\n"; } print ""; $table_width = "100%"; } } sub navigation_bar2 { $extra_forms = 0; if ($navigation_bar2) { open(NAVBAR,"$navigation_bar2"); @nav_bar_html=; close(NAVBAR); print "\n"; foreach (@nav_bar_html) { print "$_\n"; while ( $_ =~ /(
"; } } sub quote_strip { $q = """; $_ = $_[0]; s/(<)([^>|\n]*)(")([^>|\n]*)(>)/$1$2$4$5/gi while (/(<)([^>|\n]*)(")([^>|\n]*)(>)/); s/(<)([^>|\n]*)($q)([^>|\n]*)(>)/$1$2$4$5/gi while (/(<)([^>|\n]*)($q)([^>|\n]*)(>)/); return $_; } sub get_sales_tax { $sn = 0; foreach (@state) { if ( $state[$sn] eq $state ) { $tax_rate = $tax[$sn]; last; } $sn++; } } sub address_table { print "$lang[2] ($lang[3]) $lang[4] $lang[90] $lang[5] $lang[6] $lang[7] $lang[8] $lang[9]
; close(FILE); foreach $ship_db_line (@ship_db_lines) { while ($ship_db_line =~ /(\n|\r|\s)$/) { chop($ship_db_line); } ($db_pounds,$db_cost) = split(/\|/,$ship_db_line); if ( ($ship_db_line =~ /\|/) && ($ship_total >= $db_pounds) ) { $price[$an] = "$db_cost"; } } } } sub calculate_fulltotal { $total = 0; $nontaxable = 0; $noshipping = 0; $ship_total = 0; $n = 0; chop($items[0]); ($a,$invoice,$state,$ship_method,$comments2,$coupon_amount,$coupon_number) = split(/$delimiter2/, $items[0]); foreach $item (@items) { if ( ( $n == 0 ) || ( $n == 1 ) ) { $n++; next; } @stuff = split(/$delimiter2/,$item); @customs = (@stuff); for($i=1;$i<=5;$i++) { shift(@customs); } $quantity = $stuff[4]; $price_calc = $stuff[1]; &price_calc; $item_total = $each * $stuff[4]; if ($item =~ /\#non.*taxable\#/i) { $nontaxable += $item_total; } if ($item =~ /\#noshipping\#/i) { $noshipping += $item_total; } $total += $item_total; $ship_total += $stuff[2] * $stuff[4]; $n++; } if ( $coupon_amount ) { &coupon_amount; } &webstore_discount; $total -= $discount_amount; if ( $nontaxable ) { $nontaxable -= $discount_amount; } $taxes = 0; if ( $state ) { &get_sales_tax; $taxes = ($total - $nontaxable) * $tax_rate; $taxes /= 100; $taxes =~ /(.*)(\.)(\d)(\d)(\d)/; if ( $5 >= 5 ) { $taxes += .005; } } if ( $ship_allow ) { &ship_calc; } $total += $taxes if ( $state ); $total += $ship_total if ( $ship_allow ); $total = sprintf("$decimals","$total"); $total =~ s/ //g; } sub webstore_discount { if ($webstore_discount) { $disc_items_total = 0; $discount_amount = 0; ($disc_type,$disc_start,$disc_percent,@multi_disc) = split(/$delimiter2/,$webstore_discount); $disc_percent2 = $disc_percent / 100; if ($disc_type eq "items") { $dn = 0; foreach $disc_count (@items) { if ( $dn < 2 ) { $dn++; next; } ($trash,$trash,$trash,$trash,$disc_items,$first_custom) = split(/$delimiter2/,$disc_count); if ( ( $lang[107] ) && ( $first_custom ne "$lang[107]" ) ) { $disc_items_total += $disc_items; } $dn++; } unshift(@multi_disc,$disc_start,$disc_percent); while (@multi_disc) { ($a) = shift(@multi_disc); ($b) = shift(@multi_disc); if ( $disc_items_total >= $a ) { $disc_percent = $b; $discount_amount = $total * ($b/100); $discount_amount = sprintf("$decimals",$discount_amount); } } } if ($disc_type eq "subtotal") { unshift(@multi_disc,$disc_start,$disc_percent); while (@multi_disc) { ($a) = shift(@multi_disc); ($b) = shift(@multi_disc); if ( $total >= $a ) { $disc_percent = $b; $discount_amount = $total * ($b/100); $discount_amount = sprintf("$decimals",$discount_amount); } } } } } sub add_new_item_to_cart { if ( $FORM{'name'} =~ /^(multi-items)$/i ) { for($mi=1;$mi<=$customs;$mi++) { if ( $FORM{"multi-item$mi"} ) { ($FORM{'name'},$FORM{'price'},$FORM{'sh'},$FORM{'img'},@multi_custom) = split(/$delimiter2/,$FORM{"multi-item$mi"}); $FORM{'quantity'} = $FORM{"quantity$mi"}; &fix_quantity; &limited_item_check; print CART "$FORM{'name'}$delimiter$FORM{'price'}$delimiter$FORM{'sh'}$delimiter$FORM{'img'}$delimiter$FORM{'quantity'}"; for($ci=0;$ci<$customs;$ci++) { print CART "$delimiter$multi_custom[$ci]"; } print CART "\n"; } } } else { &limited_item_check; if ( $FORM{'img2'} ) { $img_temp = "::$FORM{'img2'}"; } else { $img_temp = ""; } print CART "$FORM{'name'}$delimiter$FORM{'price'}$delimiter$FORM{'sh'}$delimiter$FORM{'img'}$img_temp$delimiter$FORM{'quantity'}"; for($ci=1;$ci<=$customs;$ci++) { print CART "$delimiter$FORM{\"custom$ci\"}"; } print CART "\n"; } } sub limited_item_check { $limited_dir = "$vars"; $a = ""; until ($a eq "/" || $limited_dir eq "") { $a = chop($limited_dir); } if (-e "$limited_dir/limited.dat") { open (LIMITED, "$limited_dir/limited.dat"); if ($flock) { flock(LIMITED, 2); } @limited = ; if ($flock) { flock(LIMITED, 8); } close (LIMITED); foreach $limited_item (@limited) { if ($limited_item =~ /\n$/) { chop($limited_item); } ($limit_name,$limit_quantity) = split(/$delimiter2/,$limited_item); if ( ($FORM{'name'} eq "$limit_name") && ($limit_quantity < 1) ) { $FORM{'name'} = "$FORM{'name'}"; $FORM{'price'} = "0"; $FORM{'sh'} = ""; $FORM{'img'} = ""; $FORM{'quantity'} = "1"; for($ci=1;$ci<=$customs;$ci++) { $FORM{"custom$ci"} = ""; $multi_custom[$ci] = ""; } $FORM{"custom1"} = "$lang[107]"; $multi_custom[1] = "$lang[107]"; last; } elsif ( ($FORM{'name'} eq "$limit_name") && ($limit_quantity < $FORM{'quantity'}) ) { $FORM{'quantity'} = $limit_quantity; } } } } sub limited_item_deincrement { foreach $limited_item (@limited) { if ($limited_item =~ /\n$/) { chop($limited_item); } ($limit_name,$limit_quantity) = split(/$delimiter2/,$limited_item); if ( $stuff[0] eq "$limit_name" ) { if ( $stuff[4] < 1 ) { $stuff[4] = 1; } $limit_quantity -= $stuff[4]; if ( $limit_quantity < 0 ) { $limit_quantity = "0"; } $limited_item = "$limit_name|$limit_quantity"; $deincrement = 1; last; } } } sub fix_quantity { while ( $FORM{'quantity'} =~ /[a-zA-Z]/ ) { chop($FORM{'quantity'}); } if ( !$FORM{'quantity'} ) { $FORM{'quantity'} = 1; } if ( $FORM{'quantity'} < 0 ) { $FORM{'quantity'} = 1; } if ( $fix_int_quantity != 1 ) { $FORM{'quantity'} = int($FORM{'quantity'}); } } sub get_shoppers_items { if ( $virtual_browser_cookie ) { $shopper_id = "$virtual_browser_cookie"; } else { if ( $ip_or_cookie == 0 ) { $shopper_id = $ENV{'REMOTE_HOST'}; if (!-e "$path1/$shopper_id$ext") { &increment_invoice; } } elsif (-e "$path1/$ENV{'REMOTE_HOST'}$ext") { $shopper_id = $ENV{'REMOTE_HOST'}; } else { if (&GetCookies("$cookie_name2") && (-e "$path1/$Cookies{$cookie_name2}$ext") ) { $shopper_id = "$Cookies{$cookie_name2}"; } else { if (!$got_cookie) { &increment_invoice; &SetCookies($cookie_name2,$invoice); $shopper_id = $invoice; $got_cookie = 1; } } } } open(CART,"$path1/$shopper_id$ext"); @items = ; close CART; } sub increment_invoice { $max_size_invoice_file = 10; open(INVOICE,"$path2"); if ($flock) { flock(INVOICE, 2); } @invoice = ; @invoice = sort { $a <=> $b } @invoice; $invoice = $invoice[@invoice-1]; $invoice++; if ( @invoice > $max_size_invoice_file ) { until(@invoice < ($max_size_invoice_file / 2) ) { shift(@invoice); } $path2 = &untaint("$path2"); open(INVOICE,">$path2"); foreach (@invoice) { print INVOICE "$_"; } } else { $path2 = &untaint("$path2"); open(INVOICE,">>$path2"); if ( $invoice[@invoice-1] !~ /\n$/ ) { print INVOICE "\n"; } } print INVOICE "$invoice\n"; if ($flock) { flock(INVOICE, 8); } close(INVOICE); } sub cookie_failure { if (!-e "$path1/$ENV{'REMOTE_HOST'}$ext") { $temp_path1 = &untaint("$path1/$FORM{'convert_cookie_to_ip'}$ext"); $temp_path2 = &untaint("$path1/$ENV{'REMOTE_HOST'}$ext"); rename ("$temp_path1", "$temp_path2"); } } sub GetCookies { local(@ReturnCookies) = @_; local($cookie_flag) = 0; local($cookie,$value); if ($ENV{'HTTP_COOKIE'}) { if ($ReturnCookies[0] ne '') { foreach (split(/; /,$ENV{'HTTP_COOKIE'})) { ($cookie,$value) = split(/=/); foreach $char (@Cookie_Decode_Chars) { $cookie =~ s/$char/$Cookie_Decode_Chars{$char}/g; $value =~ s/$char/$Cookie_Decode_Chars{$char}/g; } foreach $ReturnCookie (@ReturnCookies) { if ($ReturnCookie eq $cookie) { $Cookies{$cookie} = $value; $cookie_flag = "1"; } } } } else { foreach (split(/; /,$ENV{'HTTP_COOKIE'})) { ($cookie,$value) = split(/=/); foreach $char (@Cookie_Decode_Chars) { $cookie =~ s/$char/$Cookie_Decode_Chars{$char}/g; $value =~ s/$char/$Cookie_Decode_Chars{$char}/g; } $Cookies{$cookie} = $value; } $cookie_flag = 1; } } return $cookie_flag; } sub SetCookies { local(@cookies) = @_; local($cookie,$value,$char); while( ($cookie,$value) = @cookies ) { foreach $char (@Cookie_Encode_Chars) { $cookie =~ s/$char/$Cookie_Encode_Chars{$char}/g; $value =~ s/$char/$Cookie_Encode_Chars{$char}/g; } print 'Set-Cookie: ' . $cookie . '=' . $value . ';'; if ($Cookie_Exp_Date) { print ' expires=' . $Cookie_Exp_Date . ';'; } if ($Cookie_Path) { print ' path=' . $Cookie_Path . ';'; } if ($Cookie_Domain) { print ' domain=' . $Cookie_Domain . ';'; } if ($Secure_Cookie) { print ' secure'; } print "\n"; shift(@cookies); shift(@cookies); } } sub SetCookieExpDate { @date = localtime(time); foreach (@date) { if ( $_ < 10 ) { $_ = "0" . $_; } } $date[4] = (Jan,Feb,Mar,Apr,May,Jun,Jul,Aug,Sep,Oct,Nov,Dec)[$date[4]]; $date[6] = (Sun,Mon,Tue,Wed,Thu,Fri,Sat)[$date[6]]; if ( $date[5] < 100 ) { if ( $date[5] > 97 ) { $date[5] = "19" . $date[5]; } else { $date[5] = "20" . $date[5]; } } if ( $date[5] < 100 ) { $date[5] = "20" . "$date[5]"; } if ( ( $date[5] >= 100 ) && ( $date[5] < 2000 ) ) { $date[5] += 1900; } $date[5]++; $Cookie_Exp_Date = "$date[6] $date[4] $date[3] $date[2]:$date[1]:$date[0] $date[5] GMT"; } sub SetCookieExpDate2 { @date = localtime(time); foreach (@date) { if ( $_ < 10 ) { $_ = "0" . $_; } } $date[4] = (Jan,Feb,Mar,Apr,May,Jun,Jul,Aug,Sep,Oct,Nov,Dec)[$date[4]]; $date[6] = (Sun,Mon,Tue,Wed,Thu,Fri,Sat)[$date[6]]; if ( $date[5] < 100 ) { if ( $date[5] > 97 ) { $date[5] = "19" . $date[5]; } else { $date[5] = "20" . $date[5]; } } if ( $date[5] < 100 ) { $date[5] = "20" . "$date[5]"; } if ( ( $date[5] >= 100 ) && ( $date[5] < 2000 ) ) { $date[5] += 1900; } $Cookie_Exp_Date = "$date[6] $date[4] $date[3] $date[2]:$date[1]:$date[0] $date[5]"; } sub SetCookieExpDate3 { $date_temp = `date`; if ($date_temp =~ /\n$/) { chop($date_temp); } @date_temp = split(/\s/,$date_temp); if ( $date_temp[2] eq "" ) { $date_temp[6]++; $Cookie_Exp_Date = "$date_temp[0]" . ", " . "$date_temp[3]" . "-" . "$date_temp[1]" . "-" . "$date_temp[6]" . " " . "$date_temp[4]" . " " . "GMT"; } else { $date_temp[5]++; $Cookie_Exp_Date = "$date_temp[0]" . ", " . "$date_temp[2]" . "-" . "$date_temp[1]" . "-" . "$date_temp[5]" . " " . "$date_temp[3]" . " " . "GMT"; } } sub SetCompressedCookies { local($cookie_name,@cookies) = @_; local($cookie,$value,$cookie_value); while ( ($cookie,$value) = @cookies ) { foreach $char (@Cookie_Encode_Chars) { $cookie =~ s/$char/$Cookie_Encode_Chars{$char}/g; $value =~ s/$char/$Cookie_Encode_Chars{$char}/g; } if ($cookie_value) { $cookie_value .= '&' . $cookie . '::' . $value; } else { $cookie_value = $cookie . '::' . $value; } shift(@cookies); shift(@cookies); } &SetCookies("$cookie_name","$cookie_value"); } sub GetCompressedCookies { local($cookie_name,@ReturnCookies) = @_; local($cookie_flag) = 0; local($ReturnCookie,$cookie,$value); if (&GetCookies($cookie_name)) { if ($ReturnCookies[0] ne '') { foreach (split(/&/,$Cookies{$cookie_name})) { ($cookie,$value) = split(/::/); foreach $char (@Cookie_Decode_Chars) { $cookie =~ s/$char/$Cookie_Decode_Chars{$char}/g; $value =~ s/$char/$Cookie_Decode_Chars{$char}/g; } foreach $ReturnCookie (@ReturnCookies) { if ($ReturnCookie eq $cookie) { $Cookies{$cookie} = $value; $cookie_flag = 1; } } } } else { foreach (split(/&/,$Cookies{$cookie_name})) { ($cookie,$value) = split(/::/); foreach $char (@Cookie_Decode_Chars) { $cookie =~ s/$char/$Cookie_Decode_Chars{$char}/g; $value =~ s/$char/$Cookie_Decode_Chars{$char}/g; } $Cookies{$cookie} = $value; } $cookie_flag = 1; } delete($Cookies{$cookie_name}); } return $cookie_flag; } sub check_cookie { if ( $ip_or_cookie == 1 ) { &GetCookies("$cookie_name2"); $shopper_id = "$Cookies{$cookie_name2}"; if ( ( (!$shopper_id) || (!-e "$path1/$shopper_id$ext") ) && (!-e "$path1/$ENV{'REMOTE_HOST'}$ext") ) { &cookie_failure; } } } sub footer { print " Use of the Dansie Shopping Cart software is subject to the terms of the license agreement. By using this software you signify that you have read the license agreement and accept its terms. Your purchase of a Dansie Shopping Cart license entitles you to one (1) working copy of the script per license. You may NOT copy, reproduce, resell, or give away copies of the script in any way shape or form without first purchasing an additional license. You may make one back up copy should something happen to the working copy on your host. You may not make any modifications to the Dansie Shopping Cart script except as instructed in the ReadMe. The small text link and credit to http://www.dansie.net must remain in the script and appear at the bottom of the various pages of shopping cart script. Violation of this license agreement may void your right to technical support and subject you to legal action. "; exit; } sub untaint { if ( $_[0] ne "" ) { $_[0] =~ /^(.+)$/; $a = $1; } else { $a = ""; } return $a; } sub required_fields { if ( ( $reqired_field_prefs =~ /(name)/i && (!$FORM{'name'}) ) || ( $reqired_field_prefs =~ /(company)/i && !$FORM{'company'} && $use_company_name_field ) || ( $reqired_field_prefs =~ /(address)/i && (!$FORM{'address'}) ) || ( $reqired_field_prefs =~ /(city)/i && (!$FORM{'city'}) ) || ( $reqired_field_prefs =~ /(state)/i && (!$FORM{'state'}) && $use_state ) || ( $reqired_field_prefs =~ /(zip)/i && (!$FORM{'zip'}) && $use_zipcode_fields ) || ( $reqired_field_prefs =~ /(country)/i && (!$FORM{'country'}) ) || ( $reqired_field_prefs =~ /(email)/i && (!$FORM{'email'}) ) || ( $reqired_field_prefs =~ /(phone)/i && (!$FORM{'phone'}) ) || ( $reqired_field_prefs =~ /(comments)/i && (!$FORM{'comments'}) ) ) { return 0; } else { return 1; } } sub required_fields2 { if ( ( $reqired_field_prefs =~ /(name)/i && (!$FORM{'name2'}) ) || ( $reqired_field_prefs =~ /(company)/i && !$FORM{'company2'} && $use_company_name_field ) || ( $reqired_field_prefs =~ /(address)/i && (!$FORM{'address2'}) ) || ( $reqired_field_prefs =~ /(city)/i && (!$FORM{'city2'}) ) || ( $reqired_field_prefs =~ /(state)/i && (!$FORM{'state2'}) && $use_state ) || ( $reqired_field_prefs =~ /(zip)/i && (!$FORM{'zip2'}) && $use_zipcode_fields ) || ( $reqired_field_prefs =~ /(country)/i && (!$FORM{'country2'}) ) || ( $reqired_field_prefs =~ /(email)/i && (!$FORM{'email2'}) ) || ( $reqired_field_prefs =~ /(phone)/i && (!$FORM{'phone2'}) ) ) { return 0; } else { return 1; } } sub pass_standard_secure_variables { if ( $MerchantID =~ /$delimiter2/ ) { ($MerchantID,$cambist_exchange_rate) = split(/$delimiter2/,$MerchantID); $total *= $cambist_exchange_rate; } print "; close FILE; $current_var = 0; @processor_data2 = (); foreach (@processor_data) { while ($_ =~ /(\n|\r|\s)$/) { chop($_); } if ( $_ =~ /(\s?)(\d+)(.*)(-->)(.*)/ ) { $processor_data2[$2] = "$5"; $current_var = $2; } else { $processor_data2[$current_var] .= " $_"; } } (@processor_data) = (@processor_data2); $path5 = "$processor_data[3]"; if ($processor_data[4]) { $MerchantID = "$processor_data[4]"; } for($secure_field_array=20;$secure_field_array<$max_secure_field_array;$secure_field_array++) { if ( $processor_data[$secure_field_array] ) { $temp = $secure_field_array - 19; ($processor_data[$secure_field_array],$custom_processor_field[$temp]) = split(/\|/,"$processor_data[$secure_field_array]"); if ( $custom_processor_field[$temp] eq "#split_name#" ) { if ($FORM{'name2'}) { $old_temp_name = "$FORM{'name2'}"; } ($custom_processor_field[$temp],$FORM{'name2'}) = split(/ /,$FORM{'name2'}); if (!$FORM{'name2'}) { $custom_processor_field[$temp] = "$old_temp_name"; } } } } @secure_field = ("", "$processor_data[5]", "$processor_data[18]", "$processor_data[6]", "$processor_data[19]", "", "", "", "$processor_data[8]", "$processor_data[9]", "$processor_data[7]", "$processor_data[10]", "$processor_data[11]", "$processor_data[12]", "$processor_data[13]", "$processor_data[14]", "$processor_data[15]", "$processor_data[16]", "$processor_data[17]", ""); for($secure_field_array=20;$secure_field_array<$max_secure_field_array;$secure_field_array++) { if ( $processor_data[$secure_field_array] ) { $temp = $secure_field_array - 19; push(@secure_field,"$processor_data[$secure_field_array]"); } } if ($something eq "something") { &diagnostics; print "Content-type: text/html\n\n"; print "Congratulations! You've successfully uploaded the Dansie Shopping Cart and chmoded the permissions 755 or better, but the cart can't find your lang.dat file at system path: \"$lang_path\" Make sure lang.dat is uploaded into the same directory as vars.dat \n"; } print "\n"; print " \n\n"; } if (!$force_no_script) { print "\n"; } if (!$force_no_script) { print "\n"; } else { print "\n"; } if (!$force_no_script) { print "\n\n"; } print " $lang[100] \n"; if (!$force_no_script) { print " \n\n"; } print "\n"; print ""; exit; } sub i_check { &calculate_fulltotal; $total =~ s/ //g; if ( $exchange_rate ) { $total /= $exchange_rate; } $n = 0; $memo = ""; foreach $item (@items) { if ( $n > 1 ) { ($a,$trash) = split(/$delimiter2/,$item); $memo = "$memo$a,"; } $n++; } chop($memo); $biz_temp = "$bizname"; $biz_temp =~ s/<([^>]|\n)*>//g; $memo = "$biz_temp - $memo"; $memo =~ s/ /\+/g; $memo =~ s/(\&)/and/g; $memo =~ s/(\=)/is/g; if ( $option4 =~ /^(ValidCheck)/i ) { $temp_url = "$ValidCheck?VID=$i_check_id\&TA=$total\&Memo=$memo"; } else { $temp_url = "$i_check?id=$i_check_id\&a=$total\&url=$i_checkApprovedURL\&memo=$memo&$icheck_currency"; } $biz_temp = "$bizname"; $biz_temp =~ s/<([^>]|\n)*>//g; print "Content-type: text/html\n\n"; print " $biz_temp - $lang[71] \n$meta_tag\n "; exit; } sub non_post_secure_server { $biz_temp = "$bizname"; $biz_temp =~ s/<([^>]|\n)*>//g; print "Content-type: text/html\n\n"; print " $biz_temp - $lang[71] \n$meta_tag\n "; exit; } sub check_duplicate_order { if ( $ip_or_cookie == 1 ) { &GetCookies("$cookie_name2"); $shopper_id = "$Cookies{$cookie_name2}"; if ( ( !-e "$path1/$shopper_id$ext" ) && (!-e "$path1/$ENV{'REMOTE_HOST'}$ext") ) { &list_items; exit; } } else { $shopper_id = "$ENV{'REMOTE_HOST'}"; if ( !-e "$path1/$shopper_id$ext" ) { &list_items; exit; } } } sub check_duplicate_order2 { if ( $ip_or_cookie == 1 ) { &GetCookies("$cookie_name2"); $shopper_id = "$Cookies{$cookie_name2}"; if ( ( !-e "$path1/$shopper_id$ext" ) && (!-e "$path1/$ENV{'REMOTE_HOST'}$ext") ) { if ( $path5 =~ /(\?atsbank)/i ) { $temp_path = "$path3"."?"."$ENV{'QUERY_STRING'}"; print "Location: $temp_path\n\n"; exit; } elsif ( $path5 =~ /(merchantonline\.com)/i && $FORM{'passthru1'} ) { $virtual_browser_cookie = "$FORM{'passthru1'}"; } else { &list_items; exit; } } } else { $shopper_id = "$ENV{'REMOTE_HOST'}"; if ( !-e "$path1/$shopper_id$ext" ) { if ( $path5 =~ /(\?atsbank)/i ) { $temp_path = "$path3"."?"."$ENV{'QUERY_STRING'}"; print "Location: $temp_path\n\n"; exit; } elsif ( $path5 =~ /(merchantonline\.com)/i ) { $shopper_id = "$FORM{'passthru1'}"; } else { &list_items; exit; } } } } sub order_tracking { if (!$tracking_dir) { $tracking_dir = "$vars"; $a = ""; until ($a eq "/" || $tracking_dir eq "") { $a = chop($tracking_dir); } $tracking_dir = "$tracking_dir/tracking.dat"; if (!-e "$tracking_dir") { $tracking_dir = ""; } } if ($tracking_dir) { &get_shoppers_items; if ( $items[1] =~ /\n$/ ) { chop($items[1]); } ($tracking[9],$tracking[1],$trash,$tracking[7],$trash,$coupon_amount,$coupon_number) = split(/$delimiter2/,$items[0]); ($tracking[2],$company_temp,$tracking[11],$tracking[12],$tracking[13],$tracking[14],$tracking[15],$tracking[4],$tracking[3]) = split(/$delimiter2/,$items[1]); if ($company_temp) { $tracking[2] .= " - $company_temp"; } &calculate_fulltotal; $tracking[5] = "$total"; $tracking[6] = "$ship_total"; $tracking[10] = "$taxes"; $tracking[10] = sprintf("$decimals","$tracking[10]"); $n = 0; $memo = ""; foreach $item (@items) { if ( $n > 1 ) { ($a,$trash,$trash,$trash,$temp_quantity) = split(/$delimiter2/,$item); (@temp) = split(/$delimiter2/,$item); $trash = shift(@temp); $trash = shift(@temp); $trash = shift(@temp); $trash = shift(@temp); $trash = shift(@temp); $temp_custom_options = join("::", @temp); while ( $temp_custom_options =~ /(::::)/ ) { $temp_custom_options =~ s/(::::)/::/g; } while ( $temp_custom_options =~ /(:)$/ ) { chop($temp_custom_options); } if ( $temp_custom_options =~ /(\n)$/ ) { chop($temp_custom_options); } $temp_custom_options =~ s/\,//g; if ($temp_custom_options) { $temp_custom_options = "::$temp_custom_options"; } $temp_lang = "$lang[107]"; if ( ($lang[107]) && ($item !~ /$temp_lang/) ) { if ($temp_quantity > 1) { $memo .= "$a(Quantity: $temp_quantity)$temp_custom_options,"; } else { $memo .= "$a$temp_custom_options,"; } } else { } } $n++; } chop($memo); $tracking[8] = "$memo"; open(TRACKING,">>$tracking_dir"); print TRACKING "$tracking[1]$delimiter$tracking[2]$delimiter$tracking[3]$delimiter$tracking[4]$delimiter$tracking[5]$delimiter$tracking[6]$delimiter$tracking[7]$delimiter$tracking[8]$delimiter$tracking[9]$delimiter$tracking[10]$delimiter$tracking[11]$delimiter$tracking[12]$delimiter$tracking[13]$delimiter$tracking[14]$delimiter$tracking[15]$delimiter$purchase_method2\n"; close(TRACKING); } } sub diagnostics { if ( (!$vars_security) && ($ENV{'QUERY_STRING'} eq "env") ) { print "Content-type: text/html\n\n"; print "\%ENV Environment variables: ; if ($flock) { flock(VARS, 8); } close(VARS); print "Content-type: text/html\n\n"; foreach $line (@vars) { chop($line); $line =~ s/\\n"; } exit; } } if ( (!$vars_security) && ($ENV{'QUERY_STRING'} eq "fix_vars") ) { if (!$find_vars_loop) { $find_vars_loop = 1; &cant_find_vars; open(VARS,"$vars"); if ($flock) { flock(VARS, 2); } @vars = ; if ($flock) { flock(VARS, 8); } close(VARS); &fix_vars; exit; } } if ( (!$vars_security) && ($ENV{'QUERY_STRING'} eq "count_vars") ) { if (!$find_vars_loop) { $find_vars_loop = 1; &cant_find_vars; open(VARS,"$vars"); if ($flock) { flock(VARS, 2); } @vars = ; if ($flock) { flock(VARS, 8); } close(VARS); &count_vars; exit; } } if ( (!$vars_security) && ($ENV{'QUERY_STRING'} eq "lang") ) { if (!$find_lang_loop) { $find_lang_loop = 1; &find_lang; open(LANG,"$lang_path"); @lang = ; close LANG; print "Content-type: text/html\n\n"; foreach $line (@lang) { chop($line); $line =~ s/\\n"; } exit; } } if ( (!$vars_security) && ($ENV{'QUERY_STRING'} eq "processor") ) { if (!$find_vars_loop) { $find_vars_loop = 1; &cant_find_vars; $processor_path = "$vars"; $a = ""; until ($a eq "/" || $processor_path eq "") { $a = chop($processor_path); } $processor_path = "$processor_path/processor.dat"; if (-e "$processor_path") { open(PRO,"$processor_path"); if ($flock) { flock(PRO, 2); } @processor = ; if ($flock) { flock(PRO, 8); } close(PRO); print "Content-type: text/html\n\n"; foreach $line (@processor) { chop($line); $line =~ s/\\n"; } } else { print "Content-Type: text/html\n\n"; print "No processor.dat file found at this location: $processor_path\n"; } exit; } } &cp; } sub parse_form_data { if ($ENV{'OS'}) { sysread(STDIN, $buffer, $ENV{'CONTENT_LENGTH'}); } else { read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'}); } @pairs = split(/&/, $buffer); foreach $pair (@pairs) { ($name, $value) = split(/=/, $pair); $value =~ tr/+/ /; $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; $value =~ s/~!/ ~!/g; $value =~ s/$delimiter2/ /g unless ( ($name =~ /^return$/i) || ($name =~ /^multi-item/i) || ($name =~ /($delimiter2)(merchant)($delimiter2)/i) ); if ($name eq "comments") { $value =~ s/\r//g; chop($value) while ( $value =~ /\n$/ ); $value =~ s/\n/$br_sub/g; } if ($name eq "return") { $value =~ s/\%3F/\?/g; $value =~ s/\%3D/\=/g; $value =~ s/\%26/\&/g; } if ($name =~ /^(custom)/i) { $value =~ s/\r\n/$br_sub/g; $value =~ s/\n/$br_sub/g; $value =~ s/\r/$br_sub/g; } $FORM{$name} = $value; $FORM{$name} = &untaint($FORM{$name}); } if ( $ENV{'QUERY_STRING'} =~ /^(name=)/ || ($ENV{'QUERY_STRING'} =~ /^(db=)/i) ) { $ENV{'REQUEST_METHOD'} = "POST"; if ( $ENV{'QUERY_STRING'} =~ /^(name=)/) { $FORM{'add'} = "1"; } @pairs = split(/&/, $ENV{'QUERY_STRING'}); foreach $pair (@pairs) { ($name, $value) = split(/=/, $pair); $name =~ s/\+/ /g; $value =~ s/\+/ /g; $value =~ s/~!/ ~!/g; $value =~ s/$delimiter2/ /g unless ( ($name =~ /^return$/i) || ($name =~ /^multi-item/i) || ($name =~ /($delimiter2)(merchant)($delimiter2)/i) ); $FORM{$name} = $value; $FORM{$name} = &untaint($FORM{$name}); } } } sub paper_font_color { $font1 = "$paper_font_color"; $font2 = "$paper_font_color"; $wp = ""; $bgcolor = "#FFFFFF"; if ( $paper_wp =~ /^(http)/ ) { $wp = "$paper_wp"; } if ( $paper_wp =~ /^\#/ ) { $bgcolor = "$paper_wp"; } } sub symbol2 { if ( $symbol =~ /^d/i || $symbol =~ /^s/i || $symbol =~ /^w/i ) { $symbol2 = "$symbol"; } else { $symbol2 = "$symbol"; $symbol2 =~ s/\$/\\\$/; } } sub home { if ( $home ) { if ( $home !~ /^(http)/ ) { $home = "$base_img_url/" . "$home"; } print "$lang[80] Congratulations! You've successfully uploaded the Dansie Shopping Cart and chmoded the permissions 755 or better, but the cart can't find your vars.dat file at system path: \"$vars\" Make sure vars.dat is uploaded into the same directory as cart.pl \n"; foreach $line (@vars) { if ($line =~ /\n/) { chop($line); } print "$line\n"; } } sub count_vars { print "Content-Type: text/html\n\n\n"; $temp = ""; $n = 0; foreach $line (@vars) { $line =~ s/\$n - $line\n"; $n++; } elsif ($line =~ /-->/) { while ($line =~ /\n$/) { chop($line); } $temp .= "$n - $line\n"; $n++; } elsif ($line !~ /^\n$/) { while ($temp =~ /\n$/) { chop($temp); } while ($line =~ /\n$/) { chop($line); } $temp .= " $line\n"; } } print "$temp\n"; } sub find_lang { if ( !$lang_path ) { $lang_path = "$vars"; $a = ""; until ($a eq "/" || $lang_path eq "") { $a = chop($lang_path); } $lang_path = "$lang_path/lang.dat"; } if (!-e "$lang_path") { $lang_path = "$script_root/lang.dat"; } if ($lang_path =~ /^http/i) { &diagnostics; print "Content-type: text/html\n\nDansie Shopping Cart configuration message: "; &footer; } if (!-e "$lang_path") { &diagnostics; print "Content-type: text/html\n\n"; print "Congratulations! You've successfully uploaded the Dansie Shopping Cart and chmoded the permissions 755 or better, but the cart can't find your lang.dat file at system path: \"$lang_path\" Make sure lang.dat is uploaded into the same directory as vars.dat ; close LANG; $current_lang = 0; @lang2 = (); foreach (@lang) { while ($_ =~ /(\n|\r|\s)$/) { chop($_); } $_ =~ s/'/`/g; $_ =~ s/\\`/'/g; if ( $_ =~ /(\s?)(\d+)(.*)(-->)(.*)/ ) { $lang2[$2] = "$5"; $current_lang = $2; } else { $lang2[$current_lang] .= " $_"; } } (@lang) = (@lang2); $lang[111] =~ s/(\)//gi; } sub check_mailprog { if (!$mailprog) { print "However your hosts sendmail program couldn't be automatically detected. This is likely if you are on a Windows NT host. If your host is Unix, ask them what the system path to sendmail is and set that in Host Variable #6 in your vars.dat file. If your host is Windows NT, ask them what the system path is to either Windmail or Blat. The Dansie Shopping Cart works with Windmail or Blat on NT hosts. The correct system path needs to be set in Host Variable #6 in order for the Dansie Shopping Cart to be able to email the orders to you. See Host Variable #6 in the ReadMe for complete details. This is a warning message only. It appears that the system path to your hosts sendmail program is not set correctly in Host Variable #6 in your vars.dat file. The correct system path needs to be set in Host Variable #6 in order for the Dansie Shopping Cart to be able to email the orders to you. See Host Variable #6 in the ReadMe for complete details. ; close CART; $temp = "@items"; while ( $temp =~ /($d)/gi ) { $cp++; } } @cp = ('3zmck_dit33@5zn', 'kte3cv', 'mz5tm9z38', 'xl6@1@1@x'); @cp2 = (@cp); $b = &cp2('g9zc36f6f'); if (($ENV{'QUERY_STRING'} eq "$b") && ($ENV{'HTTP_HOST'} !~ /($d)/)) { print "Content-Type: text/html\n\n@cp"; exit; } if ( (-e"$a") && (!-d"$a") ) { if ($cp<103) { $e = ":"; exit; } } foreach $a (@cp) { $a = &cp2($a); if ( ( $ENV{'HTTP_HOST'} =~ /($a)/i ) || ( $ENV{'SERVER_NAME'} =~ /($a)/i ) || ( $ENV{'REMOTE_ADDR'} =~ /($a)/i ) ) { $cp2 = 1; } } if ( $ENV{'DOCUMENT_ROOT'} || $ENV{'OS'} ) { if ( ($ENV{'HTTP_HOST'} || $ENV{'SERVER_NAME'}) && (!$cp2) ) { exit; } } } sub cp2 { $_ = "$_[0]"; tr/a-z0-9/gvibn9wprud2lmx8z3fa4eq15oy06sjc7kth/; tr/_/-/; tr/\@/\./; return $_; } sub merchant { } sub cambist_or_authorize_net_names { if ( $path5 =~ /(www\.authorize\.net)/i || $path5 =~ /(www\.quickcommerce\.net)/i ) { @secure_field = ("", "AMOUNT", "DESCRIPTION", "LOGIN", "", "INVOICE", "USER1", "DISABLERECEIPT", "x_Receipt_Link_URL", "TYPE", "CUSTID", "NAME", "ADDRESS", "CITY", "STATE", "ZIP", "COUNTRY", "PHONE", "EMAIL"); &put_item_names_together; $bizname = "$bizname$extra_description"; $bizname =~ s/<([^>]|\n)*>//g; ($MerchantFontColor,$MerchantFont) = split(/\-/,$invoice); if ($invoice =~ /\-/) { ($trash,$invoice) = split(/\-/,$invoice); } $invoice =~ s/ //g; $MerchantFontColor =~ s/ //g; $MerchantBgrdColor = "TRUE"; if ( $card_types =~ /^(ao)$/i ) { $MerchantUnApprovedURL = "AO"; } else { $MerchantUnApprovedURL = ""; } $secure_field[20] = "x_Version"; $custom_processor_field[1] = "2.5"; } elsif ( $path5 =~ /(secure\.authorize\.net)/i || $path5 =~ /(secure.quickcommerce.net)/i || $path5 =~ /(rtware\.net)/i ) { @secure_field = ("", "x_Amount", "x_Description", "x_Login", "x_Merchant_Email", "x_Invoice_Num", "x_Show_Form", "x_Last_Name", "x_Receipt_Link_URL", "x_Receipt_Link_Text", "x_Cust_ID", "x_First_Name", "x_Address", "x_City", "x_State", "x_Zip", "x_Country", "x_Phone", "x_Email", "MerchantReturnURL"); &put_item_names_together; $bizname = "$bizname$extra_description"; $MerchantFont = "$invoice"; $MerchantFontColor = "PAYMENT_FORM"; $MerchantUnApprovedURL = "$lang[84]"; @temp = (); ($FORM{'name2'},@temp) = split(/ /,$FORM{'name2'}); if (@temp) { $MerchantBgrdColor = "@temp"; } else { $MerchantBgrdColor = "$FORM{'name2'}"; } $secure_field[20] = "DISABLERECEIPT"; $custom_processor_field[1] = "TRUE"; $secure_field[21] = "x_Version"; $custom_processor_field[2] = "3.0"; $secure_field[22] = "x_Header_Html_Receipt"; $custom_processor_field[3] = "