function xtc_image_submit($image, $alt = '', $parameters = '')
{
    if (USE_BOOTSTRAP == "true") {
        return xtc_image_button($image, $alt, $parameters, true);
    } else {
        $image_submit = '<input type="image" src="' . xtc_parse_input_field_data('templates/' . CURRENT_TEMPLATE . '/buttons/' . $_SESSION['language'] . '/' . $image, array('"' => '&quot;')) . '" alt="' . xtc_parse_input_field_data($alt, array('"' => '&quot;')) . '"';
        if (xtc_not_null($alt)) {
            $image_submit .= ' title=" ' . xtc_parse_input_field_data($alt, array('"' => '&quot;')) . ' "';
        }
        if (xtc_not_null($parameters)) {
            $image_submit .= ' ' . $parameters;
        }
        $image_submit .= ' />';
        return $image_submit;
    }
}
 function get_html()
 {
     global $PHP_SELF;
     $config = $this->_payone->getConfig();
     $this->set_content_data('notice', $config['credit_risk']['notice']['text']);
     $this->set_content_data('confirmation', $config['credit_risk']['confirmation']['text']);
     $this->set_content_data('timeofcheck', $config['credit_risk']['timeofcheck']);
     $this->set_content_data('IMGBUTTON_CONFIRM', xtc_image_button('button_confirm.gif', IMAGE_BUTTON_CONFIRM));
     $this->set_content_data('IMGBUTTON_CANCEL', xtc_image_button('small_delete.gif', IMAGE_BUTTON_CANCEL));
     $hidden = xtc_draw_hidden_field('p1crcheck', 'true') . PHP_EOL;
     foreach ($_POST as $key => $value) {
         $hidden .= xtc_draw_hidden_field($key, $value) . PHP_EOL;
     }
     $this->set_content_data('form_action', xtc_draw_form('p1crconfirm', xtc_href_link(basename($PHP_SELF), '', 'SSL')) . $hidden);
     $this->set_content_data('payonecss', DIR_WS_EXTERNAL . 'payone/css/payone.css');
     $t_html_output = $this->_payone->build_html('checkout_payone_cr.html', $this->content);
     return $t_html_output;
 }
     }
     $info_smarty->assign('PRODUCTS_SHIPPING_LINK', $main->getShippingLink());
 }
 $info_smarty->assign('PRODUCTS_MODEL', $product->data['products_model']);
 $info_smarty->assign('PRODUCTS_EAN', $product->data['products_ean']);
 $info_smarty->assign('PRODUCTS_IMAGE_TITLE', !empty($product->data['products_image_title']) ? $product->data['products_image_title'] : str_replace('"', '', $product->data['products_name']));
 $info_smarty->assign('PRODUCTS_IMAGE_ALT', !empty($product->data['products_image_alt']) ? $product->data['products_image_alt'] : str_replace('"', '', $product->data['products_name']));
 $info_smarty->assign('PRODUCTS_MANUFACTURERS_MODEL', $product->data['products_manufacturers_model']);
 $info_smarty->assign('PRODUCTS_QUANTITY', $product->data['products_quantity']);
 $info_smarty->assign('PRODUCTS_WEIGHT', $product->data['products_weight']);
 $info_smarty->assign('PRODUCTS_STATUS', $product->data['products_status']);
 $info_smarty->assign('PRODUCTS_ORDERED', $product->data['products_ordered']);
 if (USE_BOOTSTRAP == "true") {
     $info_smarty->assign('PRODUCTS_PRINT', xtc_image_button('print.gif', $product->data['products_name'], 'onclick="javascript:window.open(\'' . xtc_href_link(FILENAME_PRINT_PRODUCT_INFO, 'products_id=' . $product->data['products_id']) . '\', \'child\', \'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=yes,copyhistory=no, ' . POPUP_PRODUCT_PRINT_SIZE . '\')"'));
 } else {
     $info_smarty->assign('PRODUCTS_PRINT', xtc_image_button('print.gif', $product->data['products_name'], 'onclick="javascript:window.open(\'' . xtc_href_link(FILENAME_PRINT_PRODUCT_INFO, 'products_id=' . $product->data['products_id']) . '\', \'popup\', \'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=yes,copyhistory=no, ' . POPUP_PRODUCT_PRINT_SIZE . '\')"'));
 }
 $info_smarty->assign('PRODUCTS_DESCRIPTION', stripslashes($product->data['products_description']));
 $info_smarty->assign('PRODUCTS_SHORT_DESCRIPTION', stripslashes($product->data['products_short_description']));
 $info_smarty->assign('PRODUCTS_IMAGE', $product->productImage($product->data['products_image'], 'info'));
 $info_smarty->assign('PRODUCTS_POPUP_LINK', 'javascript:popupWindow(\'' . xtc_href_link(FILENAME_POPUP_IMAGE, 'pID=' . $product->data['products_id'] . '&imgID=0') . '\')');
 $info_smarty->assign('PRODUCTS_URL', !empty($product->data['products_url']) ? sprintf(TEXT_MORE_INFORMATION, xtc_href_link(FILENAME_REDIRECT, 'action=product&id=' . $product->data['products_id'], 'NONSSL', true, false)) : '');
 // more images
 $mo_images = xtc_get_products_mo_images($product->data['products_id']);
 if ($mo_images != false) {
     $more_images_data = array();
     foreach ($mo_images as $img) {
         $mo_img = $product->productImage($img['image_name'], 'info');
         $more_images_data[] = array('PRODUCTS_IMAGE' => $mo_img, 'IMAGE_TITLE' => !empty($img['image_title']) ? $img['image_title'] : str_replace('"', '', $product->data['products_name']), 'IMAGE_ALT' => !empty($img['image_alt']) ? $img['image_alt'] : str_replace('"', '', $product->data['products_name']), 'PRODUCTS_POPUP_LINK' => 'javascript:popupWindow(\'' . xtc_href_link(FILENAME_POPUP_IMAGE, 'pID=' . $product->data['products_id'] . '&imgID=' . $img['image_nr']) . '\')');
         //next 2 lines only needed for non modified templates
         $info_smarty->assign('PRODUCTS_IMAGE_' . $img['image_nr'], $mo_img);
                </tr>
                <tr>
                  <td align="center" class="dataTableContent" colspan="4"><b><?php 
echo TEXT_SUMMARY;
?>
</b></td>
                </tr>
                <tr>
                  <td colspan="4"><?php 
echo xtc_draw_separator();
?>
</td>
                </tr>
                <tr>
                  <td align="right" class="dataTableContent" colspan="4"><?php 
echo '<a href="' . xtc_href_link(FILENAME_AFFILIATE_CLICKS, 'acID=' . $_GET['acID']) . '">' . xtc_image_button('button_affiliate_clickthroughs.gif', IMAGE_CLICKTHROUGHS) . '</a> <a href="' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'acID=' . $_GET['acID']) . '">' . xtc_image_button('button_affiliate_sales.gif', IMAGE_SALES) . '</a>';
?>
</td>
                </tr>
              </center>
            </table></td>
          </tr>
        </table></td>
      </tr>
    </table></td>
<!-- body_text_eof //-->
  </tr>
</table>
<!-- body_eof //-->

<!-- footer //-->
    $smarty->assign('error', $messageStack->output('addressbook'));
}
$smarty->assign('ADDRESS_DEFAULT', xtc_address_label($_SESSION['customer_id'], $_SESSION['customer_default_address_id'], true, ' ', '<br />'));
$addresses_data = array();
$addresses_query = xtc_db_query("select address_book_id,\n                                        entry_firstname as firstname,\n                                        entry_lastname as lastname,\n                                        entry_company as company,\n                                        entry_street_address as street_address,\n                                        entry_suburb as suburb,\n                                        entry_city as city,\n                                        entry_postcode as postcode,\n                                        entry_state as state,\n                                        entry_zone_id as zone_id,\n                                        entry_country_id as country_id \n                                 from " . TABLE_ADDRESS_BOOK . " \n                                 where customers_id = '" . (int) $_SESSION['customer_id'] . "'\n                                 order by firstname, lastname");
while ($addresses = xtc_db_fetch_array($addresses_query)) {
    $format_id = xtc_get_address_format_id($addresses['country_id']);
    if ($addresses['address_book_id'] == $_SESSION['customer_default_address_id']) {
        $primary = 1;
    } else {
        $primary = 0;
    }
    $addresses_data[] = array('NAME' => $addresses['firstname'] . ' ' . $addresses['lastname'], 'BUTTON_EDIT' => '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK_PROCESS, 'edit=' . $addresses['address_book_id'], 'SSL') . '">' . xtc_image_button('small_edit.gif', SMALL_IMAGE_BUTTON_EDIT) . '</a>', 'BUTTON_DELETE' => '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK_PROCESS, 'delete=' . $addresses['address_book_id'], 'SSL') . '">' . xtc_image_button('small_delete.gif', SMALL_IMAGE_BUTTON_DELETE) . '</a>', 'ADDRESS' => xtc_address_format($format_id, $addresses, true, ' ', '<br />'), 'PRIMARY' => $primary);
}
$smarty->assign('addresses_data', $addresses_data);
$smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_ACCOUNT, '', 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
if (xtc_count_customer_address_book_entries() < MAX_ADDRESS_BOOK_ENTRIES) {
    $smarty->assign('BUTTON_NEW', '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK_PROCESS, '', 'SSL') . '">' . xtc_image_button('button_add_address.gif', IMAGE_BUTTON_ADD_ADDRESS) . '</a>');
}
$smarty->assign('ADDRESS_COUNT', sprintf(TEXT_MAXIMUM_ENTRIES, MAX_ADDRESS_BOOK_ENTRIES));
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/address_book.html');
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
include 'includes/application_bottom.php';
        }
        // EOF - Tomcraft - 2009-11-05 - Advanced contact form (check for USE_CONTACT_EMAIL_ADDRESS)
        $email_layout = sprintf(EMAIL_SENT_BY, CONTACT_US_NAME, CONTACT_US_EMAIL_ADDRESS, $datum, $uhrzeit) . "\n" . "--------------------------------------------------------------" . "\n" . $notify . EMAIL_NAME . $_POST['name'] . "\n" . EMAIL_EMAIL . trim($_POST['email']) . "\n" . $additional_fields . "\n" . EMAIL_MESSAGE . "\n " . $_POST['message_body'] . "\n";
        xtc_php_mail($email, $name, CONTACT_US_EMAIL_ADDRESS, CONTACT_US_NAME, CONTACT_US_FORWARDING_STRING, $email, $name, '', '', CONTACT_US_EMAIL_SUBJECT, nl2br($email_layout), $email_layout);
        if (!isset($mail_error)) {
            xtc_redirect(xtc_href_link(FILENAME_CONTENT, 'action=success&coID=' . (int) $_GET['coID']));
        } else {
            $smarty->assign('error_message', $mail_error);
        }
    }
    //EOF - web28 - 2010-04-03 - New error handling for required fileds
}
$smarty->assign('CONTACT_HEADING', $shop_content_data['content_heading']);
if (isset($_GET['action']) && $_GET['action'] == 'success') {
    $smarty->assign('success', '1');
    $smarty->assign('BUTTON_CONTINUE', '<a href="' . xtc_href_link(FILENAME_DEFAULT) . '">' . xtc_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>');
} else {
    if ($shop_content_data['content_file'] != '') {
        ob_start();
        if (strpos($shop_content_data['content_file'], '.txt')) {
            echo '<pre>';
        }
        include DIR_FS_CATALOG . 'media/content/' . $shop_content_data['content_file'];
        if (strpos($shop_content_data['content_file'], '.txt')) {
            echo '</pre>';
        }
        $contact_content = ob_get_contents();
        ob_end_clean();
    } else {
        $contact_content = $shop_content_data['content_text'];
    }
        $newpass = xtc_create_random_value(ENTRY_PASSWORD_MIN_LENGTH);
        $crypted_password = xtc_encrypt_password($newpass);
        xtc_db_query("update " . TABLE_AFFILIATE . " set affiliate_password = '******' where affiliate_id = '" . $check_affiliate['affiliate_id'] . "'");
        xtc_php_mail(AFFILIATE_EMAIL_ADDRESS, STORE_OWNER, $_POST['email_address'], $check_affiliate['affiliate_firstname'] . " " . $check_affiliate['affiliate_lastname'], '', AFFILIATE_EMAIL_ADDRESS, STORE_OWNER, '', '', EMAIL_PASSWORD_REMINDER_SUBJECT, nl2br(sprintf(EMAIL_PASSWORD_REMINDER_BODY, $newpass)), nl2br(sprintf(EMAIL_PASSWORD_REMINDER_BODY, $newpass)));
        if (!isset($mail_error)) {
            xtc_redirect(xtc_href_link(FILENAME_AFFILIATE, 'info_message=' . urlencode(TEXT_PASSWORD_SENT), 'SSL', true, false));
        } else {
            echo $mail_error;
        }
    } else {
        xtc_redirect(xtc_href_link(FILENAME_AFFILIATE_PASSWORD_FORGOTTEN, 'email=nonexistent', 'SSL'));
    }
} else {
    $breadcrumb->add(NAVBAR_TITLE, xtc_href_link(FILENAME_AFFILIATE, '', 'SSL'));
    $breadcrumb->add(NAVBAR_TITLE_PASSWORD_FORGOTTEN, xtc_href_link(FILENAME_AFFILIATE_PASSWORD_FORGOTTEN, '', 'SSL'));
    require DIR_WS_INCLUDES . 'header.php';
    $smarty->assign('FORM_ACTION', xtc_draw_form('password_forgotten', xtc_href_link(FILENAME_AFFILIATE_PASSWORD_FORGOTTEN, 'action=process', 'SSL')));
    $smarty->assign('INPUT_EMAIL', xtc_draw_input_field('email_address', '', 'maxlength="96"'));
    $smarty->assign('LINK_AFFILIATE', '<a href="' . xtc_href_link(FILENAME_AFFILIATE, '', 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
    $smarty->assign('BUTTON_SUBMIT', xtc_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE));
    if (isset($_GET['email']) && $_GET['email'] == 'nonexistent') {
        $smarty->assign('email_nonexistent', 'true');
    }
}
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/affiliate_password_forgotten.html');
$smarty->assign('main_content', $main_content);
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$smarty->display(CURRENT_TEMPLATE . '/index.html');
$product_info = xtc_db_fetch_array($product_info_query);
$breadcrumb->add(NAVBAR_TITLE_PRODUCT_REVIEWS, xtc_href_link(FILENAME_PRODUCT_REVIEWS, $get_params));
require DIR_WS_INCLUDES . 'header.php';
$smarty->assign('PRODUCTS_NAME', $product_info['products_name']);
$data_reviews = array();
$reviews_query = xtc_db_query("SELECT * \n                                 FROM " . TABLE_REVIEWS . " r\n                                 JOIN " . TABLE_REVIEWS_DESCRIPTION . " rd\n                                 \t\t\tON r.reviews_id= rd.reviews_id\n                                WHERE r.products_id = '" . (int) $_GET['products_id'] . "'\n                             ORDER BY r.reviews_id DESC");
if (xtc_db_num_rows($reviews_query)) {
    $row = 0;
    while ($reviews = xtc_db_fetch_array($reviews_query)) {
        $row++;
        $data_reviews[] = array('ID' => $reviews['reviews_id'], 'AUTHOR' => '<a href="' . xtc_href_link(FILENAME_PRODUCT_REVIEWS_INFO, $get_params . '&reviews_id=' . $reviews['reviews_id']) . '">' . $reviews['customers_name'] . '</a>', 'DATE' => xtc_date_short($reviews['date_added']), 'RATING' => xtc_image('templates/' . CURRENT_TEMPLATE . '/img/stars_' . $reviews['reviews_rating'] . '.gif', sprintf(BOX_REVIEWS_TEXT_OF_5_STARS, $reviews['reviews_rating'])), 'TEXT' => $reviews['reviews_text']);
    }
}
$smarty->assign('module_content', $data_reviews);
$smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_PRODUCT_INFO, $get_params_back) . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
$smarty->assign('BUTTON_WRITE', '<a href="' . xtc_href_link(FILENAME_PRODUCT_REVIEWS_WRITE, $get_params) . '">' . xtc_image_button('button_write_review.gif', IMAGE_BUTTON_WRITE_REVIEW) . '</a>');
$smarty->assign('language', $_SESSION['language']);
// set cache ID
if (!CacheCheck()) {
    $smarty->caching = 0;
    $main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/product_reviews.html');
} else {
    $smarty->caching = 1;
    $smarty->cache_lifetime = CACHE_LIFETIME;
    $smarty->cache_modified_check = CACHE_CHECK;
    $cache_id = $_SESSION['language'] . $_GET['products_id'];
    $main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/product_reviews.html', $cache_id);
}
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
   $Id: error_handler.php 949 2005-05-14 16:44:33Z hhgag $

   XT-Commerce - community made shopping
   http://www.xt-commerce.com

   Copyright (c) 2003 XT-Commerce

   Released under the GNU General Public License
   ---------------------------------------------------------------------------------------*/
//header( 'HTTP/1.0 404 Not Found' );
//header( 'Status: 404 Not Found' );
$module_smarty = new Smarty();
$module_smarty->assign('tpl_path', 'templates/' . CURRENT_TEMPLATE . '/');
$module_smarty->assign('language', $_SESSION['language']);
$module_smarty->assign('ERROR', $error);
$module_smarty->assign('BUTTON', '<a href="javascript:history.back(1)">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
// Tomcraft - 2010-05-04 - Changed alternative text for the button
$module_smarty->assign('language', $_SESSION['language']);
// search field
$module_smarty->assign('FORM_ACTION', xtc_draw_form('new_find', xtc_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', $request_type, false), 'get') . xtc_hide_session_id());
//WEB28 change NONSSL to $request_type
$module_smarty->assign('INPUT_SEARCH', xtc_draw_input_field('keywords', '', 'size="30" maxlength="30"'));
$module_smarty->assign('BUTTON_SUBMIT', xtc_image_submit('button_quick_find.gif', IMAGE_BUTTON_SEARCH));
$module_smarty->assign('LINK_ADVANCED', xtc_href_link(FILENAME_ADVANCED_SEARCH));
$module_smarty->assign('FORM_END', '</form>');
$module_smarty->caching = 0;
$module_smarty->caching = 0;
$module = $module_smarty->fetch(CURRENT_TEMPLATE . '/module/error_message.html');
if (strstr($PHP_SELF, FILENAME_PRODUCT_INFO)) {
    $product_info = $module;
}
        $products_history[] = $product->buildDataArray($history_product);
    }
    $i++;
}
$order_content = '';
if (xtc_count_customer_orders() > 0) {
    $orders_query = xtc_db_query("select\n\t                                  o.orders_id,\n\t                                  o.date_purchased,\n\t                                  o.delivery_name,\n\t                                  o.delivery_country,\n\t                                  o.billing_name,\n\t                                  o.billing_country,\n\t                                  ot.text as order_total,\n\t                                  s.orders_status_name\n\t                              from " . TABLE_ORDERS . " o, " . TABLE_ORDERS_TOTAL . "\n\t                                  ot, " . TABLE_ORDERS_STATUS . " s\n\t                              where o.customers_id = '" . (int) $_SESSION['customer_id'] . "'\n\t                              and o.orders_id = ot.orders_id\n\t                              and ot.class = 'ot_total'\n\t                              and o.orders_status = s.orders_status_id\n\t                              and s.language_id = '" . (int) $_SESSION['languages_id'] . "'\n\t                              order by orders_id desc limit 3");
    while ($orders = xtc_db_fetch_array($orders_query)) {
        if (xtc_not_null($orders['delivery_name'])) {
            $order_name = $orders['delivery_name'];
            $order_country = $orders['delivery_country'];
        } else {
            $order_name = $orders['billing_name'];
            $order_country = $orders['billing_country'];
        }
        $order_content[] = array('ORDER_ID' => $orders['orders_id'], 'ORDER_DATE' => xtc_date_short($orders['date_purchased']), 'ORDER_STATUS' => $orders['orders_status_name'], 'ORDER_TOTAL' => $orders['order_total'], 'ORDER_LINK' => xtc_href_link(FILENAME_ACCOUNT_HISTORY_INFO, 'order_id=' . $orders['orders_id'], 'SSL'), 'ORDER_BUTTON' => '<a href="' . xtc_href_link(FILENAME_ACCOUNT_HISTORY_INFO, 'order_id=' . $orders['orders_id'], 'SSL') . '">' . xtc_image_button('small_view.gif', SMALL_IMAGE_BUTTON_VIEW) . '</a>');
        require_once DIR_FS_INC . 'xtc_get_tracking_link.php';
        $order_content[count($order_content) - 1]['TRACKING_LINKS'] = xtc_get_tracking_link($orders['orders_id']);
    }
}
$smarty->assign('LINK_EDIT', xtc_href_link(FILENAME_ACCOUNT_EDIT, '', 'SSL'));
$smarty->assign('LINK_ADDRESS', xtc_href_link(FILENAME_ADDRESS_BOOK, '', 'SSL'));
$smarty->assign('LINK_PASSWORD', xtc_href_link(FILENAME_ACCOUNT_PASSWORD, '', 'SSL'));
//BOF - Dokuman - 2009-08-21 - Added 'delete account' functionality for customers
//Link_Delete button will not work for Admin (ID1) or not logged in users
if (isset($_SESSION['customer_id']) && $_SESSION['customer_id'] != '1') {
    $smarty->assign('LINK_DELETE', xtc_href_link(FILENAME_ACCOUNT_DELETE, '', 'SSL'));
}
//EOF - Dokuman - 2009-08-21 - Added 'delete account' functionality for customers
if (!isset($_SESSION['customer_id'])) {
    $smarty->assign('LINK_LOGIN', xtc_href_link(FILENAME_LOGIN, '', 'SSL'));
    $orders_pending_query = xtc_db_query("select count(*) as count from " . TABLE_ORDERS . " where orders_status = '" . $orders_status['orders_status_id'] . "'");
    $orders_pending = xtc_db_fetch_array($orders_pending_query);
    $orders_contents .= '<a href="' . xtc_href_link_admin(FILENAME_ORDERS, 'selected_box=customers&amp;status=' . $orders_status['orders_status_id'], 'NONSSL') . '">' . $orders_status['orders_status_name'] . '</a>: ' . $orders_pending['count'] . '<br />';
    //web28 - 2010-06-23 change unnecessary SSL to NONSSL
}
$orders_contents = substr($orders_contents, 0, -6);
$customers_query = xtc_db_query("select count(*) as count from " . TABLE_CUSTOMERS);
$customers = xtc_db_fetch_array($customers_query);
$products_query = xtc_db_query("select count(*) as count from " . TABLE_PRODUCTS . " where products_status = '1'");
$products = xtc_db_fetch_array($products_query);
$reviews_query = xtc_db_query("select count(*) as count from " . TABLE_REVIEWS);
$reviews = xtc_db_fetch_array($reviews_query);
$admin_image = '<a href="' . xtc_href_link_admin(FILENAME_START, '', 'NONSSL') . '">' . xtc_image_button('button_admin.gif', IMAGE_BUTTON_ADMIN) . '</a>';
//web28 - 2010-06-23 change unnecessary SSL to NONSSL
if ($product->isProduct()) {
    $admin_link = '<a href="' . xtc_href_link_admin(FILENAME_EDIT_PRODUCTS, 'cPath=' . $cPath . '&amp;pID=' . $product->data['products_id']) . '&amp;action=new_product' . '" onclick="window.open(this.href); return false;">' . xtc_image_button('edit_product.gif', IMAGE_BUTTON_PRODUCT_EDIT) . '</a>';
} else {
    $admin_link = '';
    //DokuMan  - 2010-03-23 - set undefinded variable
}
$box_content = '<strong>' . BOX_TITLE_STATISTICS . '</strong><br />' . $orders_contents . '<br />' . BOX_ENTRY_CUSTOMERS . ' ' . $customers['count'] . '<br />' . BOX_ENTRY_PRODUCTS . ' ' . $products['count'] . '<br />' . BOX_ENTRY_REVIEWS . ' ' . $reviews['count'] . '<br />' . $admin_image . '<br />' . $admin_link;
$box_content = '';
$box_content .= '<li><a href="' . xtc_href_link_admin(FILENAME_START, '', 'NONSSL') . '">' . IMAGE_BUTTON_ADMIN . '</a></li>';
if ($product->isProduct()) {
    $box_content .= '<li><a href="' . xtc_href_link_admin(FILENAME_EDIT_PRODUCTS, 'cPath=' . $cPath . '&amp;pID=' . $product->data['products_id']) . '&amp;action=new_product' . '" onclick="window.open(this.href); return false;">' . IMAGE_BUTTON_PRODUCT_EDIT . '</a></li>';
}
if ($flag == true) {
    define('SEARCH_ENGINE_FRIENDLY_URLS', true);
}
$box_smarty->assign('BOX_CONTENT', $box_content);
$box_smarty->caching = 0;
              </tr>
            </table></td>
<?php 
    $heading = array();
    $contents = array();
    switch ($_GET['action']) {
        case 'confirm':
            $heading[] = array('text' => '<b>' . TEXT_INFO_HEADING_DELETE_CUSTOMER . '</b>');
            $contents = array('form' => xtc_draw_form('affiliate', FILENAME_AFFILIATE, xtc_get_all_get_params(array('acID', 'action')) . 'acID=' . $aInfo->affiliate_id . '&action=deleteconfirm'));
            $contents[] = array('text' => TEXT_DELETE_INTRO . '<br><br><b>' . $aInfo->affiliate_firstname . ' ' . $aInfo->affiliate_lastname . '</b>');
            $contents[] = array('align' => 'center', 'text' => '<br>' . xtc_image_submit('button_delete.gif', IMAGE_DELETE) . ' <a href="' . xtc_href_link(FILENAME_AFFILIATE, xtc_get_all_get_params(array('acID', 'action')) . 'acID=' . $aInfo->affiliate_id) . '">' . xtc_image_button('button_cancel.gif', IMAGE_CANCEL) . '</a>');
            break;
        default:
            if (is_object($aInfo)) {
                $heading[] = array('text' => '<b>' . $aInfo->affiliate_firstname . ' ' . $aInfo->affiliate_lastname . '</b>');
                $contents[] = array('align' => 'center', 'text' => '<a href="' . xtc_href_link(FILENAME_AFFILIATE, xtc_get_all_get_params(array('acID', 'action')) . 'acID=' . $aInfo->affiliate_id . '&action=edit') . '">' . xtc_image_button('button_edit.gif', IMAGE_EDIT) . '</a> <a href="' . xtc_href_link(FILENAME_AFFILIATE, xtc_get_all_get_params(array('acID', 'action')) . 'acID=' . $aInfo->affiliate_id . '&action=confirm') . '">' . xtc_image_button('button_delete.gif', IMAGE_DELETE) . '</a> <a href="' . xtc_href_link(FILENAME_AFFILIATE_CONTACT, 'selected_box=affiliate&affiliate=' . $aInfo->affiliate_email_address) . '">' . xtc_image_button('button_email.gif', IMAGE_EMAIL) . '</a>');
                $affiliate_sales_raw = "select count(*) as count, sum(affiliate_value) as total, sum(affiliate_payment) as payment from " . TABLE_AFFILIATE_SALES . " a left join " . TABLE_ORDERS . " o on (a.affiliate_orders_id=o.orders_id) where o.orders_status >= " . AFFILIATE_PAYMENT_ORDER_MIN_STATUS . " and  affiliate_id = '" . $aInfo->affiliate_id . "'";
                $affiliate_sales_values = xtc_db_query($affiliate_sales_raw);
                $affiliate_sales = xtc_db_fetch_array($affiliate_sales_values);
                $contents[] = array('text' => '<br>' . TEXT_DATE_ACCOUNT_CREATED . ' ' . xtc_date_short($aInfo->date_account_created));
                $contents[] = array('text' => '' . TEXT_DATE_ACCOUNT_LAST_MODIFIED . ' ' . xtc_date_short($aInfo->date_account_last_modified));
                $contents[] = array('text' => '' . TEXT_INFO_DATE_LAST_LOGON . ' ' . xtc_date_short($aInfo->date_last_logon));
                $contents[] = array('text' => '' . TEXT_INFO_NUMBER_OF_LOGONS . ' ' . $aInfo->number_of_logons);
                $contents[] = array('text' => '' . TEXT_INFO_COMMISSION . ' ' . $aInfo->affiliate_commission_percent . ' %');
                $contents[] = array('text' => '' . TEXT_INFO_COUNTRY . ' ' . $aInfo->countries_name);
                $contents[] = array('text' => '' . TEXT_INFO_NUMBER_OF_SALES . ' ' . $affiliate_sales['count'], '');
                $contents[] = array('text' => '' . TEXT_INFO_SALES_TOTAL . ' ' . $currencies->display_price($affiliate_sales['total'], ''));
                $contents[] = array('text' => '' . TEXT_INFO_AFFILIATE_TOTAL . ' ' . $currencies->display_price($affiliate_sales['payment'], ''));
            }
            break;
    }
            <td class="pageHeading" align="right"><?php 
echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT);
?>
</td>
<?php 
if ($_GET['acID'] > 0) {
    ?>
            <td class="pageHeading" align="right"><?php 
    echo '<a href="' . xtc_href_link(FILENAME_AFFILIATE_STATISTICS, xtc_get_all_get_params(array('action'))) . '">' . xtc_image_button('button_back.gif', IMAGE_BACK) . '</a>';
    ?>
</td>
<?php 
} else {
    ?>
            <td class="pageHeading" align="right"><?php 
    echo '<a href="' . xtc_href_link(FILENAME_AFFILIATE_SUMMARY, '') . '">' . xtc_image_button('button_back.gif', IMAGE_BACK) . '</a>';
    ?>
</td>
<?php 
}
?>
          </tr>
        </table></td>
      </tr>
      <tr>
        <td><table border="0" width="100%" cellspacing="0" cellpadding="0">
          <tr>
            <td valign="top"><table border="0" width="100%" cellspacing="0" cellpadding="2">
              <tr class="dataTableHeadingRow">
                <td class="dataTableHeadingContent"><?php 
echo TABLE_HEADING_AFFILIATE_USERNAME . '/<br>' . TABLE_HEADING_IPADDRESS;
$smarty->assign('LINK_COMISSION', '<a href="javascript:popupWindow(\'' . xtc_href_link(FILENAME_AFFILIATE_HELP_8) . '\')">');
if (AFFILATE_USE_TIER == 'true') {
    $smarty->assign('AFFILIATE_USE_TIER', 'true');
    for ($tier_number = 0; $tier_number <= AFFILIATE_TIER_LEVELS; $tier_number++) {
        if (is_null($affiliate_percent_tier[$tier_number - 1])) {
            $affiliate_percent_tier[$tier_number - 1] = $affiliate_percent;
        }
        $affiliate_percent_tier_table .= '<tr>';
        $affiliate_percent_tier_table .= '<td width="15%" class="boxtext"><a href=' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_level=' . $tier_number . '&a_period=' . $a_period, 'SSL') . '>' . TEXT_COMMISSION_LEVEL_TIER . $tier_number . '</a></td>';
        $affiliate_percent_tier_table .= '<td width="15%" align="right" class="boxtext"><a href=' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_level=' . $tier_number . '&a_period=' . $a_period, 'SSL') . '>' . TEXT_COMMISSION_RATE_TIER . '</a></td>';
        $affiliate_percent_tier_table .= '<td width="5%" class="boxtext">' . xtc_round($affiliate_percent_tier[$tier_number - 1], 2) . '%' . '</td>';
        $affiliate_percent_tier_table .= '<td width="15%" align="right" class="boxtext"><a href=' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_level=' . $tier_number . '&a_period=' . $a_period, 'SSL') . '>' . TEXT_COMMISSION_TIER_COUNT . '</a></td>';
        $affiliate_percent_tier_table .= '<td width="5%" class="boxtext">' . ($affiliate_sales[$tier_number]['count'] > 0 ? $affiliate_sales[$tier_number]['count'] : '0') . '</td>';
        $affiliate_percent_tier_table .= '<td width="15%" align="right" class="boxtext"><a href=' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_level=' . $tier_number . '&a_period=' . $a_period, 'SSL') . '>' . TEXT_COMMISSION_TIER_TOTAL . '</a></td>';
        $affiliate_percent_tier_table .= '<td width="5%" class="boxtext">' . $xtPrice->xtcFormat($affiliate_sales[$tier_number]['total'], true) . '</td>';
        $affiliate_percent_tier_table .= '<td width="20%" align="right" class="boxtext"><a href=' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_level=' . $tier_number . '&a_period=' . $a_period, 'SSL') . '>' . TEXT_COMMISSION_TIER . '</a></td>';
        $affiliate_percent_tier_table .= '<td width="5%" class="boxtext">' . $xtPrice->xtcFormat($affiliate_sales[$tier_number]['payment'], true) . '</td>';
        $affiliate_percent_tier_table .= '</tr>';
    }
    $smarty->assign('affiliate_percent_tier_table', $affiliate_percent_tier_table);
}
$smarty->assign('LINK_BANNER', '<a href="' . xtc_href_link(FILENAME_AFFILIATE_BANNERS) . '">' . xtc_image_button('button_affiliate_banners.gif', IMAGE_BANNERS) . '</a>');
$smarty->assign('LINK_CLICKS', '<a href="' . xtc_href_link(FILENAME_AFFILIATE_CLICKS, '', 'SSL') . '">' . xtc_image_button('button_affiliate_clickthroughs.gif', IMAGE_CLICKTHROUGHS) . '</a>');
$smarty->assign('LINK_SALES', '<a href="' . xtc_href_link(FILENAME_AFFILIATE_SALES, 'a_period=' . $a_period, 'SSL') . '">' . xtc_image_button('button_affiliate_sales.gif', IMAGE_SALES) . '</a>');
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/affiliate_summary.html');
$smarty->assign('main_content', $main_content);
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$smarty->display(CURRENT_TEMPLATE . '/index.html');
        "useraction": "continue",
        "showLoadingIndicator": "true",
        "showPuiOnSandbox": "true"
      });
      </script>' . "\n";
            $smarty->assign('javascript', $javascript);
            if (isset($_GET['payment_error'])) {
                $error = $paypal->get_error();
                $smarty->assign('error', $error['error']);
            }
            $cancel_link = xtc_href_link(FILENAME_LOGOFF, '', 'SSL');
            if (isset($_SESSION['customer_id'])) {
                $cancel_link = xtc_href_link(FILENAME_ACCOUNT_HISTORY_INFO, 'order_id=' . (int) $_GET['oID'], 'SSL');
            }
            $smarty->assign('BUTTON_BACK', '<a href="' . $cancel_link . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
            $smarty->assign('BUTTON_CONTINUE', '<a href="#" onclick="ppp.doCheckout(); return false;">' . xtc_image_button('button_confirm.gif', IMAGE_BUTTON_CONFIRM_ORDER) . '</a>');
            $main_content = $smarty->fetch(DIR_FS_EXTERNAL . 'paypal/templates/ppp.html');
            $smarty->assign('main_content', $main_content);
            $smarty->assign('language', $_SESSION['language']);
            $smarty->caching = 0;
            if (!defined('RM')) {
                //$smarty->load_filter('output', 'note');
                $smarty->display(CURRENT_TEMPLATE . '/index.html');
            }
        }
    } else {
        die('Direct Access to this location is not allowed.');
    }
} else {
    die('Direct Access to this location is not allowed.');
}
    $smarty->assign('delete', '1');
    $smarty->assign('ADDRESS', xtc_address_label($_SESSION['customer_id'], $_GET['delete'], true, ' ', '<br />'));
    $smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK, '', 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
    $smarty->assign('BUTTON_DELETE', '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK_PROCESS, 'delete=' . $_GET['delete'] . '&action=deleteconfirm', 'SSL') . '">' . xtc_image_button('button_delete.gif', IMAGE_BUTTON_DELETE) . '</a>');
} else {
    include DIR_WS_MODULES . 'address_book_details.php';
    if (isset($_GET['edit']) && is_numeric($_GET['edit'])) {
        $smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_ADDRESS_BOOK, '', 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
        $smarty->assign('BUTTON_UPDATE', xtc_draw_hidden_field('action', 'update') . xtc_draw_hidden_field('edit', $_GET['edit']) . xtc_image_submit('button_update.gif', IMAGE_BUTTON_UPDATE));
    } else {
        if (sizeof($_SESSION['navigation']->snapshot) > 0) {
            $back_link = xtc_href_link($_SESSION['navigation']->snapshot['page'], xtc_array_to_string($_SESSION['navigation']->snapshot['get'], array(xtc_session_name())), $_SESSION['navigation']->snapshot['mode']);
        } else {
            $back_link = xtc_href_link(FILENAME_ADDRESS_BOOK, '', 'SSL');
        }
        $smarty->assign('BUTTON_BACK', '<a href="' . $back_link . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
        $smarty->assign('BUTTON_UPDATE', xtc_draw_hidden_field('action', 'process') . xtc_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE));
    }
    $smarty->assign('FORM_END', '</form>');
}
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/address_book_process.html');
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
include 'includes/application_bottom.php';
//$breadcrumb->add(NAVBAR_TITLE_1_CHECKOUT_SHIPPING_ADDRESS, xtc_href_link(FILENAME_CHECKOUT_SHIPPING, '', 'SSL'));
$breadcrumb->add(NAVBAR_TITLE_1_CHECKOUT_SHIPPING_ADDRESS, xtc_href_link($link_checkout_shipping, $params, 'SSL'));
// EOF - Tomcraft - 2009-10-03 - Paypal Express Modul
$breadcrumb->add(NAVBAR_TITLE_2_CHECKOUT_SHIPPING_ADDRESS, xtc_href_link(FILENAME_CHECKOUT_SHIPPING_ADDRESS, $params, 'SSL'));
$addresses_count = xtc_count_customer_address_book_entries();
require DIR_WS_INCLUDES . 'header.php';
$smarty->assign('FORM_ACTION', xtc_draw_form('checkout_address', xtc_href_link(FILENAME_CHECKOUT_SHIPPING_ADDRESS, $params, 'SSL'), 'post', 'onsubmit="return check_form_optional(checkout_address);"'));
if ($messageStack->size('checkout_address') > 0) {
    $smarty->assign('error', $messageStack->output('checkout_address'));
}
if ($process == false) {
    $smarty->assign('ADDRESS_LABEL', xtc_address_label($_SESSION['customer_id'], $_SESSION['sendto'], true, ' ', '<br />'));
    include DIR_WS_MODULES . 'checkout_address_layout.php';
}
if ($addresses_count < MAX_ADDRESS_BOOK_ENTRIES) {
    require DIR_WS_MODULES . 'checkout_new_address.php';
}
$smarty->assign('BUTTON_CONTINUE', xtc_draw_hidden_field('action', 'submit') . xtc_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE));
if ($process == true) {
    $smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_CHECKOUT_SHIPPING_ADDRESS, $params, 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
}
$smarty->assign('FORM_END', '</form>');
$smarty->assign('language', $_SESSION['language']);
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/checkout_shipping_address.html');
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
include 'includes/application_bottom.php';
            </table></td>
<?php 
    $heading = array();
    $contents = array();
    switch ($_GET['action']) {
        case 'delete':
            $heading[] = array('text' => '<b>' . TEXT_INFO_HEADING_DELETE_PAYMENT . '</b>');
            $contents = array('form' => xtc_draw_form('payment', FILENAME_AFFILIATE_PAYMENT, xtc_get_all_get_params(array('pID', 'action')) . 'pID=' . $pInfo->affiliate_payment_id . '&action=deleteconfirm'));
            $contents[] = array('text' => TEXT_INFO_DELETE_INTRO . '<br>');
            $contents[] = array('align' => 'center', 'text' => '<br>' . xtc_image_submit('button_delete.gif', IMAGE_DELETE) . ' <a href="' . xtc_href_link(AFFILIATE_PAYMENT, xtc_get_all_get_params(array('pID', 'action')) . 'pID=' . $pInfo->affiliate_payment_id) . '">' . xtc_image_button('button_cancel.gif', IMAGE_CANCEL) . '</a>');
            break;
        default:
            if (is_object($pInfo)) {
                $heading[] = array('text' => '<b>[' . $pInfo->affiliate_payment_id . ']&nbsp;&nbsp;' . xtc_datetime_short($pInfo->affiliate_payment_date) . '</b>');
                $contents[] = array('align' => 'center', 'text' => '<a href="' . xtc_href_link(FILENAME_AFFILIATE_PAYMENT, xtc_get_all_get_params(array('pID', 'action')) . 'pID=' . $pInfo->affiliate_payment_id . '&action=edit') . '">' . xtc_image_button('button_edit.gif', IMAGE_EDIT) . '</a> <a href="' . xtc_href_link(FILENAME_AFFILIATE_PAYMENT, xtc_get_all_get_params(array('pID', 'action')) . 'pID=' . $pInfo->affiliate_payment_id . '&action=delete') . '">' . xtc_image_button('button_delete.gif', IMAGE_DELETE) . '</a>');
                $contents[] = array('align' => 'center', 'text' => '<a href="' . xtc_href_link(FILENAME_AFFILIATE_INVOICE, 'pID=' . $pInfo->affiliate_payment_id) . '" TARGET="_blank">' . xtc_image_button('button_invoice.gif', IMAGE_ORDERS_INVOICE) . '</a> ');
            }
            break;
    }
    if (xtc_not_null($heading) && xtc_not_null($contents)) {
        echo '            <td  width="25%" valign="top">' . "\n";
        $box = new box();
        echo $box->infoBox($heading, $contents);
        echo '            </td>' . "\n";
    }
    ?>
          </tr>
        </table></td>
      </tr>
<?php 
}
   based on:
   (c) 2003 OSC-Affiliate (affiliate_signup_ok.php, v 1.6 2003/02/23);
   http://oscaffiliate.sourceforge.net/

   Contribution based on:

   osCommerce, Open Source E-Commerce Solutions
   http://www.oscommerce.com

   Copyright (c) 2002 - 2003 osCommerce

   Released under the GNU General Public License
   ---------------------------------------------------------------------------*/
require 'includes/application_top.php';
// include needed functions
require_once DIR_FS_INC . 'xtc_image_button.inc.php';
// create smarty elements
$smarty = new Smarty();
// include boxes
require DIR_FS_CATALOG . 'templates/' . CURRENT_TEMPLATE . '/source/boxes.php';
$breadcrumb->add(NAVBAR_TITLE, xtc_href_link(FILENAME_AFFILIATE, '', 'SSL'));
$breadcrumb->add(NAVBAR_TITLE_SIGNUP_OK);
require DIR_WS_INCLUDES . 'header.php';
$smarty->assign('LINK_SUMMARY', '<a href="' . xtc_href_link(FILENAME_AFFILIATE_SUMMARY, '', 'SSL') . '">' . xtc_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>');
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/affiliate_signup_ok.html');
$smarty->assign('main_content', $main_content);
$smarty->assign('language', $_SESSION['language']);
$smarty->caching = 0;
$smarty->display(CURRENT_TEMPLATE . '/index.html');
    //if ($_GET['info_message'])
    //  $smarty->assign('info_message', str_replace('+', ' ', encode_htmlspecialchars($_GET['info_message'])));
    $smarty->assign('cart_empty', $cart_empty);
    $smarty->assign('BUTTON_CONTINUE', '<a href="' . xtc_href_link(FILENAME_DEFAULT) . '">' . xtc_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>');
}
if (isset($_GET['info_message'])) {
    $smarty->assign('info_message', str_replace('+', ' ', encode_htmlspecialchars($_GET['info_message'])));
}
//BOF - web28 - 2011-05-15 - new continue shopping link
if (!empty($_SERVER['HTTP_REFERER']) && strpos($_SERVER['HTTP_REFERER'], FILENAME_SHOPPING_CART) === false && strpos($_SERVER['HTTP_REFERER'], 'in_cart') === false) {
    $_SESSION['continue_link'] = $_SERVER['HTTP_REFERER'];
}
if (!empty($_SESSION['continue_link'])) {
    $smarty->assign('CONTINUE_LINK', $_SESSION['continue_link']);
}
$smarty->assign('BUTTON_CONTINUE_SHOPPING', xtc_image_button('button_continue_shopping.gif', IMAGE_BUTTON_CONTINUE_SHOPPING));
//EOF - web28 - 2011-05-15 - new continue shopping link
$smarty->assign('language', $_SESSION['language']);
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/shopping_cart.html');
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
// BOF - Tomcraft - 2009-10-03 - Paypal Express Modul
if (!isset($_SESSION['paypal_warten'])) {
    unset($_SESSION['nvpReqArray']);
    unset($_SESSION['reshash']['FORMATED_ERRORS']);
    unset($_SESSION['reshash']);
    unset($_SESSION['tmp_oID']);
 /**
  * buildDataArray
  *
  * @param array $array
  * @return array
  */
 function buildDataArray(&$array, $image = 'thumbnail')
 {
     global $xtPrice, $main;
     $img_data = xtc_db_fetch_array(xtc_db_query("SELECT products_image_title, products_image_alt FROM " . TABLE_PRODUCTS . " WHERE products_id = '" . $array['products_id'] . "' LIMIT 1"));
     //get tax rate
     $tax_rate = isset($xtPrice->TAX[$array['products_tax_class_id']]) ? $xtPrice->TAX[$array['products_tax_class_id']] : 0;
     //DokuMan: set Undefined index
     //get products price , returns array
     $products_price = $xtPrice->xtcGetPrice($array['products_id'], $format = true, 1, $array['products_tax_class_id'], $array['products_price'], 1);
     //create buy now button
     $buy_now = '';
     if ($_SESSION['customers_status']['customers_status_show_price'] != '0' && defined('SHOW_BUTTON_BUY_NOW') && SHOW_BUTTON_BUY_NOW != 'false') {
         if ($_SESSION['customers_status']['customers_fsk18'] == '1') {
             if (isset($array['products_fsk18']) && $array['products_fsk18'] == '0') {
                 $buy_now = $this->getBuyNowButton($array['products_id'], $array['products_name']);
             }
         } else {
             $buy_now = $this->getBuyNowButton($array['products_id'], $array['products_name']);
         }
     }
     //get $shipping_status_name, $shipping_status_image
     // BOF - Tutorial: Umsetzung der EU-Verbraucherrichtlinie vom 13.06.2014
     /*
     if (isset($array['products_shippingtime']) && ACTIVATE_SHIPPING_STATUS == 'true') {
       $shipping_status_name = $main->getShippingStatusName($array['products_shippingtime']);
       $shipping_status_image = $main->getShippingStatusImage($array['products_shippingtime']);
     } else {
       $shipping_status_name = '';
       $shipping_status_image = '';
     }
     */
     $shipping_status_name = $shipping_status_image = $shipping_status_link = '';
     if (isset($array['products_shippingtime']) && ACTIVATE_SHIPPING_STATUS == 'true') {
         $shipping_status_name = $main->getShippingStatusName($array['products_shippingtime']);
         $shipping_status_image = $main->getShippingStatusImage($array['products_shippingtime']);
         $shipping_status_link = $main->getShippingStatusName($array['products_shippingtime'], true);
     }
     // EOF - Tutorial: Umsetzung der EU-Verbraucherrichtlinie vom 13.06.2014
     //get products image, imageinfo array
     $products_image = $this->productImage($array['products_image'], $image);
     $p_img = substr($products_image, strlen(DIR_WS_BASE));
     //web28 - 2011-01-24 - FIX DIR_WS_BASE
     $img_attr = '';
     if (file_exists($p_img)) {
         list($width, $height, $type, $img_attr) = getimagesize($p_img);
     }
     //products data array
     $productData = array('PRODUCTS_NAME' => $array['products_name'], 'COUNT' => isset($array['ID']) ? $array['ID'] : 0, 'PRODUCTS_ID' => $array['products_id'], 'PRODUCTS_MODEL' => isset($array['products_model']) ? $array['products_model'] : '', 'PRODUCTS_EAN' => isset($array['products_ean']) ? $array['products_ean'] : '', 'PRODUCTS_MANUFACTURERS_MODEL' => isset($array['products_manufacturers_model']) ? $array['products_manufacturers_model'] : '', 'PRODUCTS_VPE' => $main->getVPEtext($array, $products_price['plain']), 'PRODUCTS_IMAGE' => $products_image, 'PRODUCTS_IMAGE_SIZE' => $img_attr, 'PRODUCTS_IMAGE_TITLE' => !empty($img_data['products_image_title']) ? $img_data['products_image_title'] : str_replace('"', '', $array['products_name']), 'PRODUCTS_IMAGE_ALT' => !empty($img_data['products_image_alt']) ? $img_data['products_image_alt'] : str_replace('"', '', $array['products_name']), 'PRODUCTS_LINK' => xtc_href_link(FILENAME_PRODUCT_INFO, xtc_product_link($array['products_id'], $array['products_name'])), 'PRODUCTS_PRICE' => $products_price['formated'], 'PRODUCTS_TAX_INFO' => $main->getTaxInfo($tax_rate), 'PRODUCTS_SHIPPING_LINK' => $main->getShippingLink(), 'PRODUCTS_BUTTON_BUY_NOW' => $buy_now, 'PRODUCTS_BUTTON_PRODUCT_MORE' => '<a href="' . xtc_href_link(FILENAME_PRODUCT_INFO, xtc_product_link($array['products_id'], $array['products_name'])) . '">' . xtc_image_button('button_product_more.gif', IMAGE_BUTTON_PRODUCT_MORE) . '</a>', 'PRODUCTS_SHIPPING_NAME' => $shipping_status_name, 'PRODUCTS_SHIPPING_IMAGE' => $shipping_status_image, 'PRODUCTS_SHIPPING_NAME_LINK' => $shipping_status_link, 'PRODUCTS_DESCRIPTION' => isset($array['products_description']) ? $array['products_description'] : '', 'PRODUCTS_QUANTITY' => isset($array['products_quantity']) ? $array['products_quantity'] : '', 'PRODUCTS_WEIGHT' => $array['products_weight'], 'PRODUCTS_EXPIRES' => isset($array['expires_date']) ? $array['expires_date'] : 0, 'PRODUCTS_CATEGORY_URL' => isset($array['cat_url']) ? $array['cat_url'] : '', 'PRODUCTS_SHORT_DESCRIPTION' => isset($array['products_short_description']) ? $array['products_short_description'] : '', 'PRODUCTS_FSK18' => isset($array['products_fsk18']) ? $array['products_fsk18'] : 0, 'PRODUCTS_BUTTON_DETAILS' => '<a href="' . xtc_href_link(FILENAME_PRODUCT_INFO, xtc_product_link($array['products_id'], $array['products_name'])) . '">' . xtc_image_button('button_product_more.gif', $array['products_name'] . TEXT_NOW) . '</a>');
     return $productData;
 }
    /* Re-Post all POST'ed variables */
    reset($_POST);
    while (list($key, $value) = each($_POST)) {
        if (!is_array($_POST[$key])) {
            echo xtc_draw_hidden_field($key, htmlspecialchars(stripslashes($value)));
        }
    }
    ?>
                <table border="0" width="100%" cellpadding="0" cellspacing="2">
                  <tr>
                    <td><?php 
    echo xtc_image_submit('button_back.gif', IMAGE_BACK, 'name="back"');
    ?>
</td>
                    <td align="right"><?php 
    echo '<a href="' . xtc_href_link(FILENAME_AFFILIATE_CONTACT) . '">' . xtc_image_button('button_cancel.gif', IMAGE_CANCEL) . '</a> ' . xtc_image_submit('button_send_mail.gif', IMAGE_SEND_EMAIL);
    ?>
</td>
                  </tr>
                </table></td>
              </tr>
            </table></td>
          </form></tr>
<?php 
} else {
    ?>
          <tr><?php 
    echo xtc_draw_form('mail', FILENAME_AFFILIATE_CONTACT, 'action=preview');
    ?>
            <td><table border="0" cellpadding="0" cellspacing="2">
              <tr>
if (file_exists($pdffile)) {
    $pdflink = xtc_href_link(FILENAME_PDFBILL_DISPLAY, 'oID=' . $_GET['order_id']);
    $pdflink = sprintf('<a href="%s">' . PDFBILL_DOWNLOAD_INVOICE . '</a>', $pdflink);
    $smarty->assign('IPDFBILL_INVOICE_DOWNLOAD', $pdflink);
}
// --- eof -- ipdfbill --------
// Stuff
$smarty->assign('ORDER_NUMBER', $order->info['order_id']);
//DokuMan - 2011-08-31 - fix order_id assignment
$smarty->assign('ORDER_DATE', xtc_date_long($order->info['date_purchased']));
$smarty->assign('ORDER_STATUS', $order->info['orders_status']);
$smarty->assign('BILLING_LABEL', xtc_address_format($order->billing['format_id'], $order->billing, 1, ' ', '<br />'));
$smarty->assign('PRODUCTS_EDIT', xtc_href_link(FILENAME_SHOPPING_CART, '', 'NONSSL'));
// web28 - 2011-04-14 - change SSL -> NONSSL
$smarty->assign('SHIPPING_ADDRESS_EDIT', xtc_href_link(FILENAME_CHECKOUT_SHIPPING_ADDRESS, '', 'SSL'));
$smarty->assign('BILLING_ADDRESS_EDIT', xtc_href_link(FILENAME_CHECKOUT_PAYMENT_ADDRESS, '', 'SSL'));
$smarty->assign('BUTTON_PRINT', '<a style="cursor:pointer" onclick="javascript:window.open(\'' . xtc_href_link(FILENAME_PRINT_ORDER, 'oID=' . $order->info['order_id']) . '\', \'popup\', \'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=yes,copyhistory=no, width=640, height=600\')">' . xtc_image_button('button_print.gif', TEXT_PRINT) . '</a>');
$from_history = preg_match("/page=/i", xtc_get_all_get_params());
// referer from account_history yes/no
$back_to = $from_history ? FILENAME_ACCOUNT_HISTORY : FILENAME_ACCOUNT;
// if from account_history => return to account_history
$smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link($back_to, xtc_get_all_get_params(array('order_id')), 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
$smarty->assign('language', $_SESSION['language']);
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/account_history_info.html');
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
include 'includes/application_bottom.php';
         $heading[] = array('text' => '<b>' . $abInfo->affiliate_banners_title . '</b>');
         $contents = array('form' => xtc_draw_form('affiliate_banners', FILENAME_AFFILIATE_BANNER_MANAGER, 'page=' . $_GET['page'] . '&abID=' . $abInfo->affiliate_banners_id . '&action=deleteconfirm'));
         $contents[] = array('text' => TEXT_INFO_DELETE_INTRO);
         $contents[] = array('text' => '<br><b>' . $abInfo->affiliate_banners_title . '</b>');
         if ($abInfo->affiliate_banners_image) {
             $contents[] = array('text' => '<br>' . xtc_draw_checkbox_field('delete_image', 'on', true) . ' ' . TEXT_INFO_DELETE_IMAGE);
         }
         $contents[] = array('align' => 'center', 'text' => '<br>' . xtc_image_submit('button_delete.gif', IMAGE_DELETE) . '&nbsp;<a href="' . xtc_href_link(FILENAME_AFFILIATE_BANNER_MANAGER, 'page=' . $_GET['page'] . '&abID=' . $_GET['abID']) . '">' . xtc_image_button('button_cancel.gif', IMAGE_CANCEL) . '</a>');
         break;
     default:
         if (is_object($abInfo)) {
             $sql = "select products_name from " . TABLE_PRODUCTS_DESCRIPTION . " where products_id = '" . $abInfo->affiliate_products_id . "' and language_id = '" . $_SESSION['languages_id'] . "'";
             $product_description_query = xtc_db_query($sql);
             $product_description = xtc_db_fetch_array($product_description_query);
             $heading[] = array('text' => '<b>' . $abInfo->affiliate_banners_title . '</b>');
             $contents[] = array('align' => 'center', 'text' => '<a href="' . xtc_href_link(FILENAME_AFFILIATE_BANNER_MANAGER, 'page=' . $_GET['page'] . '&abID=' . $abInfo->affiliate_banners_id . '&action=new') . '">' . xtc_image_button('button_edit.gif', IMAGE_EDIT) . '</a> <a href="' . xtc_href_link(FILENAME_AFFILIATE_BANNER_MANAGER, 'page=' . $_GET['page'] . '&abID=' . $abInfo->affiliate_banners_id . '&action=delete') . '">' . xtc_image_button('button_delete.gif', IMAGE_DELETE) . '</a>');
             $contents[] = array('text' => $product_description['products_name']);
             $contents[] = array('text' => '<br>' . TEXT_BANNERS_DATE_ADDED . ' ' . xtc_date_short($abInfo->affiliate_date_added));
             $contents[] = array('text' => '' . sprintf(TEXT_BANNERS_STATUS_CHANGE, xtc_date_short($abInfo->affiliate_date_status_change)));
         }
         break;
 }
 if (xtc_not_null($heading) && xtc_not_null($contents)) {
     echo '            <td width="25%" valign="top">' . "\n";
     $box = new box();
     echo $box->infoBox($heading, $contents);
     echo '            </td>' . "\n";
 }
 ?>
       </tr>
     </table></td>
        } else {
            $icon = xtc_image(DIR_WS_CATALOG . 'admin/images/icons/icon_' . str_replace('.', '', strstr($content_data['content_file'], '.')) . '.gif');
        }
        if ($content_data['content_link'] != '') {
            $filename = '<a href="' . $content_data['content_link'] . '" target="new">';
        }
        $filename .= $content_data['content_name'];
        if ($content_data['content_link'] != '') {
            $filename .= '</a>';
        }
        $button = '';
        if ($content_data['content_link'] == '') {
            if (preg_match('/.html/i', $content_data['content_file']) or preg_match('/.htm/i', $content_data['content_file']) or preg_match('/.txt/i', $content_data['content_file']) or preg_match('/.bmp/i', $content_data['content_file']) or preg_match('/.jpg/i', $content_data['content_file']) or preg_match('/.gif/i', $content_data['content_file']) or preg_match('/.png/i', $content_data['content_file']) or preg_match('/.tif/i', $content_data['content_file'])) {
                // Hetfield - 2009-08-19 - replaced deprecated function eregi with preg_match to be ready for PHP >= 5.3
                //BOF - Tomcraft - 2010-04-03 - unified popups with scrollbars and make them resizable
                //$button = '<a style="cursor:pointer" onclick="javascript:window.open(\''.xtc_href_link(FILENAME_MEDIA_CONTENT, 'coID='.$content_data['content_id']).'\', \'popup\', \'toolbar=0, width=640, height=600\')">'.xtc_image_button('button_view.gif', TEXT_VIEW).'</a>';
                $button = '<a style="cursor:pointer" onclick="javascript:window.open(\'' . xtc_href_link(FILENAME_MEDIA_CONTENT, 'coID=' . $content_data['content_id']) . '\', \'popup\', \'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=yes,copyhistory=no, width=640, height=600\')">' . xtc_image_button('button_view.gif', TEXT_VIEW) . '</a>';
                //BOF - Tomcraft - 2010-04-03 - unified popups with scrollbars and make them resizable
            } else {
                $button = '<a href="' . xtc_href_link('media/products/' . $content_data['content_file']) . '">' . xtc_image_button('button_download.gif', TEXT_DOWNLOAD) . '</a>';
            }
        }
        $module_content[] = array('ICON' => $icon, 'FILENAME' => $filename, 'DESCRIPTION' => $content_data['file_comment'], 'FILESIZE' => xtc_filesize($content_data['content_file']), 'BUTTON' => $button, 'HITS' => $content_data['content_read']);
    }
    $module_smarty->assign('language', $_SESSION['language']);
    $module_smarty->assign('module_content', $module_content);
    // set cache ID
    $module_smarty->caching = 0;
    $module = $module_smarty->fetch(CURRENT_TEMPLATE . '/module/products_media.html');
    $info_smarty->assign('MODULE_products_media', $module);
}
            } else {
                xtc_redirect(xtc_href_link(FILENAME_DEFAULT), 'NONSSL');
            }
        }
    }
}
$breadcrumb->add(NAVBAR_TITLE_LOGIN, xtc_href_link(FILENAME_LOGIN, '', 'SSL'));
require DIR_WS_INCLUDES . 'header.php';
if (isset($_GET['info_message'])) {
    $info_message = $_GET['info_message'];
}
$smarty->assign('info_message', $info_message);
$smarty->assign('account_option', ACCOUNT_OPTIONS);
$smarty->assign('BUTTON_NEW_ACCOUNT', '<a href="' . xtc_href_link(FILENAME_CREATE_ACCOUNT, '', 'SSL') . '">' . xtc_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>');
$smarty->assign('BUTTON_LOGIN', xtc_image_submit('button_login.gif', IMAGE_BUTTON_LOGIN));
$smarty->assign('BUTTON_GUEST', '<a href="' . xtc_href_link(FILENAME_CREATE_GUEST_ACCOUNT, '', 'SSL') . '">' . xtc_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>');
// BOC added review_prod_id to be able to redirect to product_reviews_write when coming from reviews button, and order_id to redirect to account_history_info when coming from Link in change_order_mail, noRiddle
//$smarty->assign('FORM_ACTION', xtc_draw_form('login', xtc_href_link(FILENAME_LOGIN, 'action=process', 'SSL')));
if (isset($_GET['review_prod_id'])) {
    $smarty->assign('FORM_ACTION', xtc_draw_form('login', xtc_href_link(FILENAME_LOGIN, 'action=process&review_prod_id=' . (int) $_GET['review_prod_id'], 'SSL')));
} elseif (isset($_GET['order_id'])) {
    $smarty->assign('FORM_ACTION', xtc_draw_form('login', xtc_href_link(FILENAME_LOGIN, 'action=process&order_id=' . (int) $_GET['order_id'], 'SSL')));
} else {
    $smarty->assign('FORM_ACTION', xtc_draw_form('login', xtc_href_link(FILENAME_LOGIN, 'action=process', 'SSL')));
}
// EOC added review_prod_id and order_id, noRiddle
$smarty->assign('INPUT_MAIL', xtc_draw_input_field('email_address'));
$smarty->assign('INPUT_PASSWORD', xtc_draw_password_field('password'));
$smarty->assign('LINK_LOST_PASSWORD', xtc_href_link(FILENAME_PASSWORD_DOUBLE_OPT, '', 'SSL'));
$smarty->assign('FORM_END', '</form>');
$smarty->assign('language', $_SESSION['language']);
        if (xtc_not_null($history['delivery_name'])) {
            $order_type = TEXT_ORDER_SHIPPED_TO;
            $order_name = $history['delivery_name'];
        } else {
            $order_type = TEXT_ORDER_BILLED_TO;
            $order_name = $history['billing_name'];
        }
        $module_content[] = array('ORDER_ID' => $history['orders_id'], 'ORDER_STATUS' => $history['orders_status_name'], 'ORDER_DATE' => xtc_date_long($history['date_purchased']), 'ORDER_PRODUCTS' => $products['count'], 'ORDER_TOTAL' => strip_tags($history['order_total']), 'ORDER_BUTTON' => '<a href="' . xtc_href_link(FILENAME_ACCOUNT_HISTORY_INFO, 'page=' . (empty($_GET['page']) ? "1" : (int) $_GET['page']) . '&order_id=' . $history['orders_id'], 'SSL') . '">' . xtc_image_button('small_view.gif', SMALL_IMAGE_BUTTON_VIEW) . '</a>');
        require_once DIR_FS_INC . 'xtc_get_tracking_link.php';
        $module_content[count($module_content) - 1]['TRACKING_LINKS'] = xtc_get_tracking_link($history['orders_id']);
    }
}
if ($orders_total > 0) {
    $smarty->assign('SPLIT_BAR', '
	          <div class="smallText" style="clear:both;"><div style="float:left;">' . $history_split->display_count(TEXT_DISPLAY_NUMBER_OF_ORDERS) . '</div>
              <div align="right">' . TEXT_RESULT_PAGE . ' ' . $history_split->display_links(MAX_DISPLAY_PAGE_LINKS, xtc_get_all_get_params(array('page', 'info', 'x', 'y'))) . '</div>
              </div>');
}
$smarty->assign('order_content', $module_content);
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_ACCOUNT, '', 'SSL') . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
$smarty->caching = 0;
$main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/account_history.html');
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('main_content', $main_content);
$smarty->caching = 0;
if (!defined('RM')) {
    $smarty->load_filter('output', 'note');
}
$smarty->display(CURRENT_TEMPLATE . '/index.html');
include 'includes/application_bottom.php';
   (c) 2000-2001 The Exchange Project  (earlier name of osCommerce)
   (c) 2002-2003 osCommerce(product_reviews.php,v 1.47 2003/02/13); www.oscommerce.com
   (c) 2003 nextcommerce (product_reviews.php,v 1.12 2003/08/17); www.nextcommerce.org
   (c) 2006 XT-Commerce

   Released under the GNU General Public License
   ---------------------------------------------------------------------------------------*/
// create smarty elements
$module_smarty = new Smarty();
$module_smarty->assign('tpl_path', DIR_WS_BASE . 'templates/' . CURRENT_TEMPLATE . '/');
// include needed functions
require_once DIR_FS_INC . 'xtc_row_number_format.inc.php';
require_once DIR_FS_INC . 'xtc_date_short.inc.php';
if (isset($products_options_data)) {
    $info_smarty->assign('options', $products_options_data);
}
if ($_SESSION['customers_status']['customers_status_write_reviews'] == 1) {
    $button_preview = '<a href="' . xtc_href_link(FILENAME_PRODUCT_REVIEWS_WRITE, 'products_id=' . $product->data['products_id']) . '">' . xtc_image_button('button_write_review.gif', IMAGE_BUTTON_WRITE_REVIEW) . '</a>';
} else {
    $button_preview = '';
}
$module_smarty->assign('BUTTON_WRITE', $button_preview);
$module_smarty->assign('language', $_SESSION['language']);
$module_smarty->caching = 0;
if ($_SESSION['customers_status']['customers_status_read_reviews'] == 1 && $product->getReviewsCount() > 0 || $_SESSION['customers_status']['customers_status_write_reviews'] == 1) {
    $module_smarty->assign('module_content', $product->getReviews());
    $module = $module_smarty->fetch(CURRENT_TEMPLATE . '/module/products_reviews.html');
} else {
    $module = '';
}
$info_smarty->assign('MODULE_products_reviews', $module);
    $smarty->assign('IP_LOG', 'true');
    if ($_SERVER['HTTP_X_FORWARDED_FOR']) {
        $customers_ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
    } else {
        $customers_ip = $_SERVER['REMOTE_ADDR'];
    }
    $smarty->assign('CUSTOMERS_IP', $customers_ip);
}
$smarty->assign('FORM_SHIPPING_ACTION', xtc_draw_form('checkout_shipping', xtc_href_link(FILENAME_PAYPAL_CHECKOUT, '', 'SSL')) . xtc_draw_hidden_field('action', 'process'));
$smarty->assign('ADDRESS_SHIPPING_LABEL', xtc_address_label($_SESSION['customer_id'], $_SESSION['sendto'], true, ' ', '<br />'));
$smarty->assign('BUTTON_CONTINUE', xtc_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE));
$smarty->assign('FORM_END', '</form>');
$smarty->assign('ADDRESS_PAYMENT_LABEL', xtc_address_label($_SESSION['customer_id'], $_SESSION['billto'], true, ' ', '<br />'));
if (PAYPAL_EXPRESS_ADDRESS_CHANGE == 'true') {
    $smarty->assign('BUTTON_SHIPPING_ADDRESS', '<a href="' . xtc_href_link(FILENAME_CHECKOUT_SHIPPING_ADDRESS, '', 'SSL') . '">' . xtc_image_button('button_change_address.gif', IMAGE_BUTTON_CHANGE_ADDRESS) . '</a>');
    $smarty->assign('BUTTON_PAYMENT_ADDRESS', '<a href="' . xtc_href_link(FILENAME_CHECKOUT_PAYMENT_ADDRESS, '', 'SSL') . '">' . xtc_image_button('button_change_address.gif', IMAGE_BUTTON_CHANGE_ADDRESS) . '</a>');
}
$module_smarty = new Smarty();
if (xtc_count_shipping_modules() > 0) {
    $showtax = $_SESSION['customers_status']['customers_status_show_price_tax'];
    $module_smarty->assign('FREE_SHIPPING', $free_shipping);
    # free shipping or not...
    if ($free_shipping == true) {
        $module_smarty->assign('FREE_SHIPPING_TITLE', FREE_SHIPPING_TITLE);
        $module_smarty->assign('FREE_SHIPPING_DESCRIPTION', sprintf(FREE_SHIPPING_DESCRIPTION, $xtPrice->xtcFormat(MODULE_ORDER_TOTAL_SHIPPING_FREE_SHIPPING_OVER, true, 0, true)) . xtc_draw_hidden_field('shipping', 'free_free'));
        $module_smarty->assign('FREE_SHIPPING_ICON', $quotes[$i]['icon']);
    } else {
        $radio_buttons = 0;
        #loop through installed shipping methods...
        //BOF - DokuMan - 2011-12-19 - precount for performance
        //for($i = 0, $n = sizeof($quotes); $i < $n; $i ++) {
if (!xtc_db_num_rows($reviews_query)) {
    xtc_redirect(xtc_href_link(FILENAME_REVIEWS));
}
$reviews = xtc_db_fetch_array($reviews_query);
$breadcrumb->add(NAVBAR_TITLE_PRODUCT_REVIEWS, xtc_href_link(FILENAME_PRODUCT_REVIEWS, $get_params));
xtc_db_query("update " . TABLE_REVIEWS . " set reviews_read = reviews_read+1 where reviews_id = '" . $reviews['reviews_id'] . "'");
$reviews_text = xtc_break_string(encode_htmlspecialchars($reviews['reviews_text']), 60, '-<br />');
require DIR_WS_INCLUDES . 'header.php';
$smarty->assign('PRODUCTS_NAME', $reviews['products_name']);
$smarty->assign('AUTHOR', $reviews['customers_name']);
$smarty->assign('DATE', xtc_date_long($reviews['date_added']));
$smarty->assign('REVIEWS_TEXT', nl2br($reviews_text));
$smarty->assign('RATING', xtc_image('templates/' . CURRENT_TEMPLATE . '/img/stars_' . $reviews['reviews_rating'] . '.gif', sprintf(TEXT_OF_5_STARS, $reviews['reviews_rating'])));
$smarty->assign('PRODUCTS_LINK', xtc_href_link(FILENAME_PRODUCT_INFO, xtc_product_link($reviews['products_id'], $reviews['products_name'])));
$smarty->assign('BUTTON_BACK', '<a href="' . xtc_href_link(FILENAME_PRODUCT_REVIEWS, $get_params) . '">' . xtc_image_button('button_back.gif', IMAGE_BUTTON_BACK) . '</a>');
$smarty->assign('BUTTON_BUY_NOW', '<a href="' . xtc_href_link(FILENAME_DEFAULT, 'action=buy_now&BUYproducts_id=' . $reviews['products_id']) . '">' . xtc_image_button('button_in_cart.gif', IMAGE_BUTTON_IN_CART) . '</a>');
$smarty->assign('IMAGE', '<a href="javascript:popupImageWindow(\'' . xtc_href_link(FILENAME_POPUP_IMAGE, 'pID=' . $reviews['products_id']) . '\')">' . xtc_image(DIR_WS_THUMBNAIL_IMAGES . $reviews['products_image'], $reviews['products_name'], '', '', 'align="center" hspace="5" vspace="5"') . '<br /></a>');
$smarty->assign('language', $_SESSION['language']);
// set cache ID
if (!CacheCheck()) {
    $smarty->caching = 0;
    $main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/product_reviews_info.html');
} else {
    $smarty->caching = 1;
    $smarty->cache_lifetime = CACHE_LIFETIME;
    $smarty->cache_modified_check = CACHE_CHECK;
    $cache_id = $_SESSION['language'] . $reviews['reviews_id'];
    $main_content = $smarty->fetch(CURRENT_TEMPLATE . '/module/product_reviews_info.html', $cache_id);
}
$smarty->assign('language', $_SESSION['language']);
$smarty->assign('main_content', $main_content);