%@ LANGUAGE="VBScript" %> <% Response.AddHeader "cache-control", "private" %> <% Response.AddHeader "pragma", "no-cache" %> <% Response.Expires = 0 %> <% ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' System : StoreFront 2000 Version 4.00.2 ' Author : LaGarde, Incorporated ' Description : SF2k Database Upgrade ' ' Notes : There are no configurable elements in this file. ' ' COPYRIGHT NOTICE ' ' The contents of this file is protected under the United States ' copyright laws as an unpublished work, and is confidential and ' proprietary to LaGarde, Incorporated. Its use or disclosure in ' whole or in part without the expressed written permission of ' LaGarde, Incorporated is expressely prohibited. ' ' (c) Copyright 1998 by LaGarde, Incorporated. All rights reserved. ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' %> <% If Request("RESPONSECODE") <> "" Then AuthResp = Request.QueryString() Call AuthNetResp(AuthResp) ElseIf Request("x_response_code") <> "" Then Call AuthNet30Resp Else DSN_Name = Session("DSN_NAME") Dim CARD_NAME, ORDER_ID, SHIP_MESSAGE, COMPANY, ADDRESS_1, ADDRESS_2, CITY, STATE, COUNTRY, ZIP, PHONE, FAX, E_MAIL, PAYMENT_METHOD, CARD_TYPE, CARD_NO, CARD_EXP, BANK_NAME, ROUTING_NO, CHK_ACCT_NO, PURCH_ORDER_NO, CHK_NO, SHIP_NAME, SHIP_COMPANY, SHIP_ADDRESS_1, SHIP_ADDRESS_2, SHIP_CITY, SHIP_STATE, SHIP_COUNTRY, SHIP_ZIP, SHIP_TELEPHONE, ShipMeth, ShipMethName, PrmShip, PayMethName, DSN_NAME '//********* GLOBAL VARIABLES **************************** CARD_NAME = Replace(Request("CARD_NAME"),"'","''") ORDER_ID = Request("ORDER_ID") SHIP_MESSAGE = Replace(Request("SHIP_MESSAGE"),"'","''") '//************CUSTOMER VARIABLES ***************** COMPANY = Replace(Request("COMPANY"),"'","''") ADDRESS_1 = Replace(Request("ADDRESS_1"),"'","''") ADDRESS_2 = Replace(Request("ADDRESS_2"),"'","''") CITY = Replace(Request("CITY"),"'","''") STATE = Replace(Request("STATE"),"'","''") COUNTRY = Replace(Request("COUNTRY"), "'","''") ZIP = Request("ZIP") PHONE = Request("PHONE") FAX = Request("FAX") E_MAIL = Request("E_MAIL") '//***** PAYMENT VARIABLES ********************* PAYMENT_METHOD = Request("PaymentMethod") CARD_TYPE = Request("CARD_TYPE") CARD_NO = Request("CARD_NO") CARD_EXP = Request("CARD_EXP") BANK_NAME = Replace(Request("BANK_NAME"),"'","''") ROUTING_NO = Request("BANK_CODE") CHK_ACCT_NO = Request("CHK_ACCT_NO") PURCH_ORDER_NO = Request("PURCH_ORDER_NO") CHK_NO = Request("CHK_NO") '//******** SHIPPING VARIABLES ******************* SHIP_NAME = Replace(Request("SHIP_NAME"),"'","''") SHIP_COMPANY = Replace(Request("SHIP_COMPANY"),"'","''") SHIP_ADDRESS_1 = Replace(Request("SHIP_ADDRESS_1"),"'","''") SHIP_ADDRESS_2 = Replace(Request("SHIP_ADDRESS_2"),"'","''") SHIP_CITY = Replace(Request("SHIP_CITY"),"'","''") SHIP_STATE = Replace(Request("SHIP_STATE"),"'","''") SHIP_COUNTRY = Replace(Request("SHIP_COUNTRY"), "'","''") SHIP_ZIP = Request("SHIP_ZIP") SHIP_TELEPHONE = Request("SHIP_TELEPHONE") ShipMeth = Request("ShipMeth") ShipMethName = ShipMeth PrmShip = Trim(Request("PrmShip")) End If Set Connection = Server.CreateObject("ADODB.Connection") Connection.Open DSN_Name %> <% SQLStmt = "SELECT GRAND_TOTAL from customer WHERE " _ & " CUSTOMER_ID = " & ORDER_ID & "" Set RSOrderCheck = Connection.Execute(SQLStmt) If RSOrderCheck("GRAND_TOTAL") > FormatCurrency("0") Then Response.Redirect "order_complete.asp?DSN_NAME="&DSN_NAME Connection.Close End If '//***** SET ADMIN VARIABLES ************************** SQL = "SELECT * FROM Admin" Set RSAdmin = Connection.Execute(SQL) '// ******* TRANSACTION PROCESSING VARIABLES ************** TransMethod = Trim(RSAdmin("Transaction_Method")) Login = Trim(RSAdmin("LOGIN")) PaymentServer = Trim(RSAdmin("PAYMENT_SERVER")) MerchantType = Trim(RSAdmin("MERCHANT_TYPE")) Root = Server.MapPath(".") '//******* MAIL VARIABLES ****************** MailServer = Trim(RSAdmin("MAIL_SERVER")) MailMethod = Trim(RSAdmin("MAIL_METHOD")) PRIMARY = Trim(RSAdmin("PRIMARY_EMAIL")) SECONDARY = Trim(RSAdmin("SECONDARY_EMAIL")) SUBJECT = RSAdmin("EMAIL_SUBJECT") MESSAGE = RSAdmin("EMAIL_MESSAGE") MAIL_CC = Trim(RSAdmin("MAIL_CC")) '//***** SHIP VARIABLES *************** oCountry = RSAdmin("ORIGIN_COUNTRY") oZip = RSAdmin("ORIGIN_ZIP") ShipType = Trim(RSAdmin("SHIP_TYPE")) Handling = RSAdmin("HANDLING") HandlingSwitch = RSAdmin("HANDLINGSWITCH") ShipMin = RSAdmin("SHIP_MIN") COD = RSAdmin("COD") CODAmt = RSAdmin("COD_AMOUNT") TaxShip = RSAdmin("TAX_SHIP") SecShipType = RSAdmin("SHIP_TYPE_2") session.LCID = Trim(RSAdmin("LCID")) set RSAdmin = nothing SQL = "SELECT ORDERS.PRODUCT_ID, " _ & "ORDERS.PRICE, ORDERS.ATTRIBUTEA, ORDERS.ATTRIBUTEB, ORDERS.ATTRIBUTEC, " _ & "ORDERS.TOTAL, PRODUCT.WEIGHT, PRODUCT.CTAX, PRODUCT.STAX, " _ & "ORDERS.QUANTITY, ORDERS.ID, ORDERS.DESCRIPTION " _ & "FROM ORDERS, PRODUCT " _ & "WHERE ORDERS.ORDER_ID = " & ORDER_ID & " " _ & "AND ORDERS.PRODUCT_ID = PRODUCT.PRODUCT_ID" set RSOrder = Connection.Execute(SQL) CTaxSwitch = RSOrder("CTAX") STaxSwitch = RSOrder("STAX") If NOT RSOrder.EOF Then SQL = "SELECT Sum(TOTAL) AS SubTotal FROM ORDERS WHERE " _ & " ORDER_ID = " & ORDER_ID & " " set RSSumOrd = Connection.Execute(SQL) SubTotal = RSSumOrd("SubTotal") set RSSumOrd = nothing End If SQL = "SELECT country, country_abb FROM locales" set RSCountry = Connection.Execute (SQL) If ShipTotal > 0 Then If PrmShip = "1" Then SpShipping = PrmShipping() Else StdShipping = Shipping() End If End If If StdShipping = "" Then StdShipping = 0 End If If SpShipping = "" Then SpShipping = 0 End If ShippingAmt = (SpShipping+StdShipping) If (ShipType = "1" or ShipType = "3") and PrmShip = "1" Then ShipMeth = "Premium Shipping" Else ShipMeth = "Standard Shipping" End If If CTaxSwitch = "1" Then CTax = CountryTax() End If If STaxSwitch = "1" Then STax = StateTax() End If Tax = (CTax+STax) '***** CHECK FOR HANDLING CHARGE EXEMPT ORDER ************************** If HandlingSwitch = "1" Then SQL = "SELECT Count(product.PRODUCT_ID) AS CntShipExempt FROM product, orders WHERE (orders.PRODUCT_ID = product.PRODUCT_ID "_ & "AND product.SHIPSWITCH = '1'AND ORDER_ID = " & ORDER_ID & ")" Set RSCheckShip = Connection.Execute(SQL) If RSCheckShip("CntShipExempt") > 0 Then Handling = Handling Else Handling = 0 End If Set RSCheckShip = nothing End If '*********************************************************** '*************** CHECK FOR COD CHARGES ******************** If PAYMENT_METHOD = "COD" Then CODAmt = CODAmt Else CODAmt = 0 End If '********************** END COD ROUTINE ********************** GrandTotal = FormatCurrency(SubTotal+ShippingAmt+Tax+Handling+CODAmt) Amount = ValAmt(GrandTotal) SubTotal = FormatCurrency(SubTotal) ShippingAmt = FormatCurrency(ShippingAmt) Tax = FormatCurrency(Tax) Handling = FormatCurrency(Handling) CODAmt = FormatCurrency(CODAmt) Dim ProcResponse, ProcMessage,ProcCustNumber, ProcAddlData, ProcRefCode, ProcAuthCode, ProcMerchNumber, ProcActionCode, ProcErrMsg, ProcErrLoc, ProcErrCode, ProcAvsCode, ProcAvsZip If (TransMethod = "CyberCash" and PAYMENT_METHOD = "CREDIT") Then Call directPayProc ElseIf (TransMethod = "AuthorizeNet" and (PAYMENT_METHOD = "CREDIT" or PAYMENT_METHOD = "ECHECK")) Then If IsNull(Trim(Request("RESPONSECODE"))) OR (Trim(Request("RESPONSECODE") = "")) Then Call AuthNetProc End If ElseIf (TransMethod = "AuthorizeNet30" and (PAYMENT_METHOD = "CREDIT" or PAYMENT_METHOD = "ECHECK")) Then If IsNull(Trim(Request("x_response_code"))) OR (Trim(Request("x_response_code") = "")) Then Call AuthNet30Proc End If ElseIf TransMethod = "PCAuthorize" and PAYMENT_METHOD = "CREDIT" Then Call PCAuthProc ElseIf TransMethod = "PaymentNet" and PAYMENT_METHOD = "CREDIT" Then Call PaymentNetProc End If %> <% If PAYMENT_METHOD = "PHONEFAX" Then '****** GET SELECTED COUNTRY FOR SHIP TO LIST ********************** SQL = "SELECT country, country_abb FROM locales WHERE COUNTRY_ABB = '" & COUNTRY & "' " set RSSelCountry = Connection.Execute (SQL) SelCountry = RSSelCountry("COUNTRY") set RSSelCountry = nothing '****** GET SELECTED STATE FOR SHIP TO LIST ************************* SQL = "SELECT state, state_abb FROM locales WHERE STATE_ABB = '" & STATE & "'" set RSSelState = Connection.Execute (SQL) SelState = RSSelState("STATE") set RSSelState = nothing %>
| PHONE OR FAX ORDER | |
| Customer Name | <%= CARD_NAME %> |
| Address | <%= ADDRESS_1 %> |
| Address | <%= ADDRESS_2 %> |
| City | <%= CITY %> |
| State | <%=SelState %> |
| Country | <%= SelCountry %> |
| Zip | <%= ZIP %> |
| Phone | <%= PHONE %> |
| Fax | <%= FAX %> |
| <%= E_MAIL %> | |
| Payment Method | Phone or Fax |
| Card Number | <%= CARD_NO %> |
| Exp. Date | <%= CARD_EXP %> |
| Bank Name | <%= BANK_NAME %> |
| Bank Routing Number | <%= BANK_ROUTING_NO %> |
| Checking Account Number | <%= CHK_ACCT_NO %> |
| ORDER DETAIL | ||||
Product Code |
Description |
Price |
Quantity |
Total |
| <%= RSOrder("PRODUCT_ID") %> | <%= ATTResponse&RSOrder("DESCRIPTION") %> | <%= FormatCurrency(RSOrder("PRICE")) %> | <%= RSOrder("QUANTITY") %> | <%= FormatCurrency(RSOrder("TOTAL")) %> |
| ORDER TOTAL | |
| SubTotal | <%= SubTotal %> |
| <%= ShipMeth %> | <%= ShippingAmt %> |
| Tax | <%= Tax %> |
| Handling Charge | <%= Handling %> |
| Total Order | <%= GrandTotal %> |
| SHIPPING INFORMATION | |
| Ship Name | <%= SHIP_NAME %> |
| Ship Address | <%= SHIP_ADDRESS_1 %> |
| Suite/Apt. Number | <%= SHIP_ADDRESS_2 %> |
| City | <%= SHIP_CITY %> |
| State | <%= SHIP_STATE %> |
| Country | <%= SHIP_COUNTRY %> |
| Zip | <%= SHIP_ZIP %> |
| Phone | <%= SHIP_PHONE %> |
| Order Number: | <%= ORDER_ID %> |
| Date: | <%= Date() %> |
| Order Amount: | <%= SubTotal %> |
| <% If ShipMeth = "PRM" Then %>Premium Shipping: <% ElseIf ShipMeth = "STD" Then %>Standard Shipping: <% ElseIf ShipType = "2" Then %><%= ShipMethName&": " %><% Else %><%= ShipMeth&": " %><% End If %> | <%= ShippingAmt %> |
| Handling Charge: | <%= Handling %> |
| COD Charge: | <%= CODAmt %> |
| Tax: | <%= TAX %> |
| Total Amount: | <%= GrandTotal %> |