<?php
/* ----------------------------------------------------------------------
 * PHP implementation of TPC-W
 * 
 * Copyright (c) 2004, Jan Wieck
 * 
 * Permission to use, copy, modify, and distribute this software and
 * its documentation for any purpose, without fee, and without a
 * written agreement is hereby granted, provided that the above
 * copyright notice and this paragraph and the following two
 * paragraphs appear in all copies.
 * 
 * IN NO EVENT SHALL THE AUTHORS BE LIABLE TO ANY PARTY FOR DIRECT,
 * INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES,
 * INCLUDING LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE
 * AND ITS DOCUMENTATION, EVEN IF THE AUTHORS HAVE BEEN ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 * 
 * THE AUTHORS SPECIFICALLY DISCLAIM ANY WARRANTIES, INCLUDING, BUT
 * NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
 * FITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED
 * HEREUNDER IS ON AN "AS IS" BASIS, AND THE AUTHORS HAVE NO
 * OBLIGATIONS TO PROVIDE MAINTENANCE, SUPPORT, UPDATES,
 * ENHANCEMENTS, OR MODIFICATIONS.
 *
 * buy_confirm.php -
 *
 * Buy Confirm Web Interaction according TPC-W v1.8 2.7
 * ----------------------------------------------------------------------
 */
	include('common.inc');

	/*
	 * The Buy Confirm dialog is only reachable via the
	 * Buy Request page, meaning we must have a c_addr_id
	 * in the session data.
	 */
	if (isset($_SESSION['sc_shopping_id']))
	{
		if (!isset($_SESSION['c_addr_id']))
		{
			tpcw_error("Request error - c_addr_id not found");
		}

		$sc_shopping_id = $_SESSION['sc_shopping_id'];
		$sc_date_sec	= $_SESSION['sc_date_sec'];
		$scl_i_id		= $_SESSION['scl_i_id'];
		$scl_qty		= $_SESSION['scl_qty'];
		$scl_cost		= $_SESSION['scl_cost'];
		$scl_title		= $_SESSION['scl_title'];
		$scl_backing	= $_SESSION['scl_backing'];
		$scl_srp		= $_SESSION['scl_srp'];

		$sc_sub_total	= $_SESSION['sc_sub_total'];
		$sc_tax			= $_SESSION['sc_tax'];
		$sc_ship_cost	= $_SESSION['sc_ship_cost'];
		$sc_total		= $_SESSION['sc_total'];

		$c_id			= $_SESSION['c_id'];
		$c_fname		= $_SESSION['c_fname'];
		$c_lname		= $_SESSION['c_lname'];
		$c_discount		= $_SESSION['c_discount'];
		$c_addr_id		= $_SESSION['c_addr_id'];
		$co_id			= $_SESSION['co_id'];

		if (sizeof($scl_i_id) == 0)
		{
			tpcw_error("Shopping Cart is empty.");
		}
	}
	else
	{
		tpcw_error("No Shopping Cart found - Timeout?");
	}

	/*
	 * Check that the "user" filled in the credit card information
	 */
	$now = time();
	$cx_type		= $vars['CC_TYPE'];
	$cx_cc_num		= $vars['CC_NUMBER'];
	$cx_cc_name		= $vars['CC_NAME'];
	$cx_expiration	= @ date("Y-m-d", strtotime($vars['CC_EXPIRATION']));

	if ($cx_type == "" || $cx_cc_num == "" ||
		$cx_cc_name == "" || $cx_expiration == "")
	{
		tpcw_error("Incomplete Credit Card information");
	}

	/*
	 * If the user supplied a shipping address, use that. Otherwise
	 * use the customer address for both, billing and shipping.
	 *
	 * According to 2.7.3.2 this has to happen in a single DB
	 * transaction.
	 */
	db_connect();
	db_start_transaction(false);

	$addr_street1	= $vars['STREET1'];
	$addr_street2	= $vars['STREET2'];
	$addr_city		= $vars['CITY'];
	$addr_state		= $vars['STATE'];
	$addr_zip		= $vars['ZIP'];
	$co_name		= $vars['COUNTRY'];

	if ($addr_street1 != "" || $addr_street2 != "" || $addr_city != "" ||
		$addr_state != "" || $addr_zip != "" || $co_name != 0)
	{
		$row = db_store_address($addr_street1, $addr_street2, 
				$addr_city, $addr_state, $addr_zip, $co_name);
		$o_ship_addr_id = $row[0];
		$co_id = $row[1];
	}
	else
	{
		$o_ship_addr_id = $c_addr_id;
	}

	db_commit_transaction();

	/*
	 * Store the order, order lines and the payment data.
	 */
	db_start_transaction(false);

	$o_ship_type	= $vars['SHIPPING'];
	$o_ship_date	= date("Y-m-d", $now + tpcw_rand(0, 7 * 86400));
	$o_bill_addr_id	= $c_addr_id;
	$o_id = db_new_order($c_id, $sc_sub_total, $sc_tax, $sc_total,
			$o_ship_type, $o_ship_date, $o_bill_addr_id, $o_ship_addr_id);

	$keys = array_keys($scl_i_id);
	while (list($idx, $key) = each($keys))
	{
		$ol_comments = tpcw_astring(20, 100);
		db_store_order_line($key, $o_id, $scl_i_id[$key],
				$scl_qty[$key], $c_discount, $ol_comments);
	}

	$cx_xact_amt	= $sc_total;
	$cx_xact_date	= date("Y-m-d", $now);
	$cx_o_id		= $o_id;
	$cx_co_id		= $co_id;

	/* TODO: This ID must be obtained from the PGE */
	$cx_auth_id		= tpcw_astring(15, 15);

	db_store_cc_xact($cx_o_id, $cx_type, $cx_cc_num, $cx_cc_name,
			$cx_expiration, $cx_auth_id, $cx_xact_amt, $cx_xact_date,
			$cx_co_id);

	db_commit_transaction();
	db_disconnect();

	/*
	 * We have successfully stored the order. Clear out the
	 * shopping cart.
	 */
	// session_destroy();
	// @ session_start();
	tpcw_session_restart();

	db_connect();
	$_SESSION['c_id']		= $c_id;
	$_SESSION['c_fname']	= $c_fname;
	$_SESSION['c_lname']	= $c_lname;
	$_SESSION['sc_c_fname']	= $c_fname;
	$_SESSION['sc_c_lname']	= $c_lname;
	session_register('c_id', 'c_fname', 'c_lname', 'sc_c_fname', 'sc_c_lname');
	db_disconnect();
?>

<html>
<head>
  <title>TPC-W Buy Confirm</title>
  <?php include('tpcw_style.inc'); ?>
</head>

<body bgcolor="#ffffff">
  <center>
	<h1>TPC Web Commerce Benchmark (TPC-W)</h1>
	<hr>
	<h2>Buy Confirm Page</h2>

	<table border="0" width="80%">
	<tr>
	  <td>
	  <hr>
	  <h2>Order Information:</h2>

	  <table border="1">
	  <tr>
		<th align="left"><b>Qty:</b></th>
		<th align="left"><b>Product:</b></th>
	  </tr>
	  <?php 
		  $keys = array_keys($scl_i_id);
		  while (list($idx, $key) = each($keys))
		  {
			  echo "<tr>";
			  echo "<td align=\"right\" valign=\"top\">" . $scl_qty[$key] . "</td>";
			  echo "<td align=\"left\" valign=\"top\" nowrap><p>";
			  echo "<i>" . $scl_title[$key] . "</i> - Backing: " . $scl_backing[$key];
echo " (ID:" . $scl_i_id[$key] . ") ";
			  echo "<br>";
			  echo "SRP. $" . $scl_srp[$key] . ", ";
			  echo "<font color=\"#dd0000\">Your Price: $" . $scl_cost[$key] . "</font>";
			  echo "</p></td>";
			  echo "</tr>\n";
		  }
	  ?>
	  </table>

	  <br>
	  <h2>Your Order has been processed.</h2>

	  <table border="0">
	    <tr>
		  <td align="left" nowrap>
		    <b>Subtotal with discount (<?= (integer)($c_discount * 100.0) ?>%):&nbsp;</b>
	      </td>
		  <td align="right" nowrap>
			<b>$<?php printf("%.2f", $sc_sub_total); ?></b>
	      </td>
	    </tr>
	    <tr>
		  <td align="left" nowrap>
		    <b>Tax:&nbsp;</b>
	      </td>
		  <td align="right" nowrap>
			<b>$<?php printf("%.2f", $sc_tax); ?></b>
	      </td>
	    </tr>
	    <tr>
		  <td align="left" nowrap>
		    <b>Shipping &amp; Handling:&nbsp;</b>
	      </td>
		  <td align="right" nowrap>
			<b>$<?php printf("%.2f", $sc_ship_cost); ?></b>
	      </td>
	    </tr>
	    <tr>
		  <td align="left" nowrap>
		    <b>Total:&nbsp;</b>
	      </td>
		  <td align="right" nowrap>
			<b><u>$<?php printf("%.2f", $sc_total); ?></u></b>
	      </td>
	    </tr>
	  </table>

	  <br>
	  <h2>Order Number: <?= $o_id ?></h2>
	  <br>
	  <h1>Thank you for shopping at TPC-W</h1>
	  <br>
	  <br>

	  </td>
	</tr>

	</table>

	<table border="0" cellpadding="0" cellspacing="0">
	  <tr>
	    <td valign="top">
		  <a href="http://<?= $_SERVER['SERVER_NAME'] ?>/tpcw/search_request.php">
		    <img border="0" src="<?= $image_pref ?>/search.gif">
		  </a>
		</td>
	    <td valign="top">
		  <a href="http://<?= $_SERVER['SERVER_NAME'] ?>/tpcw/home.php">
		    <img border="0" src="<?= $image_pref ?>/home.gif">
		  </a>
		</td>
	  </tr>
	</table>

	</form>

  </center>
<?php echo "<!-- TPCW-MAGIC-PAGE-END -->\n"; ?>
</body>
</html>