$ImageAddr/order.gif" alt="Order Now" border="0"></form></p></td>
   ~;

   if ($Image ne "")
    {
    if (-e "$ImagePath/$Image")
     {
     print "<td align=\"center\">";
     if ($Url ne "") { print "<a href=\"$Url\" target=\"_blank\">"; }
     print "<img src=\"$ImageAddr/$Image\" border=\"0\" alt=\"$Name\">";
     if ($Url ne "") { print "</a>"; }
     print "</td></tr>\n";
     } else {
     print "<td>\&nbsp\;</td></tr>\n";
     }
    }
    print "<tr><td colspan=\"2\"><hr></td></tr>";
    }
#   }
  }
 print "</table></div><br>\n";

 &PrintFoot if ($website ne '');

exit;
}

#####

sub PostItemOrder # add an item to cart
{
my $add_freebe;

print qq~<!-- sub PostItemOrder-->~;

  unless (-e "$CartDir/$CartID.txt") # first time, check for freebe
  {$add_freebe = 1;}

open(CART, ">>$CartDir/$CartID.txt");

  if ($add_freebe ne '')
  {
    @ROWS = &ItemList("$website","0"); # dept 0 is free stuff
    foreach $row (@ROWS)
    {
    ($trash,$Item,$Name,$Desc,$trash,$Price,$ShipD,$ShipG,$Url) = split(/\|/,$row);
    print CART qq~$Item|$Name|$Desc|$Price|$ShipD|$ShipG|1|\n~;
    }
  }

  ($Dept,$Item,$Name,$Desc,$trash,$Price,$ShipD,$ShipG,$Url) = &OneItem("$ItemOrd");

$ItemQuan = $Item . "Q";
$Quantity  = $FORM{$ItemQuan};
  unless ($Quantity > 1) {$Quantity = 1;}
print CART qq~$Item|$Name|$Desc|$Price|$ShipD|$ShipG|$Quantity|\n~;

close(CART);
}

#####

sub PrintShipTo # the "view cart" page
{
require $purecart_dir . 'SelectStateCountry.pl';

$SubTotal = "0.00";
$ItemCount = "0";

  my $dbh = &OpenSQL("purecart");
  &PrintHead(ship_page) if ($website ne '');

  # they could be returning to this page: see if info already in DB
  if ($FORM{cid} > 0)
  {
	$sql_st = qq~SELECT FirstName, LastName, Email, Phone, Address, Address2, City, State, Zip, Country, ShipFirstName, ShipLastName, ShipEmail, ShipPhone, ShipAddress, ShipAddress2, ShipCity, ShipState, ShipZip, ShipCountry FROM customers WHERE ID='$FORM{cid}'~;
	$sth = $dbh->prepare($sql_st);
	$sth->execute() or die "can't execute the query: " . $sth->errstr; 
	($FirstName, $LastName, $Email, $Phone, $Address, $Address2, $City, $State, $Zip, $Country, $ShipFirstName, $ShipLastName, $ShipEmail, $ShipPhone, $ShipAddress, $ShipAddress2, $ShipCity, $ShipState, $ShipZip, $ShipCountry) = $sth->fetchrow_array;
	$sth->finish;
  } else {
	$ShipFirstName = $FORM{'x_Ship_To_FirstName'} if ($FORM{'x_Ship_To_FirstName'} ne '');
	$ShipLastName = $FORM{'x_Ship_To_LastName'} if ($FORM{'x_Ship_To_LastName'} ne '');
	$ShipAddress = $FORM{'x_Ship_To_Address'} if ($FORM{'x_Ship_To_Address'} ne '');
	$ShipAddress2 = $FORM{'x_Ship_To_Address2'} if ($FORM{'x_Ship_To_Address2'} ne '');
	$ShipCity = $FORM{'x_Ship_To_City'} if ($FORM{'x_Ship_To_City'} ne '');
	$ShipState = uc($FORM{'x_Ship_To_State'}) if ($FORM{'x_Ship_To_State'} ne '');
	$ShipProvince =  $FORM{'x_Ship_To_Province'} if ($FORM{'x_Ship_To_Province'} ne '');
	$ShipZip = $FORM{'x_Ship_To_Zip'} if ($FORM{'x_Ship_To_Zip'} ne '');
	$ShipCountry = $FORM{'x_Ship_To_Country'} if ($FORM{'x_Ship_To_Country'} ne '');
	$ShipPhone = $FORM{'x_Ship_To_Phone'} if ($FORM{'x_Ship_To_Phone'} ne '');
	$ShipEmail = $FORM{'x_Ship_To_Email'} if ($FORM{'x_Ship_To_Email'} ne '');
	$ShipCountry = "US" if (($FORM{'x_Ship_To_Country'} eq '') && ($ShipAddress ne '') && ($ShipCity ne '') && ($ShipState ne '') && ($ShipZip ne ''));
	$FORM{'x_Ship_To_Country'} = $ShipCountry if ($FORM{'x_Ship_To_Country'} eq '');
  }

print qq~
<!-- sub PrintShipTo-->
<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="cid" value="$FORM{cid}">
<input type="hidden" name="Dept" value="$FORM{Dept}">
<input type="hidden" name="wmid" value="$FORM{wmid}">
<input type="hidden" name="NoPop" value="$FORM{NoPop}">
<input type="hidden" name="RD" value="UPDATE">
<input type="hidden" name="Referer" value="$Referer">

<div align="center">
<table width="676" height="31" border="0" cellpadding="0" cellspacing="0">
<tr>
  <td> <img src="$ImageAddr/cartheader_01.gif" width="44" height="31" alt=""></td>
  <td> <img src="$ImageAddr/cartheader_02.gif" width="516" height="31" alt=""></td>
  <td> <img src="$ImageAddr/cartheader_1of3_03.gif" alt="" width="116" height="31" border="0"></td>
</tr>
</table>

<table width="676" border="0" align="center" cellpadding="4" cellspacing="0">
<tr>
  <td width="250" valign="top">

  <table width="250" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td bgcolor="#E8E8E8">

    <table width="100%"  border="0" cellspacing="1" cellpadding="4">
    <tr><th colspan="2" bgcolor="#FFFFCC"><strong>Items Ordered</strong></th></tr>
    <tr>
      <td colspan="2" bgcolor="#FFFFFF">
~;

  if(-e "$CartDir/$CartID.txt")
  {
  open(TEMP, "$CartDir/$CartID.txt");
  @ROWS = <TEMP>;
  close(TEMP);
    foreach $row (@ROWS)
    {
    ($Item,$Name,$Desc,$Price,$ShipD,$ShipG,$Qty) = split(/\|/,$row);
    $max_shipD = $ShipD if ($max_shipD , $ShipD);
    $max_shipG = $ShipG if ($max_shipG , $ShipG);
    $SubTotal += ($Price * $Qty);
    $Remove   = $Item . 'R';
    $Quantity = $Item . 'Q';
      if($Price ne "")
      {
      print qq~
      <p><input type="checkbox" checked name="$Remove" value="1">
      <input type="hidden" name="$Quantity" value="$Qty">
      <b>$Qty of $Name</b><br>
      $Desc<br>
      <u>Price:</u>\$$Price ea. </p>
      ~;
      $ItemCount = "1";
      $AlreadyOrdered{$Item} = "1";
      }
    }
  }

print qq~
      </td>
    </tr>
~;

  $Back = 'http://' . $ENV{'HTTP_HOST'} . $ENV{'SCRIPT_NAME'} . '?Dept=' . $FORM{'Dept'} . '&CartID=' . $CartID . '&NoPop=' . $FORM{'NoPop'};

  if($ItemCount eq "1")
  {
  $STotal = sprintf "%.2f",$SubTotal;
  print qq~
    <tr>
      <td colspan="2" bgcolor="#FFFFCC"><strong>Order Subtotal</strong></td>
    </tr>
    <tr>
      <td width="74%" align="right" bgcolor="#FFFFFF"><u>Subtotal:</td>
      <td width="26%" align="right" bgcolor="#FFFFFF"><p>\$$STotal</td>
    </tr>
    <tr>
      <td align="right" bgcolor="#FFFFFF"><u>U.S. Shipping:</td>
      <td align="right" bgcolor="#FFFFFF"><p>\$$max_shipD</td>
    </tr>~;
  print qq~
    <tr>
      <td align="right" bgcolor="#FFFFFF"><u>Global Shipping:</td>
      <td align="right" bgcolor="#FFFFFF"><p>\$$max_shipG</td>
    </tr>~ if (($SubTotal > 0) || ($allow_foreign_on_free));
  print qq~
    <tr>
      <td colspan="2" bgcolor="#FFFFFF">
      <input type="image" src="$ImageAddr/btn_updatecart.gif" width="97" height="20" border="0">
      </td>
    </tr>
    </table>

    </td>
  </tr>
  </table>  

  </form>

  <FORM ACTION="$CartAction" METHOD="POST" $form_tag>

  <input type="hidden" name="CartID" value="$CartID">
  <input type="hidden" name="cid" value="$FORM{cid}">
  <input type="hidden" name="Dept" value="$FORM{Dept}">
  <input type="hidden" name="wmid" value="$FORM{wmid}">
  <input type="hidden" name="NoPop" value="$FORM{NoPop}">
  <input type="hidden" name="Referer" value="$Referer">
  ~;

  } else {

  print qq~
  <p align="center"><font size="3" face="arial"><strong>Your Shopping Cart Is Empty<br></strong></font></p>
  <p align="center"><a href="$Back" $link_tag><img src="$ImageAddr/continue.gif" alt="Continue Shopping" border="0"></a></p>
  ~;
  }
 
print qq~

  </td>
  <!-- end left, start right -->
  <td width="400" align="right" valign="top">

  <table width="400" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td bgcolor="#ffffff">
~;

# crosssells?
    if (!($SubTotal) && !($allow_xsell_on_free)) {
       @ROWS = ();
    } else {
       @ROWS = &ItemList("$website","99"); # dept 99 Crosssells  ##CJL
    }
    foreach $row (sort @ROWS)						##CJL
    {									##CJL


    	($trash,$Item,$Name,$Desc,$trash,$Price,$ShipD,$ShipG,$Url) = split(/\|/,$row);

			##$sql_st = "SELECT products FROM crosssells WHERE website='$website' AND step='1'";
			##$sth = $dbh->prepare($sql_st);
			##$sth->execute();
  			##while ($pid = $sth->fetchrow_array)
  			##{

  	undef ($width);
  	undef ($height);

    	unless($top_printed)
    	{
    	$top_printed = 1;
    	print qq~
    	<table border="0" width="100%" height="100%" cellpadding="4" cellspacing="1" align="center" valign="top">
    	<tr>
      <td bgcolor="#FFFFCC"><strong>Customers who've purchased this product have also bought</td>
    	</tr>
    	<tr>
      	<td>

      	<table border="0" width="100%"> <!-- unbordered table of products -->
    	~;
    	}
			##next if ($AlreadyOrdered{$pid});

    	next if ($AlreadyOrdered{$Item});

  			##$sql_st2 = "SELECT name, description, price FROM products WHERE pid='$pid'";
  			##$sth2 = $dbh->prepare($sql_st2);
  			##$sth2->execute();
  			##($name, $description, $price) = $sth2->fetchrow_array;
  			##$sth2->finish;

  			##$link = qq~$CartAction?CartID=$CartID&NoPop=$FORM{NoPop}&Dept=$FORM{Dept}&cid=$FORM{cid}&IO=$pid&OR=1~;

	$link = qq~$CartAction?CartID=$CartID&NoPop=$FORM{NoPop}&Dept=$FORM{Dept}&cid=$FORM{cid}&IO=$Item&OR=1~;

    if (-e "$ImagePath/xsell_$Item.gif")
    {  ($width, $height) = GifSize("$ImagePath/xsell_$Item.gif");  }

  			## print qq~
    			## <tr>
      			## <td bgcolor="#FFFFFF"><img src="$ImageAddr/xsell_$Item.gif" width="$width" height="$height" align="right"></td>
      			## <td bgcolor="#FFFFFF"><b>$description</td>
      			## <td bgcolor="#FFFFFF">$name<br>
      			## <u>Price:</u> \$$price ea.</td>
      			## <td bgcolor="#FFFFFF"><a href="$link" $link_tag><img src="$ImageAddr/btn_addtocart.gif" width="97" height="20" vspace="4" border="0"></a></td>
    			## </tr>
  			## ~;
	print qq~
    	<tr>
      	<td bgcolor="#FFFFFF"><img src="$ImageAddr/xsell_$Item.gif" width="$width" height="$height" align="right"></td>
      	<td bgcolor="#FFFFFF"><b>$Desc</td>
      	<td bgcolor="#FFFFFF">$Name<br>
      	<u>Price:</u> \$$Price ea.</td>
      	<td bgcolor="#FFFFFF"><a href="$link" $link_tag><img src="$ImageAddr/btn_addtocart.gif" width="97" height="20" vspace="4" border="0"></a></td>
    	</tr>
  	~;

  }
			## $sth->finish;

  if ($top_printed) # started a table, better close it
  {print qq~</table></td></tr></table>~;}

print qq~
    <table width="420" border="0" cellspacing="0" cellpadding="0">
    <tr>
      <td bgcolor="#E8E8E8">

      <table border="0" width="100%" cellpadding="4" cellspacing="1" align="center" valign="top">

<input type="hidden" name="shipcostD" value="$max_shipD">
<input type="hidden" name="shipcostG" value="$max_shipG">
<input type="hidden" name="Xsold" value="$FORM{Xsold}">

      <tr bgcolor="#FFFFCC">
        <td colspan="6"><strong>Shipping Information </strong></td>
      </tr>
      <tr bgcolor="#FFFFFF">
        <td align="right"><p>First:</td>
        <td><input maxlength="50" name="x_Ship_To_FirstName" size="15" value="$ShipFirstName"></td>
        <td align="right"><p>Last:</p></td>
        <td colspan="3"><input maxlength="50" name="x_Ship_To_LastName" size="15" value="$ShipLastName"></td>
      </tr>
      <tr bgcolor="#FFFFFF">
      <td align="right"><p>Address1:</td>
        <td colspan="5"><input maxlength="25" name="x_Ship_To_Address" size="40" value="$ShipAddress"></td>
      </tr>
      <tr bgcolor="#FFFFFF">
        <td align="right"><p>Address2:</td>
        <td colspan="5"><input maxlength="25" name="x_Ship_To_Address2" size="40" value="$ShipAddress2"></td>
      </tr>
      <tr bgcolor="#FFFFFF">
        <td align="right"><p>City:</td>
        <td><input maxlength="50" name="x_Ship_To_City" size="15" value="$ShipCity"></td>
        <td align="right"><p>State:</td>
        <td><select name="x_Ship_To_State">
        <option value="" selected>State</option>
~;

  &SelectState("$ShipState");

print qq~
        </select></td>
        <td align="right"><p>Zip: </td>
        <td><input maxlength="6" name="x_Ship_To_Zip" size="6" value="$ShipZip"></td>
      </tr>
      <tr bgcolor="#FFFFFF">
        <td align="right"><p>Country:</td>
~;

   if (!($SubTotal) && !($allow_foreign_on_free)) {
      print qq~        <td colspan="5"><select name="x_Ship_To_Country" onClick="javascript:alert('$allow_foreign_on_free_denied_msg');">\n~;
      &SelectCountry($ShipCountry, "no");
   } else {
      print qq~        <td colspan="5"><select name="x_Ship_To_Country">\n~;
      &SelectCountry($ShipCountry, "yes");
   }

print qq~
        </select></td>
      </tr>
      <!--
      <tr bgcolor="#FFFFFF">
        <td align="right"><p>Province:</td>
        <td colspan="5"><input maxlength="50" name="x_Ship_To_Province" value="" size="40"></td>
      </tr>
      -->
      <tr bgcolor="#FFFFFF">
        <td align="right" valign="top"><p>Phone:</td>
        <td><input maxlength="12" name="x_Ship_To_Phone" size="15" value="$ShipPhone">
        <i><br>
        (xxx-xxx-xxxx)</i></td>
        <td align="right" valign="top"><p>E-mail:</td>
        <td colspan="3"><input maxlength="50" name="x_Ship_To_Email" size="20" value="$ShipEmail">
        <i><br>
        (Required for confirmation)</i></td>
      </tr>

      <input type="hidden" name="CK" value="1">

      <tr bgcolor="#FFFFCC">
        <td colspan="6"><center><input name="Total" type="image" value="1" src="$ImageAddr/btn_step2of3.gif" alt="Checkout" width="167" height="20" border="0"></td>
      </tr>
      </table>

      </td>
    </tr>
    </table>

    </td>
  </tr>
  </table>

  </td>
</tr>
</table>
~;

   &PrintFoot(ship_page) if ($website ne '');
}

#####

sub PrintOrder # pay_page: enter billing info
{
  my $dbh = &OpenSQL("purecart");
  require $purecart_dir . 'SelectStateCountry.pl';

  &PrintHead(pay_page) if ($website ne '');

  print qq~<!-- sub PrintOrder-->~;

  my $Blank;
  my $back_link = 'javascript:history.back(1)';
  $Hide = "";

  unless ($FORM{NoPop} ne '')
  {$back_link .= '" onclick="exit=false; ';}

  # ok, if he hit this page direct from the Ship to page then we're getting all his
  # shipping info, BUT he may be here because he clicked the pay page xsell, in which case
  # the shipping info will not be in %FORM, but will be in DB
  #  
  # if Xsold == 2, then
  #	user is not in DB
  #	shipping info came from POST to cart
  #	pre-fill billing info from shipping info

  if (($FORM{Xsold} eq 1) && ($FORM{cid} > 0))
  {
	$sql_st = qq~SELECT ShipFirstName, ShipLastName, ShipEmail, ShipPhone, ShipAddress, ShipAddress2, ShipCity, ShipState, ShipZip, ShipCountry FROM customers WHERE ID='$FORM{cid}'~;
	$sth = $dbh->prepare($sql_st);
	$sth->execute()
		or die "can't execute the query: " . $sth->errstr; 
	($x_Ship_To_FirstName, $x_Ship_To_LastName, $x_Ship_To_Email, $x_Ship_To_Phone, $x_Ship_To_Address, $x_Ship_To_Address2, $x_Ship_To_City, $x_Ship_To_State, $x_Ship_To_Zip, $x_Ship_To_Country) = $sth->fetchrow_array;
	$sth->finish;

	$FORM{'x_Ship_To_FirstName'} = $x_Ship_To_FirstName;
	$FORM{'x_Ship_To_LastName'}  = $x_Ship_To_LastName;
	$FORM{'x_Ship_To_Address'}   = $x_Ship_To_Address;
	$FORM{'x_Ship_To_Address2'}  = $x_Ship_To_Address2;
	$FORM{'x_Ship_To_City'}      = $x_Ship_To_City;
	$FORM{'x_Ship_To_State'}     = $x_Ship_To_State;
	$FORM{'x_Ship_To_Zip'}       = $x_Ship_To_Zip;
	$FORM{'x_Ship_To_Country'}   = $x_Ship_To_Country;
	$FORM{'x_Ship_To_Province'}  = $x_Ship_To_Province;
	$FORM{'x_Ship_To_Phone'}     = $x_Ship_To_Phone;
	$FORM{'x_Ship_To_Email'}     = $x_Ship_To_Email;
  } elsif (($FORM{'Xsold'} eq 2) || ($FORM{'cid'} eq '')) {
	$FORM{'x_FirstName'} = $FORM{'x_Ship_To_FirstName'} if (($FORM{'x_FirstName'} eq '') && ($FORM{'x_Ship_To_FirstName'} ne ''));
	$FORM{'x_LastName'} = $FORM{'x_Ship_To_LastName'} if (($FORM{'x_LastName'} eq '') && ($FORM{'x_Ship_To_LastName'} ne ''));
	$FORM{'x_Address'} = $FORM{'x_Ship_To_Address'} if (($FORM{'x_Address'} eq '') && ($FORM{'x_Ship_To_Address'} ne ''));
	$FORM{'x_Address2'} = $FORM{'x_Ship_To_Address2'} if (($FORM{'x_Address2'} eq '') && ($FORM{'x_Ship_To_Address2'} ne ''));
	$FORM{'x_City'} = $FORM{'x_Ship_To_City'} if (($FORM{'x_City'} eq '') && ($FORM{'x_Ship_To_City'} ne ''));
	$FORM{'x_Ship_To_State'} = uc($FORM{'x_Ship_To_State'}) if ($FORM{'x_Ship_To_State'} ne '');
	$FORM{'x_State'} = $FORM{'x_Ship_To_State'} if (($FORM{'x_State'} eq '') && ($FORM{'x_Ship_To_State'} ne ''));
	$FORM{'x_Zip'} = $FORM{'x_Ship_To_Zip'} if (($FORM{x_Zip} eq '') && ($FORM{'x_Ship_To_Zip'} ne ''));
	$FORM{'x_Ship_To_Country'} = "US" if (($FORM{'x_Ship_To_Country'} eq '') && ($FORM{'x_Ship_To_Address'} ne '') && ($FORM{'x_Ship_To_City'} ne '') && ($FORM{'x_Ship_To_State'} ne '') && ($FORM{'x_Ship_To_Zip'} ne ''));
	$FORM{'x_Country'} = $FORM{'x_Ship_To_Country'} if (($FORM{'x_Country'} eq '') && ($FORM{'x_Ship_To_Country'} ne ''));
	$FORM{'x_Province'} = $FORM{'x_Ship_To_Province'} if (($FORM{'x_Province'} eq '') && ($FORM{'x_Ship_To_Province'} ne ''));
	$FORM{'x_Phone'} = $FORM{'x_Ship_To_Phone'} if (($FORM{'x_Phone'} eq '') && ($FORM{'x_Ship_To_Phone'} ne ''));
	$FORM{'x_Email'} = $FORM{'x_Ship_To_Email'} if (($FORM{'x_Email'} eq '') && ($FORM{'x_Ship_To_Email'} ne ''));
  }

  # check input
  if ($FORM{'x_Ship_To_FirstName'} eq "") { $Blank = "First Name"; }
  if ($FORM{'x_Ship_To_LastName'} eq "")  { $Blank = "Last Name"; }
  if ($FORM{'x_Ship_To_Address'} eq "")   { $Blank = "Street Address"; }
  if ($FORM{'x_Ship_To_City'} eq "")      { $Blank = "City"; }
  if ($FORM{'x_Ship_To_State'} eq "")
  {
    if ($FORM{'x_Ship_To_Province'} eq "") { $Blank = "State or Provience"; }
  }

  if ($FORM{'x_Ship_To_Zip'} eq "")             { $Blank = "Zip code"; }
  if ($FORM{'x_Ship_To_Country'} eq "")         { $Blank = "Country"; }
  if ($FORM{'x_Ship_To_Email'} !~ /.+\@.+\..+/) { $Blank = "Valid Email Address"; }
# if ($FORM{'x_Ship_To_Phone'} eq "")           { $Blank = "Phone Number"; }

  #for (keys %FORM)
  #{ if ($_ =~ /^x_/) {print qq~<!-- name="$_" value="$FORM{$_}" -->\n~}  }

  if ($Blank ne '') { $ErrorMessage = qq~Please <a href="$back_link">Go Back</a> and enter your $Blank.~; &PrintError; exit; }

  if ($FORM{'x_Ship_To_Country'} =~ /^US$/)
  {$TShip = $FORM{'shipcostD'}}
  else
  {$TShip = $FORM{'shipcostG'}}

# store what we got so far, if haven't already
  if ($FORM{'cid'} > 0)
  {$cid = $FORM{'cid'};}
  else
  {
  ($FORM{'wmid'}, $trash) = split(/_/, $CartID);
  $sql_st = qq~
  INSERT INTO customers 
  (WMID, FirstName, LastName, Email, Phone, Address, Address2, City, State, Zip, Country, ShipFirstName, ShipLastName, ShipEmail, ShipPhone, ShipAddress, ShipAddress2, ShipCity, ShipState, ShipZip, ShipCountry, IP) 
  VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)
  ~;

  $sth = $dbh->prepare($sql_st);
  $sth->execute($FORM{'wmid'}, $FORM{'x_FirstName'}, $FORM{'x_LastName'}, $FORM{'x_Email'}, $FORM{'x_Phone'} || $FORM{'x_Ship_To_Phone'}, $FORM{'x_Address'}, $FORM{'x_Address2'}, $FORM{'x_City'}, $FORM{'x_State'}, $FORM{'x_Zip'}, $FORM{'x_Country'}, $FORM{'x_Ship_To_FirstName'}, $FORM{'x_Ship_To_LastName'}, $FORM{'x_Ship_To_Email'}, $FORM{'x_Ship_To_Phone'} || $FORM{'x_Phone'}, $FORM{'x_Ship_To_Address'}, $FORM{'x_Ship_To_Address2'} || '-', $FORM{'x_Ship_To_City'}, $FORM{'x_Ship_To_State'}, $FORM{'x_Ship_To_Zip'}, $FORM{'x_Ship_To_Country'}, $ENV{'REMOTE_ADDR'})
    or die "can't execute the query: " . $sth->errstr; 
  $sth->finish;

  $cid = $dbh->last_insert_id(undef, undef, 'customers', 'ID');

     if (($cid eq "") || ($cid < 1000)) {
        $sql_st = "SELECT MAX(ID) FROM customers WHERE IP=? AND WMID=?";
        $sth = $dbh->prepare($sql_st);
        $sth->execute($ENV{'REMOTE_ADDR'}, $FORM{'wmid'});
        $cid = $sth->fetchrow_array;
        $sth->finish;
     }
  }

$Back = "http://$ENV{HTTP_HOST}$ENV{SCRIPT_NAME}?Dept=$FORM{Dept}&CartID=$CartID&NoPop=$FORM{NoPop}";

#  for (keys %FORM)
#  { if ($_ =~ /^x_/) {print qq~<input type="hidden" name="$_" value="$FORM{$_}">\n~}  }

##-why-is-this-here?-## print "\n</form>\n";

print qq~
<hr align="center" width="600"><br><div align="center">
<table class="infoBox" border="1" cellspacing="2" cellpadding="3" width="600">
<tr>
<td align="center" width="300"><font size="2" face="arial"><strong><u>Shipping Information</u></strong></font></td>
<td width="300" align="center"><font size="2" face="arial"><strong><u>Payment Information</u></strong></font></td>
</tr><tr>
<td valign="top">
  <table class="infoBox" width="300"cellspacing="0" cellpadding="4" border="0">
  <tr>

    <td valign="top"><p><font size="1" face="arial"><strong>
    Ship From: $ENV{HTTP_HOST}<br>
    </strong>
    <br>
    <hr>
    Ship To:<br>
    $FORM{'x_Ship_To_FirstName'} $FORM{'x_Ship_To_LastName'}<br>
    $FORM{'x_Ship_To_Address'}<br>
    $FORM{'x_Ship_To_Address2'}<br>
    $FORM{'x_Ship_To_City'}, $FORM{'x_Ship_To_State'} $FORM{'x_Ship_To_Zip'}<br>
    $FORM{'x_Ship_To_Country'}<br>
    $FORM{x_Ship_To_Email}<br>
    $FORM{x_Ship_To_Phone}
    </td>
  </tr>
  </table>

  <table class="infoBox" width="300" cellspacing="2" cellpadding="2" border="0">
  <tr>
    <td colspan="2"><center>
~;

  my $cartShip = 0;
  if(-e "$CartDir/$CartID.txt")
  {
  print qq~<table class="infoBox">~;
  $Count = 1;
  open(TEMP, "$CartDir/$CartID.txt");
  @ROWS = <TEMP>;
  close(TEMP);
    foreach $row (@ROWS)
    {
    ($Item,$Name,$Desc,$Price,$ShipD,$ShipG,$Qty) = split(/\|/,$row);
#  if ($Ship ne "")   { $SShip   += ($Ship * $Qty); }
#  if ($Weight ne "") { $Tweight += ($Weight * $Qty); }
    $ITotal = ($Price * $Qty);
    $SubTotal += ($Price * $Qty);
    $PTotal = sprintf "%.2f",$ITotal;
    $Number = "X-$Count";

      if($Price ne "")
      {
      print qq~
      <tr><td valign="top" width="240">
      <font size="1" face="arial"><strong>$Qty #$Item $Name</strong></td>
      <td valign="top" width="60" align="right"><font size="2" face="arial">\$$PTotal</font></td>
      </tr>
      ~;

      $OrderString .= "$Item\~$Name\~$Price\~$Qty\~N\~\;";
      $OrderDesc   .= "$Qty $Item $Name\, ";
      $Count++;
      $AlreadyOrdered{$Item} = "1";
      }
      $cartShip += ($FORM{x_Ship_To_Country} =~ /^US$/) ? $ShipD : $ShipG;
    }
  print qq~</table>~;
  }

  $TShip = $cartShip if ($TShip == 0 && $cartShip gt 0);

  if ($FORM{x_Ship_To_State} =~ /^CA$/)
	{$STax = (.0925 * $SubTotal);}
	else
	{$Stax = 0;}

$Total  = ($SubTotal + $TShip + $STax);
$TTotal = sprintf "%.2f",$Total;
$STotal = sprintf "%.2f",$SubTotal;
$SSTax = sprintf "%.2f",$STax;
$TTShip = sprintf "%.2f",$TShip;

    my $xsell_displayed = 0;
# crosssells?
    if (!($SubTotal) && !($allow_xsell_on_free)) {
       @ROWS = ();
    } else {
       @ROWS = &ItemList("$website","99"); # dept 99 Crosssells  ##CJL
    }
    foreach $row (@ROWS)						##CJL
    {									##CJL


    	($trash,$Item,$Name,$Desc,$trash,$Price,$ShipD,$ShipG,$Url) = split(/\|/,$row);

		##$sql_st = "SELECT products FROM crosssells WHERE website='$website' AND step='2'";
		##$sth = $dbh->prepare($sql_st);
		##$sth->execute();
  		##while ($pid = $sth->fetchrow_array)
  		##{
  	undef ($width);
  	undef ($height);

    		##next if ($AlreadyOrdered{$pid});

	next if ($AlreadyOrdered{$Item});

  		##$sql_st2 = "SELECT name, description, price FROM products WHERE pid='$pid'";
  		##$sth2 = $dbh->prepare($sql_st2);
  		##$sth2->execute();
  		##($name, $description, $price) = $sth2->fetchrow_array;
  		##$sth2->finish;

  		##$link = qq~$CartAction?CartID=$CartID&NoPop=$FORM{NoPop}&Dept=$FORM{Dept}&cid=$FORM{cid}&IO=$pid&OR=1~;

	$link = qq~$CartAction?CartID=$CartID&NoPop=$FORM{NoPop}&Dept=$FORM{Dept}&cid=$FORM{cid}&IO=$Item&OR=1~;
    	if (-e "$ImagePath/xsell_$Item.gif")
    	{  ($width, $height) = &GifSize("$ImagePath/xsell_$Item.gif");  }

	unless($top_printed2)
    	{
    	$top_printed2 = 1;
    	print qq~
	<center>
  	<table class="infoBox" border=1><tr><td>
	~;
	}

  	print qq~

	
  	<form action="$CartAction" method="post">
  	<input type="hidden" name="CartID" value="$CartID">
  	<input type="hidden" name="NoPop" value="">
  	<input type="hidden" name="Dept" value="$FORM{Dept}">
  	<input type="hidden" name="IO" value="$Item">
  	<input type="hidden" name="OR" value="1">
  	<input type="hidden" name="cid" value="$cid">
  	<input type="hidden" name="Xsold" value="1">
  	<input type="hidden" name="shipcostD" value="$FORM{shipcostD}">
  	<input type="hidden" name="shipcostG" value="$FORM{shipcostG}">
	<input type="hidden" name="Referer" value="$Referer">
	<table class="infoBox">
   	<tr>
     	<td bgcolor="#FFFFFF" valign="middle"><img src="$ImageAddr/xsell_$Item.gif" width="$width" height="$height" align="right"></td>
     	<td bgcolor="#FFFFFF" align="left" valign="middle">$Name<br><b>$Desc</td>
     	<td bgcolor="#FFFFFF" align="right" valign="middle"><u>Price:\$$Price<br><br><input type="image" $form_tag src="$ImageAddr/btn_addtocart.gif" width="97" height="20" border="0"></td>
   	</tr>
  	</form>
  	</table>
	~;
	$xsell_displayed++;
  }
		##$sth->finish;

   # if all cross-sells have been added, tables are misformated.
   # this insures theres an empty table where cross-sells would have been
   unless ($xsell_displayed) {
	print qq~
		<table class="infoBox" border=0><tr><td>
		<table class="infoBox" border=0><tr><td>&nbsp;</td><td><br></td><td><br><br></td>
		</tr></table>
	~;
   }


print qq~
    </td></tr></table></center>
    </td></tr>

  <tr>
    <td><hr align="right"></td>
  </tr>
  </table><table>
  <tr><td valign="top" width="240" align="right"><font size="1" face="arial"><strong>Sub Total:</td><td valign="top" width="60" align="right"><font size="2" face="arial">\$$STotal</td></tr>
  <tr><td valign="top" width="240" align="right"><font size="1" face="arial"><strong>Shipping:</td><td valign="top" width="60" align="right"><font size="2" face="arial">\$$TTShip</td></tr>
  <tr><td valign="top" width="240" align="right"><font size="1" face="arial"><strong>Tax:</td><td valign="top" width="60" align="right"><font size="2" face="arial">\$$SSTax</td></tr>
  <tr><td valign="top" width="240" align="right"><font size="1" face="arial"><strong>Total Order:</td><td valign="top" width="60" align="right"><font size="2" face="arial"><strong>\$$TTotal</strong></td></tr>
  </table>

</td>

<!-- end left cell, begin right cell -->

<form action="$purecart_secure_site/billing.cgi" method="post" $form_tag>
<input type="hidden" name="website" value="$website">
<input type="hidden" name="cid" value="$cid">
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="Dept" value="$FORM{Dept}">
<input type="hidden" name="cid" value="$cid">
<input type="hidden" name="Shipping" value="$TTShip">
<input type="hidden" name="ShipHow" value="$ShipType">
<input type="hidden" name="SubTotal" value="$SubTotal">
<input type="hidden" name="x_Description" value="$OrderDesc">
<input type="hidden" name="Orderstring" value="$OrderString">
<input type="hidden" name="Referer" value="$Referer">
<input type="hidden" name="PROC" value="$PROC">


<td width="300" valign="top">

  <table class="infoBox" border="0" width="300" cellpadding="2" cellspacing="2" align="center" vlign="top">
  <tr><td align="right"><font size="1" face="arial"><strong>Email:</strong></font></td><td><input maxlength="50" name="x_Email" size="30" value="$FORM{'x_Ship_To_Email'}"></td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>First Name:</strong></font></td><td><input maxlength="50" name="x_FirstName" size="20" value="$FORM{'x_Ship_To_FirstName'}"></td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>Last Name:</strong></font></td><td><input maxlength="50" name="x_LastName" size="20" value="$FORM{'x_Ship_To_LastName'}"></td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>Address1:</strong></font></td><td><input maxlength="25" name="x_Address" size="40" value="$FORM{'x_Ship_To_Address'}"></td></tr>
~;

print qq~<!-- HERE I AM -->\n~;
if (($FORM{'x_Ship_To_Address2'} eq '') && ($FORM{'Xsold'} ne 2))
{print qq~
  <tr><td align="right"><font size="1" face="arial"><strong>Address2:</strong></font></td><td><input maxlength="25" name="x_Address2" size="40" value="$FORM{'x_Ship_To_Address2'}"></td></tr>
~;}
elsif ($FORM{'Xsold'} eq 2)
{print qq~
  <tr><td align="right"><font size="1" face="arial"><strong>Address2:</strong></font></td><td><input maxlength="25" name="x_Address2" size="40" value="$FORM{'x_Ship_To_Address2'}"></td></tr>
~;}

print qq~
  <tr><td align="right"><font size="1" face="arial"><strong>City:</strong></font></td><td><input maxlength="50" name="x_City" size="20" value="$FORM{'x_Ship_To_City'}"></td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>State:</strong></font></td><td>
  <select name="x_State">
~;

  &SelectState($FORM{'x_Ship_To_State'});

print qq~
  </select>
  </td></tr>
  <!--<tr><td align="right"><font size="1" face="arial"><strong>Or Province:</strong></font></td><td><input maxlength="40" name="Province" value="$FORM{x_Ship_To_Province}" size="20"></td></tr>-->
  <tr><td align="right"><font size="1" face="arial"><strong>Zip Code:</strong></font></td><td><input maxlength="6" name="x_Zip" size="6" value="$FORM{'x_Ship_To_Zip'}"></td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>Country:</strong></font></td>~;


   if (!($SubTotal) && !($allow_foreign_on_free)) {
      print qq~<td><select name="x_Country" onClick="javascript:alert('$allow_foreign_on_free_denied_msg');">\n~;
      &SelectCountry($FORM{x_Ship_To_Country}, "no");
   } else {
      print qq~<td><select name="x_Country">\n~;
      &SelectCountry($FORM{x_Ship_To_Country}, "yes");
   }


print qq~
  </select>
  </td></tr>
  <tr><td align="right"><font size="1" face="arial"><strong>Phone:</strong></font></td><td><input maxlength="12" name="x_Phone" size="12" value="$FORM{'x_Ship_To_Phone'}"><font size="2" face="arial"> \(xxx-xxx-xxxx\)</font></td></tr>
~;

print qq~
  <tr>
    <td colspan="2"><center>
      <table class="infoBox">
      <tr><td colspan="2"><center><br>Payment By:</td></tr>
      <tr>\n~;

if ($FORM{'x_Ship_To_Email'} =~ /$Processor_TestEmail$/) {
   print qq~        <td colspan="2"><center>Credit Card:<br><input type="image" src="$purecart_secure_site/images/netbilling.gif" name="NB$checkout_tag" value="Netbilling" border="0" alt="Authorize via Netbilling using a Credit Card"></td>\n~;
   print qq~        <td colspan="2"><center>Credit Card:<br><input type="image" src="$purecart_secure_site/images/netbillingtest.gif" name="NBT$checkout_tag" value="Netbilling Test" border="0" alt="Authorize via Netbilling using Test Credit Card"></td>\n~;
   print qq~        <td colspan="2"><center>Credit Card:<br><input type="image" src="$purecart_secure_site/images/globalbilling.gif" name="GB$checkout_tag" value="Globalbilling" border="0" alt="Authorize via Globalbilling using a Credit Card"></td>\n~;
   print qq~        <td colspan="2"><center>Credit Card:<br><input type="image" src="$purecart_secure_site/images/globalbilling.gif" name="GBT$checkout_tag" value="Globalbilling Test" border="0" alt="Authorize via Globalbilling using Test Credit Card"></td>\n~;

} else {
   $checkout = $PROC.$checkout_tag;
   print qq~        <td colspan="2"><center>Credit Card:<br><input type="image" src="$ImageAddr/checkout_NB.gif" name="$checkout" border="0" alt="Secure Purchase by Credit Card"></td>\n~;
}

print qq~
        <!--<td><center>Online Check:<br><input type="image" src="$ImageAddr/checkout_EC.gif" name="EC_Checkout" border="0" alt="Secure Purchase by Online Check"></td>-->
      </tr></table>
    </td>
  </tr>
 </table>

</td></tr></table>

</div><br><hr align="center" width="600"><br>
~;

#open(TQUE,">>paytemp.txt");
#print TQUE qq~$InvID|$CartID|$FORM{'x_Ship_To_FirstName'}|$FORM{'x_Ship_To_LastName'}|$FORM{'x_Ship_To_Address'}|$FORM{'x_Ship_To_City'}|$FORM{'x_Ship_To_State'}|$FORM{'x_Ship_To_Zip'}|~;
#print TQUE qq~$FORM{'x_Ship_To_Country'}|$FORM{'x_Ship_To_Country'}|$FORM{'x_Ship_To_Email'}|$FORM{'x_Ship_To_Phone'}|$FORM{'x_Ship_To_FirstName'}|$FORM{'x_Ship_To_LastName'}|$FORM{'x_Ship_To_Address'}|$FORM{'x_Ship_To_City'}|$FORM{'x_Ship_To_State'}|$FORM{'x_Ship_To_Zip'}|~;
#print TQUE qq~$TTShip|$ShipType|$TTax|$TTotal|$OrderDesc|$OrderString|\n~;
#close(TQUE);

  &PrintFoot(pay_page) if ($website ne '');
exit;
}

#####
sub ResetCartShip
{

if (-e "$CartDir/$CartID.txt") { unlink ("$CartDir/$CartID.txt"); }

}

sub ResetCart
{
&PrintHead(ship_page) if ($website ne '');
if (-e "$CartDir/$CartID.txt") { unlink ("$CartDir/$CartID.txt"); }

# was it getting anything useful from setup.txt except $Back, which i have replaced?
#open(INFO,"setup.txt");
#while (<INFO>)
# {
# $Line = $_;
# chop($Line);
# ($MID,$Us,$Pa,$Comp,$CAddr,$Cit,$Sta,$Zp,$Tax,$Em,$Site,$Home,$Back,$PHead,$PFoot) = split(/\|/,$Line);
# }
#close(INFO);
$Back = "http://$ENV{HTTP_HOST}$ENV{SCRIPT_NAME}?Dept=$FORM{Dept}&CartID=$CartID";

print qq~
<!-- sub ResetCart-->
<br><hr width="400" align="center"><p align="center">Your Cart Is Now Empty<br><br>
<a href="$Back" $link_tag><img src="$ImageAddr/continue.gif" alt="Continue Shopping" border="0"></a></p>
<hr width="400" align="center">
~;
&PrintFoot(ship_page) if ($website ne '');
}


#####

sub PrintError
{
print qq~
<br>
<hr width="400" align="center">
<p align="center">$ErrorMessage</p><hr width="400" align="center">
~;

  &PrintFoot if ($website ne '');
}

#####

sub DeptList
{
my $dept;
my @LINES;

  unless ($dbh)
  {  $dbh = &OpenSQL(purecart);  }

my $sql_st = "SELECT DISTINCT(number), dept FROM departments WHERE website='$website' ORDER BY dept";
my $sth = $dbh->prepare($sql_st);
$sth->execute()
  or die "can't execute the query: " . $sth->errstr; 
  while (my ($number, $dept) = $sth->fetchrow_array)
  {push (@LINES, "$number|$dept");}
$sth->finish;

return @LINES;
}

#####
#####

sub PrintSearch
{
  &PrintHead if ($website ne '');

print qq~
<div align="center">
<table border="0" width="650" cellpadding="3" cellspacing="3" align="center">
<tr><td align="right" width="350">
<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="Referer" value="$Referer">
<div align="right"><font size="1" face="arial"><strong>Browse: </strong></font><select name="Dept">
~;

  @LINES = &DeptList;

 foreach $line (@LINES)
  {
  ($Dept,$Name) = split(/\|/,$line);
  if ($Name ne "")
   {
    if($FORM{'Dept'} eq "$Dept")
     {
     print "<option value=\"$Dept\" selected>$Name</option>";
     } else {
     print "<option value=\"$Dept\">$Name</option>";
     }
    }
  }

print qq~
</select> <input type="image" name="SearchDept" src="$ImageAddr/go.gif" alt="Go" border="0"></div></form></td>
<td align="left" width="300">
<form action="$CartAction" method="post" $form_tag>
<input type="hidden" name="CartID" value="$CartID">
<input type="hidden" name="Referer" value="$Referer">
<div align="left"><font size="1" face="arial"><strong>Search: </strong></font><input name="KeyWord" size="12" maxlength="25"> <input type="image" name="SearchKey" src="$ImageAddr/go.gif" border="0"></div></form></td></tr>
~;

 $Count = 1;
 $IItems = "0";
 open(DATA,$DataBase);
 @ROWS = <DATA>;
 close(DATA);
 foreach $row (@ROWS)
  {
  ($Dept,$Item,$Name,$Desc,$Opt1,$Opt2,$Opt3,$Weight,$Price,$Ship,$Url,$Image,$Tax,$Invt) = split(/\|/,$row);
  $SLine   = $row;
  $TName   = $Name;
  $TDesc   = $Desc;
  $SLine   =~ tr/a-z/A-Z/;
  $InKey   = "$KeyWord";
  $InKey   =~ tr/a-z/A-Z/;
  if ($SLine =~ /$InKey/)
   {
   $IItems++;
   print qq~
   <tr><td colspan="2"><p><a href="$CartAction?IT=$Item&CartID=$CartID" $link_tag><font face="arial">$Name</font></a><br>
   <font face="arial" size="1"><strong>$Item - $Desc</strong></font></p></td></tr>
   ~;
   $Count++;
   }
  }
print "</table></div><br>";
if($IItems eq "0") { &NoMatch; }
&PrintFoot if ($website ne '');
}

#####

sub NoMatch
{
 print "<hr width=\"500\" align=\"center\"><p align=\"center\"><font face=\"arial\">\n";
 print "Sorry, no match was found for <b>$KeyWord</b><br> Please try another keyword, part of a keyword or item number.</font></p><hr width=\"500\" align=\"center\"><br><br><br><br>";
 &PrintFoot if ($website ne '');
 exit;
}