Exemple #1
0
function parseAndReplaceAll($text, $slotback = '')
{
    global $directdump;
    $directdump = false;
    //[sql.s1.field1.type]
    //[var.name.type]
    //[para.name]
    $newstring = "";
    $oldpos = 0;
    $pos = strpos($text, "[", $oldpos);
    $ifs = array();
    $cif = 0;
    $ifs[$cif] = false;
    while ($pos !== false) {
        //search for close
        $pos2 = strpos($text, "]", $pos);
        if ($pos2 !== false) {
            if ($ifs[$cif]) {
                //ignore only for an [endif]  [fi]
                $token = substr($text, $pos + 1, $pos2 - $pos - 1);
                $arr = explode(".", $token);
                if ($arr[0] == 'if' || $arr[0] == '!if' || $arr[0] == 'nif') {
                    $cif++;
                    $ifs[$cif] = true;
                }
                if ($arr[0] == "endif" || $arr[0] == "fi") {
                    $ifs[$cif] = false;
                    $cif--;
                }
                $oldpos = $pos2 + 1;
            } else {
                if ($directdump) {
                    echo substr($text, $oldpos, $pos - $oldpos);
                } else {
                    $newstring .= substr($text, $oldpos, $pos - $oldpos);
                }
                $oldpos = $pos;
                //we have a token.. anallys
                $token = substr($text, $pos + 1, $pos2 - $pos - 1);
                if (strlen($token)) {
                    $displaytype = "";
                    $displaypara = "";
                    $displayvalue = "";
                    $arr = explode(".", $token);
                    $iftest = false;
                    $ifnegative = false;
                    if (isset($arr[0]) && ($arr[0] == 'if' || $arr[0] == '!if' || $arr[0] == 'nif')) {
                        $iftest = true;
                        if ($arr[0] == '!if' || $arr[0] == 'nif') {
                            $ifnegative = true;
                        }
                        $iftestvalue = "";
                        if (isset($arr[1])) {
                            $iftestvalue = $arr[1];
                        }
                        for ($i = 2; $i < count($arr); $i++) {
                            $arr[$i - 2] = $arr[$i];
                        }
                        if (count($arr)) {
                            unset($arr[count($arr) - 1]);
                        }
                        if (count($arr)) {
                            unset($arr[count($arr) - 1]);
                        }
                    }
                    if (isset($arr[1]) || $token == "fi" || $token == "endif") {
                        switch ($arr[0]) {
                            case 'endif':
                            case 'fi':
                                $oldpos = $pos2 + 1;
                                $ifs[$cif] = false;
                                $cif--;
                                break;
                            case 'sql':
                                //valid
                                $oldpos = $pos2 + 1;
                                if (isset($arr[3])) {
                                    $displaytype = $arr[3];
                                }
                                if (isset($arr[4])) {
                                    $displaypara = $arr[4];
                                }
                                //get value
                                if (isset($arr[1]) && isset($GLOBALS[$arr[1] . '_sql_conn'])) {
                                    if (isset($arr[2])) {
                                        $displayvalue = $GLOBALS[$arr[1] . '_sql_conn']->getvalue($arr[2]);
                                    }
                                    if ($displaytype == "fast" && isset($arr[2])) {
                                        $displayvalue = $GLOBALS[$arr[1] . '_sql_conn']->getvaluefast($arr[2]);
                                        if (isset($arr[4])) {
                                            $displaytype = $arr[4];
                                        }
                                        if (isset($arr[5])) {
                                            $displaypara = $arr[5];
                                        }
                                    }
                                    if ($displaytype == "mins") {
                                        $displaypara = $GLOBALS[$arr[1] . '_sql_conn']->getvalue($arr[2] . "_panala");
                                        require_once "config/dateutils.php";
                                        $diff = timediff($displayvalue, $displaypara, getLT("dateformat"));
                                        $secs = intval(timediffsecs($diff) / 60);
                                        $displayvalue = $secs;
                                        $displaypara = $arr[5];
                                    }
                                } else {
                                    if ($arr[1] == "conn") {
                                        if (isset($arr[2])) {
                                            $displayvalue = $GLOBALS[$arr[1]]->getvalue($arr[2]);
                                        }
                                        if ($displaytype == "fast" && isset($arr[2])) {
                                            $displayvalue = $GLOBALS[$arr[1]]->getvaluefast($arr[2]);
                                            if (isset($arr[4])) {
                                                $displaytype = $arr[4];
                                            }
                                            if (isset($arr[5])) {
                                                $displaypara = $arr[5];
                                            }
                                        }
                                        if ($displaytype == "mins") {
                                            $displaypara = $GLOBALS[$arr[1]]->getvalue($arr[2] . "_panala");
                                            require_once "config/dateutils.php";
                                            $diff = timediff($displayvalue, $displaypara, getLT("dateformat"));
                                            $secs = intval(timediffsecs($diff) / 60);
                                            $displayvalue = $secs;
                                            $displaypara = $arr[5];
                                        }
                                    }
                                }
                                break;
                            case 'var':
                            case 'g':
                                //valid
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = $GLOBALS[$arr[1]];
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                //get value
                                break;
                            case 'cache':
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = cache_getvalue($arr[1]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                //get value
                                break;
                            case 'para':
                                //valid
                                $oldpos = $pos2 + 1;
                                global $_control_replace_sql;
                                if (isset($arr[1])) {
                                    $displayvalue = $_control_replace_sql('@' . $arr[1]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'post':
                                //valid
                                $oldpos = $pos2 + 1;
                                global $_POST;
                                if (isset($arr[1]) && $_POST[$arr[1]] != "") {
                                    $displayvalue = '' . correctPostValue($_POST[$arr[1]]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'posttags':
                                //valid
                                $oldpos = $pos2 + 1;
                                global $_POST;
                                if (isset($arr[1]) && $_POST[$arr[1]] != "") {
                                    $displayvalue = '' . correctPostValue(implode(",", $_POST[$arr[1]]));
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'get':
                                //valid
                                $oldpos = $pos2 + 1;
                                global $_GET;
                                if (isset($arr[1]) && $_GET[$arr[1]] != "") {
                                    $displayvalue = '' . correctPostValue($_GET[$arr[1]]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'config':
                            case 'c':
                                //valid
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = getUserConfig($arr[1]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'cookie':
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1]) && isset($arr[2])) {
                                    $displayvalue = cookie_getvalue($arr[1], $arr[2]);
                                }
                                if (isset($arr[3])) {
                                    $displaytype = $arr[3];
                                }
                                if (isset($arr[4])) {
                                    $displaypara = $arr[4];
                                }
                                break;
                            case 'session':
                            case 's':
                                //valid
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = session_getvalue($arr[1]);
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'utils':
                                //valid
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = $arr[1];
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                break;
                            case 'slot':
                                //we have a callback
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = $arr[1];
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                if ($slotback != '') {
                                    $displayvalue = $slotback($displayvalue, $displaytype, $displaypara);
                                    $displaytype = '';
                                    $displaypara = '';
                                }
                                break;
                            case 'call':
                                //we have a callback
                                $oldpos = $pos2 + 1;
                                if (isset($arr[1])) {
                                    $displayvalue = $arr[1];
                                }
                                if (isset($arr[2])) {
                                    $displaytype = $arr[2];
                                }
                                if (isset($arr[3])) {
                                    $displaypara = $arr[3];
                                }
                                $fn = $displayvalue;
                                if (function_exists($fn)) {
                                    $displayvalue = $fn($displaytype, $displaypara);
                                } else {
                                    $displayvalue = '';
                                }
                                break;
                        }
                    }
                    $displaypara = str_replace('^', '.', $displaypara);
                    if ($iftest) {
                        //we have an ok
                        $cif++;
                        $iftestvalue = str_replace('^', '.', $iftestvalue);
                        if ($ifnegative) {
                            if ($displayvalue != $iftestvalue) {
                                $ifs[$cif] = false;
                            } else {
                                $ifs[$cif] = true;
                            }
                        } else {
                            if ($displayvalue == $iftestvalue) {
                                $ifs[$cif] = false;
                            } else {
                                $ifs[$cif] = true;
                            }
                        }
                    } else {
                        $oldnewstring = $newstring;
                        if ($directdump) {
                            $newstring = '';
                        }
                        switch ($displaytype) {
                            case 'lb':
                                $newstring .= '[';
                                break;
                            case 'rb':
                                $newstring .= ']';
                                break;
                            case 'now':
                                require_once "config/dateutils.php";
                                if ($displayvalue != "") {
                                    $newstring .= date($displayvalue);
                                } else {
                                    $newstring .= showDate(date("Y-m-d"), getLT("dateformat"));
                                }
                                break;
                            case 'date':
                                require_once "config/dateutils.php";
                                if ($displaypara != "") {
                                    if ($displayvalue != "0000-00-00") {
                                        $newstring .= date(str_replace("~", ".", $displaypara), showDate($displayvalue, "time"));
                                    }
                                } else {
                                    $newstring .= showDate($displayvalue, getLT("dateformat"));
                                }
                                break;
                            case 'sqldate':
                                require_once "config/dateutils.php";
                                $newstring .= getDateForMysql($displayvalue, getLT("dateformat"));
                                break;
                            case 'time':
                                require_once "config/dateutils.php";
                                $newstring .= showTime($displayvalue);
                                break;
                            case 'intval':
                                if ($displaypara != "") {
                                    $newstring .= bcadd($displayvalue, '0');
                                } else {
                                    $newstring .= intval($displayvalue);
                                }
                                break;
                            case 'number':
                                $newstring .= showNumber($displayvalue, $displaypara);
                                break;
                            case 'exnumber':
                                $newstring .= number_format(floatval($displayvalue), $displaypara, '.', '');
                                break;
                            case 'zeronumber':
                                if (abs(round($displayvalue) - $displayvalue) <= 0.01) {
                                    $newstring .= showNumber(round($displayvalue), $displaypara);
                                } else {
                                    $newstring .= showNumber($displayvalue, $displaypara);
                                }
                                break;
                            case 'zeros':
                                $newstring .= str_pad($displayvalue, $displaypara, "0", STR_PAD_LEFT);
                                break;
                            case 'spell':
                                require_once "extern/numberspell.php";
                                if (isset($GLOBALS[$displaypara])) {
                                    $newstring .= spellNumber($displayvalue, $GLOBALS[$displaypara]);
                                } else {
                                    $newstring .= spellNumber($displayvalue, getCurrentLang());
                                }
                                break;
                            case 'sqlescape':
                                global $conn;
                                if ($displaypara != "") {
                                    $newstring .= $conn->escape(substr($displayvalue, 0, intval($displaypara)));
                                } else {
                                    $newstring .= $conn->escape($displayvalue);
                                }
                                break;
                            case 'sqlvalues':
                                global $conn;
                                $myvalues = '';
                                $myarr = explode(",", $displayvalue);
                                foreach ($myarr as $kkmk => $kkmv) {
                                    if ($myvalues != "") {
                                        $myvalues .= ",";
                                    }
                                    $myvalues .= "'" . $conn->escape($kkmv) . "'";
                                }
                                if ($myvalues == "") {
                                    $myvalues = "''";
                                }
                                $newstring .= $myvalues;
                                break;
                            case 'split':
                                $sparr = explode(".", trim($displayvalue));
                                $newstring .= $sparr[intval($displaypara)];
                                break;
                            case 'explode':
                                $sparr = explode(" ", trim($displayvalue));
                                $newstring .= $sparr[intval($displaypara)];
                                break;
                            case 'substr':
                                if (intval($displaypara) < 0) {
                                    $newstring .= substr($displayvalue, intval($displaypara));
                                } else {
                                    $newstring .= substr($displayvalue, 0, intval($displaypara));
                                }
                                break;
                            case 'trim':
                                $displayvalue = str_replace(" ", "", trim($displayvalue));
                                $displayvalue = str_replace(".", "", $displayvalue);
                                $displayvalue = str_replace("-", "", $displayvalue);
                                $displayvalue = str_replace("=", "", $displayvalue);
                                $newstring .= $displayvalue;
                                break;
                            case 'html':
                                $newstring .= str_replace("\n", "<br>", $displayvalue);
                                break;
                            case 'nohtml':
                                $newstring .= strip_tags(html_entity_decode2($displayvalue));
                                break;
                            case 'pin':
                                $newstring .= substr(md5($displayvalue), intval($displaypara));
                                break;
                            case 'lang':
                                $newstring .= getLT($displayvalue);
                                break;
                            case 'upper':
                                $newstring .= strtoupper($displayvalue);
                                break;
                            case 'caps':
                                $newstring .= strtoupper(substr(getLT($displayvalue), 0, 1)) . strtolower(substr(getLT($displayvalue), 1));
                                break;
                            case 'lower':
                                $newstring .= strtolower($displayvalue);
                                break;
                            case 'adresa':
                                $newstring .= strtoupper(str_ireplace("zip", "cod postal", $displayvalue));
                                break;
                            case 'full':
                                $newstring .= parseAndReplaceAll($displayvalue, $slotback);
                                break;
                            case 'easyread':
                                $newstring .= strrev(join(str_split(strrev($displayvalue), 3), "."));
                                break;
                            case 'phone':
                                $displayvalue = str_replace("-", "", $displayvalue);
                                $displayvalue = str_replace("/", "", $displayvalue);
                                $displayvalue = str_replace(" ", "", $displayvalue);
                                $displayvalue = str_replace(".", "", $displayvalue);
                                $displayvalue = str_replace(",", "", $displayvalue);
                                $displayvalue = str_replace(",", "", $displayvalue);
                                $displayvalue = substr($displayvalue, 0, 10);
                                $newstring .= $displayvalue;
                                break;
                            case 'seo':
                                $newstring .= buildSeoLink($displayvalue);
                                break;
                            default:
                                $newstring .= $displayvalue;
                                break;
                        }
                        if ($directdump) {
                            echo $newstring;
                            $newstring = $oldnewstring;
                        }
                    }
                }
            }
        }
        $pos = strpos($text, "[", $pos + 1);
    }
    $newstring .= substr($text, $oldpos);
    return $newstring;
}
function makecontact_execute($action, $slot)
{
    global $_POST;
    global $_GET;
    global $_CONFIG;
    require_once "config/db.php";
    global $conn;
    global $_local_error;
    $_local_error = "";
    global $_local_reloadform;
    $_local_reloadform = "";
    global $render_current_slot;
    global $current_slots;
    //mark slot on execution stack
    $render_current_slot++;
    $current_slots[$render_current_slot] = $slot;
    if (getUserConfig("pageprotection") == "yes") {
        if (isset($_POST['fprotection']) && $_POST['fprotection'] != "") {
            if (isset($_GET['ajax']) && $_GET['ajax'] == 1) {
                if (intval(session_getvalue("protection_page")) != intval($_POST['fprotection'])) {
                    $_local_error = getLT("protectionerror");
                }
            } else {
                if (intval(session_getvalue("protection_page")) != intval($_POST['fprotection']) + 1) {
                    $_local_error = getLT("protectionerror");
                }
            }
        }
    }
    //set default filter
    $control_filter = "";
    $control_name = "makecontact";
    $control_table = "projectissues";
    $control_id = "id";
    //check for rights
    if (getUserConfig('dinsec_makecontact_cando', $action) == 'no') {
        $_local_error = getLT('nopermissions');
    }
    if (getUserConfig('dinsec_makecontact_canpost', $action) == 'no') {
        $_local_error = getLT('nopermissions');
    }
    if (session_getvalue("blockaccess_makecontact") == "yes") {
        $_local_error = getLT('nopermissions');
    }
    if (session_getvalue("blockaccess_projectissues") == "yes") {
        $_local_error = getLT('nopermissions');
    }
    if ($_local_error == "") {
        switch ($action) {
            case 'add':
                if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
                    $_local_error = 'usercanceled';
                    setSlotView($slot, "add");
                    break;
                }
                if ($_local_error == '') {
                    if (!isset($_POST['iname']) || $_POST['iname'] == '' || strip_tags($_POST['iname']) == '') {
                        $_local_error .= getLT('iname') . ' ' . getLT('shouldbefilled');
                    }
                }
                if ($_local_error == '') {
                    if (!isset($_POST['iemail']) || $_POST['iemail'] == '' || strip_tags($_POST['iemail']) == '') {
                        $_local_error .= getLT('iemail') . ' ' . getLT('shouldbefilled');
                    }
                }
                if ($_local_error == '') {
                    if (!isset($_POST['icontactname']) || $_POST['icontactname'] == '' || strip_tags($_POST['icontactname']) == '') {
                        $_local_error .= getLT('icontactname') . ' ' . getLT('shouldbefilled');
                    }
                }
                if ($_local_error == '') {
                    if (!isset($_POST['useraddress'])) {
                        $_local_error .= getLT('javascript?');
                    } else {
                        $ab_def = strtok($_POST['useraddress'], "-");
                        $ab_test = $ab_def . '-' . number_format(floatVal($ab_def . '.12') * 0.34, 4, '.', '');
                        if ($ab_test !== $_POST['useraddress']) {
                            $_local_error .= getLT('antiboterror?');
                        }
                    }
                }
                if ($_local_error == "") {
                    $conn->addnew($control_table);
                    $conn->setvalue('iname', correctPostValue($_POST['iname']));
                    $conn->setvalue('iemail', correctPostValue($_POST['iemail']));
                    $conn->setvalue('icontactname', correctPostValue($_POST['icontactname']));
                    $html = correctPostValue($_POST['idesc']);
                    $html = str_ireplace("<script", "[script", $html);
                    $html = str_ireplace("<link", "[link", $html);
                    $html = str_ireplace("<style", "[style", $html);
                    $conn->setvalue('idesc', $html);
                    $conn->setvalue('projectid', $_CONFIG['projectid']);
                    $conn->setvalue('idate', date("Y-m-d H:i:s"));
                    $id = $conn->update();
                    if ($id != "") {
                        session_addvalue($slot . '_info', getLT('wblank'));
                        session_setvalue($slot . "_viewid", $id);
                        setSlotView($slot, "add");
                    } else {
                        $_local_error = getLT('unableadd');
                        break;
                    }
                }
            case 'sendemail':
                if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
                    $_local_error = 'usercanceled';
                    break;
                }
                if ($_local_error == "") {
                    ob_start();
                    require_once "config/htmlreport.php";
                    require_once "config/templates.php";
                    require_once "config/mail.php";
                    global $_templates;
                    require_once "config/utils.php";
                    $_control_replace_sql = "parseAndReplaceAll";
                    $pdf = new HtmlReport("");
                    $emailbody = ob_get_contents();
                    ob_end_clean();
                    $emailbody = html_entity_decode($emailbody);
                    $emailsubject = getLT('emailcontact');
                    global $mails_sql_conn;
                    $mails_sql_conn = create_db_connection();
                    $mails_sql_conn->openselect($_control_replace_sql("select pemails as email from projects where id=0[config.projectid]"));
                    $noemail = false;
                    if ($mails_sql_conn->eof()) {
                        $noemail = true;
                    }
                    while (!$mails_sql_conn->eof()) {
                        $mailman = createMailObject();
                        $mailman->IsHTML(true);
                        $emailto = $mails_sql_conn->getvalue("email");
                        $emailreply = "";
                        $emailbcc = "";
                        $emailcc = "";
                        $emailfrom = "";
                        $emailbody = getFileContent(getFilePathFor('html', 'makecontact'));
                        require_once "config/utils.php";
                        $emailbody = parseAndReplaceAll($emailbody);
                        $emailreply = correctPostValue($_POST["iemail"]);
                        $mailman->Body = $emailbody;
                        $mailman->Subject = $emailsubject;
                        $mailman->ClearAddresses();
                        $mailman->AddAddress($emailto);
                        if ($emailbcc != "") {
                            $mailman->AddBCC($emailbcc);
                        }
                        if ($emailcc != "") {
                            $mailman->AddCC($emailcc);
                        }
                        if ($emailfrom != "") {
                            $mailman->FromName = "";
                            $mailman->From = $emailfrom;
                        }
                        if ($emailreply != '') {
                            $mailman->AddReplyTo($emailreply);
                        }
                        $mailman->send();
                        $mails_sql_conn->movenext();
                    }
                    $mails_sql_conn->close();
                    if ($noemail) {
                        session_addvalue($slot . '_error', getLT('noemailfound'));
                    } else {
                        session_addvalue($slot . '_info', getLT('yourmessageissent'));
                    }
                }
                break;
            default:
                //$_local_error="slot:".$slot." unknown post action: ".$action;
                setSlotView($slot, "");
                break;
        }
    }
    if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
        //if($_local_error!="") session_addvalue($slot.'_error',getLT($_local_error));
        $_local_error = '';
    } else {
        if ($_local_reloadform != "" || $_local_error != "" || $action == "justreloadform") {
            //save post for later use
            foreach ($_POST as $key => $val) {
                if (is_array($val)) {
                    session_setvalue('savedpost_makecontact_' . $key, correctPostValue(implode(",", str_replace(',', ' ', $_POST[$key]))));
                } else {
                    session_setvalue('savedpost_makecontact_' . $key, correctPostValue($val));
                }
            }
            if ($_local_error != "") {
                session_addvalue($slot . '_error', $_local_error);
            }
        }
    }
    $render_current_slot--;
    return $_local_error;
}
Exemple #3
0
function ws_process($action, $para = '')
{
    switch ($action) {
        case 'AdaugaOferta':
            $tipoferta = $_POST['tipoferta'];
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
		 <AdaugaOferta xmlns="http://asiguram.ro/ws">
		   <tipoferta>' . $tipoferta . '</tipoferta>
		   <datavalabilitate>' . getDateForMysql($_POST['datavalabilitate'], getLT('dateformat')) . '</datavalabilitate>
		   <tipcontract>' . correctPostValue($_POST['tipproprietar']) . '</tipcontract>
		   ';
            switch ($_POST['tipoferta']) {
                case 'pad':
                    foreach ($_POST as $wk => $wv) {
                        if ($wk == "tipoferta" || $wk == "datavalabilitate") {
                            continue;
                        } else {
                            if ($wk == "produsdorit") {
                                switch ($wv) {
                                    case 'pad+fac':
                                        $xml .= '<emitepad>astrapaid</emitepad>';
                                        $xml .= '<emite>bonusold</emite>';
                                        break;
                                    case 'pad':
                                        $xml .= '<emitepad>astrapaid</emitepad>';
                                        $xml .= '<emite>fara</emite>';
                                        break;
                                    case 'fac':
                                        $xml .= '<emitepad>fara</emitepad>';
                                        $xml .= '<emite>doarbonus</emite>';
                                        break;
                                }
                                $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                            } else {
                                if ($wk == "panalavalabilitate") {
                                    $xml .= '<' . $wk . '>' . getDateForMysql($_POST['panalavalabilitate'], getLT('dateformat')) . '</' . $wk . '>';
                                } else {
                                    $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                                }
                            }
                        }
                    }
                    break;
                case 'casco':
                    foreach ($_POST as $wk => $wv) {
                        if ($wk == "tipoferta" || $wk == "datavalabilitate") {
                            continue;
                        } else {
                            if ($wk == "panalavalabilitate") {
                                $xml .= '<' . $wk . '>' . getDateForMysql($_POST['panalavalabilitate'], getLT('dateformat')) . '</' . $wk . '>';
                            } else {
                                $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                            }
                        }
                    }
                    break;
                case 'decont':
                    foreach ($_POST as $wk => $wv) {
                        if ($wk == "tipoferta" || $wk == "datavalabilitate") {
                            continue;
                        } else {
                            $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                        }
                    }
                    break;
                case 'sanatate':
                case 'malpraxis':
                case 'rotr':
                    foreach ($_POST as $wk => $wv) {
                        if ($wk == "tipoferta" || $wk == "datavalabilitate") {
                            continue;
                        } else {
                            $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                        }
                    }
                    break;
                case 'medicale':
                    $xml .= '
				<nrzile>' . correctPostValue($_POST['nrzile']) . '</nrzile>
				<panalavalabilitate>' . getDateForMysql($_POST['panalavalabilitate'], getLT('dateformat')) . '</panalavalabilitate>
				<tipproprietar>' . correctPostValue($_POST['tipproprietar']) . '</tipproprietar>
				<pf_tippersoana>' . correctPostValue($_POST['pf_tippersoana']) . '</pf_tippersoana>
				<pf_cnp>' . correctPostValue($_POST['pf_cnp']) . '</pf_cnp>
				<varsta>' . correctPostValue($_POST['varsta']) . '</varsta>
				<pj_tippersoana>' . correctPostValue($_POST['pj_tippersoana']) . '</pj_tippersoana>
				<pj_cui>' . correctPostValue($_POST['pj_cui']) . '</pj_cui>
				<teritoriu>' . correctPostValue($_POST['teritoriu']) . '</teritoriu>
				<scop>' . correctPostValue($_POST['scop']) . '</scop>
				<activitate>' . correctPostValue($_POST['activitate']) . '</activitate>
				<boli>' . correctPostValue($_POST['boli']) . '</boli>
				<grupuri>' . correctPostValue($_POST['grupuri']) . '</grupuri>
				<sporturi>' . correctPostValue($_POST['sporturi']) . '</sporturi>
				<taridest>' . correctPostValue($_POST['taridest']) . '</taridest>
				<taridest2>' . correctPostValue($_POST['taridest2']) . '</taridest2>
				<taridest3>' . correctPostValue($_POST['taridest3']) . '</taridest3>
				<taritranzit>' . correctPostValue($_POST['taritranzit']) . '</taritranzit>
				<acoperire>' . correctPostValue($_POST['acoperire']) . '</acoperire>
				<pretcalatorie>' . correctPostValue($_POST['pretcalatorie']) . '</pretcalatorie>
				<bagaje>' . correctPostValue($_POST['bagaje']) . '</bagaje>
';
                    break;
                case 'rezervare':
                case 'petitie':
                    foreach ($_POST as $wk => $wv) {
                        if ($wk == "tipoferta" || $wk == "datavalabilitate" || $wk == "emailclient") {
                            continue;
                        } else {
                            $xml .= '<' . $wk . '>' . correctPostValue($_POST[$wk]) . '</' . $wk . '>';
                        }
                    }
                    break;
                case 'rca':
                default:
                    switch ($_POST['tipproprietar']) {
                        case 'pf':
                            $xml .= '
		   <asigurat>
		     <tippersoana>' . correctPostValue($_POST['pf_tippersoana']) . '</tippersoana>
		     <cnpcui>' . correctPostValue($_POST['pf_cnp']) . '</cnpcui>
		     <localitate>' . correctPostValue($_POST['pf_localitate']) . '</localitate>
		     <judet>' . correctPostValue($_POST['pf_judet']) . '</judet>
		     <sector>' . correctPostValue($_POST['pf_sector']) . '</sector>
		     <permisan>' . correctPostValue($_POST['pf_permisan']) . '</permisan>
		     <permisluna>' . correctPostValue($_POST['pf_permisluna']) . '</permisluna>
		     <copii>' . correctPostValue($_POST['pf_copii']) . '</copii>
		     <casco>' . correctPostValue($_POST['pf_casco']) . '</casco>
		     <destinatie>' . correctPostValue($_POST['pf_destinatie']) . '</destinatie>
		   </asigurat>
		   ';
                            break;
                        case 'pj':
                            $xml .= '
		   <asigurat>
		     <tippersoana>' . correctPostValue($_POST['pj_tippersoana']) . '</tippersoana>
		     <cnpcui>' . correctPostValue($_POST['pj_cui']) . '</cnpcui>
		     <localitate>' . correctPostValue($_POST['pj_localitate']) . '</localitate>
		     <judet>' . correctPostValue($_POST['pj_judet']) . '</judet>
		     <sector>' . correctPostValue($_POST['pj_sector']) . '</sector>
		     <casco>' . correctPostValue($_POST['pj_casco']) . '</casco>
		     <rca>' . correctPostValue($_POST['pj_rca']) . '</rca>
		     <daune>' . correctPostValue($_POST['pj_daune']) . '</daune>
		     <destinatie>' . correctPostValue($_POST['pj_destinatie']) . '</destinatie>
		   </asigurat>
		   ';
                            break;
                        case 'leasing':
                            $xml .= '
		   <asigurat>
		     <nume>' . correctPostValue($_POST['leasingname']) . '</nume>
		     <cnpcui>' . correctPostValue($_POST['leasingcui']) . '</cnpcui>
		     <localitate>' . correctPostValue($_POST['leasinglocalitate']) . '</localitate>
		     <judet>' . correctPostValue($_POST['leasingjudet']) . '</judet>
		     <sector>' . correctPostValue($_POST['leas_sector']) . '</sector>
		   </asigurat>
		   ';
                            switch ($_POST['tiputilizator']) {
                                case 'pf':
                                    $xml .= '
		   <utilizator>
		     <tippersoana>' . correctPostValue($_POST['pf_tippersoana']) . '</tippersoana>
		     <cnpcui>' . correctPostValue($_POST['pf_cnp']) . '</cnpcui>
		     <localitate>' . correctPostValue($_POST['pf_localitate']) . '</localitate>
		     <judet>' . correctPostValue($_POST['pf_judet']) . '</judet>
		     <sector>' . correctPostValue($_POST['pf_sector']) . '</sector>
		     <permisan>' . correctPostValue($_POST['pf_permisan']) . '</permisan>
		     <permisluna>' . correctPostValue($_POST['pf_permisluna']) . '</permisluna>
		     <copii>' . correctPostValue($_POST['pf_copii']) . '</copii>
		     <casco>' . correctPostValue($_POST['pf_casco']) . '</casco>
		     <destinatie>' . correctPostValue($_POST['pf_destinatie']) . '</destinatie>
		   </utilizator>
		   ';
                                    break;
                                case 'pj':
                                    $xml .= '
		   <utilizator>
		     <tippersoana>' . correctPostValue($_POST['pj_tippersoana']) . '</tippersoana>
		     <cnpcui>' . correctPostValue($_POST['pj_cui']) . '</cnpcui>
		     <localitate>' . correctPostValue($_POST['pj_localitate']) . '</localitate>
		     <judet>' . correctPostValue($_POST['pj_judet']) . '</judet>
		     <sector>' . correctPostValue($_POST['pj_sector']) . '</sector>
		     <casco>' . correctPostValue($_POST['pj_casco']) . '</casco>
		     <rca>' . correctPostValue($_POST['pj_rca']) . '</rca>
		     <daune>' . correctPostValue($_POST['pj_daune']) . '</daune>
		     <destinatie>' . correctPostValue($_POST['pj_destinatie']) . '</destinatie>
		   </utilizator>
		   ';
                                    break;
                                    break;
                            }
                            break;
                    }
                    $codpromo = correctPostValue($_POST['codpromotional']);
                    $xml .= '
		   <vehicul>
		     <inmatriculare>' . correctPostValue($_POST['inmatriculare']) . '</inmatriculare>
		     <categorie>' . correctPostValue($_POST['categorie']) . '</categorie>
		     <marca>' . correctPostValue($_POST['marca']) . '</marca>
		     <model>' . correctPostValue($_POST['model']) . '</model>
		     <anfabricatie>' . correctPostValue($_POST['anfabricatie']) . '</anfabricatie>
		     <nrinm>' . correctPostValue($_POST['nrinm']) . '</nrinm>
		     <seriesasiu>' . correctPostValue($_POST['seriesasiu']) . '</seriesasiu>
		     <serieciv>' . correctPostValue($_POST['serieciv']) . '</serieciv>
		     <cilindree>' . intval($_POST['cilindree']) . '</cilindree>
		     <propulsie>' . correctPostValue($_POST['propulsie']) . '</propulsie>
		     <cp>' . intval($_POST['cp']) . '</cp>
		     <kg>' . intval($_POST['kg']) . '</kg>
		     <locuri>' . intval($_POST['locuri']) . '</locuri>
		     <parcauto>0</parcauto>
		     <codpromotional>' . $codpromo . '</codpromotional>
		   </vehicul>';
                    break;
            }
            $xml .= '
		<emailclient>' . correctPostValue($_POST['emailclient']) . '</emailclient>
		 </AdaugaOferta>
	  </soap:Body>
	</soap:Envelope>';
            //echo $xml;die();
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, 'AdaugaOferta');
            $r = $data['soap:Envelope']['soap:Body'];
            //print_r($r);die();
            if (isset($r['soap:Fault'])) {
                return false;
            }
            if (isset($r['AdaugaOfertaResponse']['idoferta'])) {
                if (intval($r['AdaugaOfertaResponse']['idoferta']['VALUE'])) {
                    return intval($r['AdaugaOfertaResponse']['idoferta']['VALUE']);
                }
            }
            return false;
        case 'InfoOferta':
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
	 <InfoOferta xmlns="http://asiguram.ro/ws">
		   <idoferta>' . intval($para) . '</idoferta>
		 </InfoOferta>
	  </soap:Body>
	</soap:Envelope>';
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, 'InfoOferta');
            $r = $data['soap:Envelope']['soap:Body'];
            //print_r($data);
            if (isset($r['soap:Fault'])) {
                return false;
            }
            if (isset($r['InfoOfertaResponse']['idoferta'])) {
                if (intval($r['InfoOfertaResponse']['idoferta']['VALUE'])) {
                    return $r['InfoOfertaResponse'];
                }
            }
            return true;
        case 'PolitaOferta':
            if ($action == 'PolitaOferta') {
                $_GET['TarifeOferta'] = $_GET['PolitaOferta'];
            }
        case 'PDFOferta':
            if ($action == 'PDFOferta') {
                $_GET['TarifeOferta'] = $_GET['offid'];
            }
        case 'TarifeOferta':
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
	 <TarifeOferta xmlns="http://asiguram.ro/ws">
		   <idoferta>' . intval($_GET['TarifeOferta']) . '</idoferta>
		   ' . ($action == 'PDFOferta' ? '<politaPDF>true</politaPDF>' : '') . '
		 </TarifeOferta>
	  </soap:Body>
	</soap:Envelope>';
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, 'TarifeOferta');
            //print_r($data);die();
            $r = $data['soap:Envelope']['soap:Body'];
            if (isset($r['soap:Fault'])) {
                return false;
            }
            if (isset($r['TarifeOfertaResponse']['idoferta'])) {
                $tipoferta = $r['TarifeOfertaResponse']['tipoferta']['VALUE'];
                if (intval($r['TarifeOfertaResponse']['idoferta']['VALUE'])) {
                    if ($action == "TarifeOferta") {
                        $soc = array();
                        //check tarifs
                        if (isset($r['TarifeOfertaResponse']['tarif']['societate'])) {
                            //we have one
                            $v = $r['TarifeOfertaResponse']['tarif'];
                            $soc[$v['societate']['VALUE']] = array();
                            $soc[$v['societate']['VALUE']]['soc'] = $v['societate']['VALUE'];
                            $soc[$v['societate']['VALUE']]['6'] = floatval($v['tarif6']['VALUE']);
                            $soc[$v['societate']['VALUE']]['12'] = floatval($v['tarif12']['VALUE']);
                            $soc[$v['societate']['VALUE']]['1'] = floatval($v['tarif1']['VALUE']);
                            $soc[$v['societate']['VALUE']]['bm'] = floatval($v['bm12']['VALUE']);
                        } else {
                            if (isset($r['TarifeOfertaResponse']['tarif'])) {
                                foreach ($r['TarifeOfertaResponse']['tarif'] as $k => $v) {
                                    $soc[$v['societate']['VALUE']] = array();
                                    $soc[$v['societate']['VALUE']]['soc'] = $v['societate']['VALUE'];
                                    $soc[$v['societate']['VALUE']]['6'] = floatval($v['tarif6']['VALUE']);
                                    $soc[$v['societate']['VALUE']]['12'] = floatval($v['tarif12']['VALUE']);
                                    $soc[$v['societate']['VALUE']]['1'] = floatval($v['tarif1']['VALUE']);
                                    $soc[$v['societate']['VALUE']]['bm'] = floatval($v['bm12']['VALUE']);
                                    $soc[$v['societate']['VALUE']]['com'] = floatval($v['com']['VALUE']);
                                }
                            }
                        }
                        usort($soc, sort12luni);
                        //set logos
                        global $_LANG_;
                        $_LANG_['carpatica'] = '<img src="images/carpatica.png" alt="' . getLT('carpatica') . '">';
                        $_LANG_['ardaf'] = '<img src="images/ardaf.png" alt="' . getLT('ardaf') . '">';
                        $_LANG_['astra'] = '<img src="images/astra.png" alt="' . getLT('astra') . '">';
                        $_LANG_['allianz'] = '<img src="images/allianz.png" alt="' . getLT('allianz') . '">';
                        $_LANG_['city'] = '<img src="images/city.png" alt="' . getLT('city') . '">';
                        $_LANG_['abc'] = '<img src="images/abc.png" alt="' . getLT('abc') . '">';
                        $_LANG_['omniasig'] = '<img src="images/omniasig.png" alt="' . getLT('omniasig') . '">';
                        $_LANG_['generali'] = '<img src="images/generali.png" alt="' . getLT('generali') . '">';
                        $_LANG_['grupama'] = '<img src="images/groupama.png" alt="' . getLT('grupama') . '">';
                        $_LANG_['uniqa'] = '<img src="images/uniqa.png" alt="' . getLT('uniqa') . '">';
                        $_LANG_['euroins'] = '<img src="images/euroins.png" alt="' . getLT('euroins') . '">';
                        $_LANG_['asirom'] = '<img src="images/asirom.png" alt="' . getLT('asirom') . '">';
                        $_LANG_['crediteurope'] = '<img src="images/crediteurope.png" alt="' . getLT('crediteurope') . '">';
                        $_LANG_['platinum'] = '<img src="images/gothaer.png" alt="Gothaer">';
                        $_LANG_['mondial'] = '<img src="images/mondial.png" alt="Mondial">';
                        switch ($tipoferta) {
                            case 'medicale':
                                //print_r($soc);
                                ?>
<table class="worktarife" cellpadding=0 cellspacing=0 border="1">
								<tr><th align=right>Asigurator<th align=right>Prima RON
								<?php 
                                foreach ($soc as $k => $v) {
                                    if ($v['12'] < 2) {
                                        continue;
                                    }
                                    ?>
									<tr><td align=center><?php 
                                    echo getLT($v['soc']);
                                    ?>
<td align=right class="worktarif"><a href="#" per="12" socid="<?php 
                                    echo $v['soc'];
                                    ?>
" tarif="<?php 
                                    echo showNumber($v['12'], 2);
                                    ?>
"><?php 
                                    $tt = showNumber($v['12'], 2);
                                    $tt = explode(",", $tt);
                                    echo $tt[0] . '<span class="tarifjos">,' . $tt[1] . '</span>';
                                    ?>
</a>
									<?php 
                                }
                                ?>
</table>
								<?php 
                                if (!isset($r['TarifeOfertaResponse']['ofertafinalizata']) || $r['TarifeOfertaResponse']['ofertafinalizata']['VALUE'] == "false") {
                                    ?>
									<a class="incarcatarife" href="site.php?TarifeOferta=<?php 
                                    echo intval($_GET['TarifeOferta']);
                                    ?>
"></a>
									<?php 
                                }
                                break;
                            case 'pad':
                            case 'casco':
                            case 'sanatate':
                            case 'malpraxis':
                            case 'rotr':
                                //print_r($soc);
                                ?>
<table class="worktarife" cellpadding=0 cellspacing=0 border="1">
								<tr><th align=right>Asigurator<th align=right>Prima EURO
								<?php 
                                foreach ($soc as $k => $v) {
                                    if ($v['12'] < 2) {
                                        continue;
                                    }
                                    ?>
									<tr><td align=center><?php 
                                    echo getLT($v['soc']);
                                    ?>
<td align=right class="worktarif"><a href="#" per="12" socid="<?php 
                                    echo $v['soc'];
                                    ?>
" tarif="<?php 
                                    echo showNumber($v['12'], 2);
                                    ?>
"><?php 
                                    $tt = showNumber($v['12'], 2);
                                    $tt = explode(",", $tt);
                                    echo $tt[0] . '<span class="tarifjos">,' . $tt[1] . '</span>';
                                    ?>
</a>
									<?php 
                                }
                                ?>
</table>
								<?php 
                                if (!isset($r['TarifeOfertaResponse']['ofertafinalizata']) || $r['TarifeOfertaResponse']['ofertafinalizata']['VALUE'] == "false") {
                                    ?>
									<a class="incarcatarife" href="site.php?TarifeOferta=<?php 
                                    echo intval($_GET['TarifeOferta']);
                                    ?>
"></a>
									<?php 
                                }
                                break;
                            case 'rca':
                            default:
                                //print_r($soc);
                                if (getUserConfig('color_design') == "2") {
                                    ?>
<table class="worktarife" cellpadding=0 cellspacing=0 border="1">
								<tr><th align=right style="font-size: 16px;color:black;" rowspan=2>Asigurator<th align=right style="font-size: 16px;color:black;" colspan=2>6 luni<th align=right style="font-size: 16px;color:black;"  colspan=2>1 an
								<tr><th align=right style="font-size: 16px;color:black;">In rate
									<th align=right style="font-size: 16px;color:black;">Integral
									<th align=right style="font-size: 16px;color:black;border-left: solid 2px #eee;">In rate
									<th align=right style="font-size: 16px;color:black;">Integral
								<?php 
                                    foreach ($soc as $k => $v) {
                                        if ($v['6'] < 2) {
                                            continue;
                                        }
                                        if ($v['12'] < 2) {
                                            continue;
                                        }
                                        $oldtarif6 = '';
                                        $oldtarif12 = '';
                                        if (false && (getUserConfig("reduceretarife") != "" || getUserConfig("reduceretarife_" . $v['soc']) != "")) {
                                            $red = getUserConfig("reduceretarife");
                                            if (getUserConfig("reduceretarife_" . $v['soc']) != "") {
                                                $red = getUserConfig("reduceretarife_" . $v['soc']);
                                            }
                                            $oldv6 = floatval($v[6]);
                                            $oldv12 = floatval($v[12]);
                                            $v[6] = floatval($v[6]) * (100 - floatval($red)) / 100;
                                            $v[12] = floatval($v[12]) * (100 - floatval($red)) / 100;
                                            $oldtarif6 = '<span class="tarifjos"> * ' . showNumber($oldv6, 2) . '</span>';
                                            $oldtarif12 = '<span class="tarifjos"> * ' . showNumber($oldv12, 2) . '</span>';
                                        }
                                        ?>
									<tr><td align=center style="text-align:center;"><?php 
                                        echo getLT($v['soc']);
                                        ?>
										<td align=center class="worktarif"><button socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="6" onclick="return clickPlataInRate('<?php 
                                        echo showNumber($oldv6, 2);
                                        ?>
',this);" class="btn btn-success">In rate <?php 
                                        echo showNumber($oldv6, 2);
                                        ?>
</button><br>&nbsp;
										<td align=center class="worktarif"><button socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="6" onclick="return clickPlataIntegral('<?php 
                                        echo showNumber($v[6], 2);
                                        ?>
',this);" class="btn btn-success">Cu reducere <?php 
                                        echo showNumber($v[6], 2);
                                        ?>
</button><br><?php 
                                        echo $oldtarif6;
                                        ?>
										<td align=center class="worktarif" style="border-left: solid 2px #eee;"><button socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="12" onclick="return clickPlataInRate('<?php 
                                        echo showNumber($oldv12, 2);
                                        ?>
',this);" class="btn btn-success">In rate <?php 
                                        echo showNumber($oldv12, 2);
                                        ?>
</button><br>&nbsp;
										<td align=center class="worktarif"><button socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="12" onclick="return clickPlataIntegral('<?php 
                                        echo showNumber($v[12], 2);
                                        ?>
',this);" class="btn btn-success">Cu reducere <?php 
                                        echo showNumber($v[12], 2);
                                        ?>
</button><br><?php 
                                        echo $oldtarif12;
                                        ?>
									<?php 
                                    }
                                    ?>
<tr><td colspan=5> * Comisionul platit brokerului, calculat ca procent din prima totala afisata in tabel, inclus in prima totala.</table>
								<?php 
                                } else {
                                    if (false && getUserConfig('codpromotional') == "Card Cheque") {
                                        //validate cod promo
                                        if (strlen(trim($v['codpromotional']['VALUE'])) == 13 && intval(substr(trim($v['codpromotional']['VALUE']), 0, 7)) == 6426174) {
                                            //ok
                                            global $_CONFIG;
                                            //$_CONFIG['reduceretarife']=10;
                                        }
                                    }
                                    ?>
<table class="worktarife" cellpadding=0 cellspacing=0 border="1">
								<tr><th align=right>Asigurator<th align=right>6 luni<th align=right>1 an
								<?php 
                                    foreach ($soc as $k => $v) {
                                        if ($v['6'] < 2) {
                                            continue;
                                        }
                                        if ($v['12'] < 2) {
                                            continue;
                                        }
                                        $oldtarif6 = '';
                                        $oldtarif12 = '';
                                        if (false && (getUserConfig("reduceretarife") != "" || getUserConfig("reduceretarife_" . $v['soc']) != "")) {
                                            $red = getUserConfig("reduceretarife");
                                            if (getUserConfig("reduceretarife_" . $v['soc']) != "") {
                                                $red = getUserConfig("reduceretarife_" . $v['soc']);
                                            }
                                            $oldv6 = floatval($v[6]);
                                            $oldv12 = floatval($v[12]);
                                            $v[6] = floatval($v[6]) * (100 - floatval($red)) / 100;
                                            $v[12] = floatval($v[12]) * (100 - floatval($red)) / 100;
                                            $oldtarif6 = '<del><span class="tarifjos">' . showNumber($oldv6, 2) . '</span></del><br>';
                                            $oldtarif12 = '<del><span class="tarifjos">' . showNumber($oldv12, 2) . '</span></del><br>';
                                        }
                                        $oldtarif6 = '<br><span class="tarifjos" style="color:gray">*' . $v['com'] . '% ' . showNumber($v[6] * $v['com'] / 100, 2) . '</span>';
                                        $oldtarif12 = '<br><span class="tarifjos" style="color:gray">*' . $v['com'] . '% ' . showNumber($v[12] * $v['com'] / 100, 2) . '</span>';
                                        ?>
									<tr><td align=center style="text-align:center;"><?php 
                                        echo getLT($v['soc']);
                                        ?>
<td align=right class="worktarif">
									<a href="#" socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="6" tarif="<?php 
                                        echo showNumber($v['6'], 2);
                                        ?>
"><?php 
                                        $tt = showNumber($v['6'], 2);
                                        $tt = explode(",", $tt);
                                        echo $tt[0] . '<span class="tarifjos">,' . $tt[1] . '</span>';
                                        echo $oldtarif6;
                                        ?>
</a><td align=right class="worktarif"><a href="#"  socid="<?php 
                                        echo $v['soc'];
                                        ?>
" per="12" tarif="<?php 
                                        echo showNumber($v['12'], 2);
                                        ?>
"><?php 
                                        $tt = showNumber($v['12'], 2);
                                        $tt = explode(",", $tt);
                                        echo $tt[0] . '<span class="tarifjos">,' . $tt[1] . '</span>';
                                        echo $oldtarif12;
                                        ?>
</a>
									<?php 
                                    }
                                    ?>
								<tr><td colspan=3 style="color:gray;font-size:0.3em;">* Comisionul platit brokerului, inclus in prima totala, calculat ca procent din prima totala afisata in tabel.
								</table>
								<?php 
                                }
                                if (!isset($r['TarifeOfertaResponse']['ofertafinalizata']) || $r['TarifeOfertaResponse']['ofertafinalizata']['VALUE'] == "false") {
                                    ?>
									<a class="incarcatarife" href="site.php?TarifeOferta=<?php 
                                    echo intval($_GET['TarifeOferta']);
                                    ?>
"></a>
									<?php 
                                }
                                break;
                        }
                    }
                    if ($action == "PolitaOferta") {
                        if (!isset($r['TarifeOfertaResponse']['politafinalizata']) || $r['TarifeOfertaResponse']['politafinalizata']['VALUE'] == "false") {
                            ?>
							<a class="incarcapolita" href="site.php?PolitaOferta=<?php 
                            echo intval($_GET['PolitaOferta']);
                            ?>
"></a>
							<?php 
                        } else {
                            if (!isset($r['TarifeOfertaResponse']['politaid']['VALUE']) || !intval($r['TarifeOfertaResponse']['politaid']['VALUE'])) {
                                ?>
							<a class="incarcapolitaeroare" href="site.php?PolitaOferta=<?php 
                                echo intval($_GET['PolitaOferta']);
                                ?>
"></a>
							<?php 
                            }
                        }
                    }
                    if ($action == "PDFOferta") {
                        header('Content-Disposition: attachment; filename="Polita-' . intval($_GET['offid']) . '.pdf";');
                        return base64_decode($r['TarifeOfertaResponse']['politaPDF']['VALUE']);
                    }
                }
            }
            return false;
            break;
        case 'DateOferta':
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
	 <ModificaOferta xmlns="http://asiguram.ro/ws">
		   <idoferta>' . intval($_POST['offid']) . '</idoferta>
		   ';
            foreach ($_POST as $k => $v) {
                switch ($k) {
                    case 'tarif':
                    case 'tipplata':
                    case 'action':
                        break;
                    default:
                        $xml .= '<' . $k . '>' . $v . '</' . $k . '>';
                        break;
                }
            }
            $xml .= '
		 </ModificaOferta>
	  </soap:Body>
	</soap:Envelope>';
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, 'ModificaOferta');
            $r = $data['soap:Envelope']['soap:Body'];
            if (isset($r['soap:Fault'])) {
                return false;
            }
            return true;
            break;
        case 'WakeupCall':
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
		<WakeupCall xmlns="http://asiguram.ro/ws">
			<idoferta>' . intval($_GET['WakeupCall']) . '</idoferta>
		</WakeupCall>
	  </soap:Body>
	</soap:Envelope>';
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, 'WakeupCall');
            $r = $data['soap:Envelope']['soap:Body'];
            if (isset($r['soap:Fault'])) {
                return false;
            }
            return true;
            break;
        case 'ContulNou':
        case 'ParolaUitata':
        case 'ContulTau':
        case 'Reincarca':
            $xml = '<?xml version="1.0" encoding="utf-8"?>
	<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
	  xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
	  <soap:Header>
		 <CredentialHeader xmlns="http://asiguram.ro/ws">
		   <Username>' . getUserConfig("ws_username") . '</Username>
		   <Password>' . getUserConfig("ws_parola") . '</Password>
		 </CredentialHeader>
	  </soap:Header>
	  <soap:Body>
		<' . $action . ' xmlns="http://asiguram.ro/ws">
			<clientid>' . session_getvalue("login_clientid") . '</clientid>
			';
            foreach ($_POST as $k => $v) {
                if ($k == "frandom") {
                    continue;
                }
                if ($k == "action") {
                    continue;
                }
                if ($k == "textbutton") {
                    continue;
                }
                if ($k == "automaticsubmit") {
                    continue;
                }
                $xml .= '<' . $k . '>' . $v . '</' . $k . '>';
            }
            $xml .= '
		</' . $action . '>
	  </soap:Body>
	</soap:Envelope>';
            $data = ws_request(getUserConfig("ws_brokerurl"), $xml, $action);
            $r = $data['soap:Envelope']['soap:Body'];
            global $_local_error;
            $_local_error = '';
            if (isset($r['soap:Fault'])) {
                $_local_error = $r['soap:Fault']['faultstring']['VALUE'];
                return false;
            }
            if (isset($r['Client']['id']['VALUE'])) {
                if (intval($r['Client']['id']['VALUE'])) {
                    session_setvalue("login_clientid", intval($r['Client']['id']['VALUE']));
                }
            }
            if (isset($r['Redirect']['screen']['VALUE'])) {
                ?>
<textarea><?php 
                if (isset($r['Redirect']['message']['VALUE'])) {
                    ?>
alert("<?php 
                    echo $r['Redirect']['message']['VALUE'];
                    ?>
");<?php 
                }
                ?>
location.href='site.php?t=<?php 
                echo $r['Redirect']['screen']['VALUE'];
                ?>
';</textarea>
				<?php 
                die;
            }
            return true;
            break;
        case 'Portofoliu':
            include "extensions/process_offer_ws_client.php";
            break;
    }
}
Exemple #4
0
function lookup_execute($action, $slot)
{
    global $_POST;
    global $_GET;
    global $_CONFIG;
    require_once "config/db.php";
    global $conn;
    global $_local_error;
    $_local_error = "";
    global $_local_reloadform;
    $_local_reloadform = "";
    global $render_current_slot;
    global $current_slots;
    //mark slot on execution stack
    $render_current_slot++;
    $current_slots[$render_current_slot] = $slot;
    if (getUserConfig("pageprotection") == "yes") {
        if (isset($_POST['fprotection']) && $_POST['fprotection'] != "") {
            if (isset($_GET['ajax']) && $_GET['ajax'] == 1) {
                if (intval(session_getvalue("protection_page")) != intval($_POST['fprotection'])) {
                    $_local_error = getLT("protectionerror");
                }
            } else {
                if (intval(session_getvalue("protection_page")) != intval($_POST['fprotection']) + 1) {
                    $_local_error = getLT("protectionerror");
                }
            }
        }
    }
    //set default filter
    $control_filter = "";
    $control_name = "lookup";
    $control_table = "issues";
    $control_id = "id";
    //check for rights
    if (getUserConfig('dinsec_lookup_cando', $action) == 'no') {
        $_local_error = getLT('nopermissions');
    }
    if (getUserConfig('dinsec_lookup_canpost', $action) == 'no') {
        $_local_error = getLT('nopermissions');
    }
    if (session_getvalue("blockaccess_lookup") == "yes") {
        $_local_error = getLT('nopermissions');
    }
    if (session_getvalue("blockaccess_issues") == "yes") {
        $_local_error = getLT('nopermissions');
    }
    if ($_local_error == "") {
        switch ($action) {
            case 'info':
                if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
                    $_local_error = 'usercanceled';
                    break;
                }
                if ($_local_error == "") {
                    require_once "config/utils.php";
                    $_control_replace_sql = "parseAndReplaceAll";
                    if (file_exists("extensions/process_lookup.php")) {
                        include "extensions/process_lookup.php";
                    }
                }
                break;
            case 'siteoffer':
                if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
                    $_local_error = 'usercanceled';
                    break;
                }
                if ($_local_error == "") {
                    require_once "config/utils.php";
                    $_control_replace_sql = "parseAndReplaceAll";
                    if (file_exists("extensions/process_siteoffer.php")) {
                        include "extensions/process_siteoffer.php";
                    }
                }
                break;
            default:
                //$_local_error="slot:".$slot." unknown post action: ".$action;
                setSlotView($slot, "");
                break;
        }
    }
    if (isset($_POST['cancel_button']) && $_POST['cancel_button'] == getLT('cancel')) {
        //if($_local_error!="") session_addvalue($slot.'_error',getLT($_local_error));
        $_local_error = '';
    } else {
        if ($_local_reloadform != "" || $_local_error != "" || $action == "justreloadform") {
            //save post for later use
            foreach ($_POST as $key => $val) {
                if (is_array($val)) {
                    session_setvalue('savedpost_lookup_' . $key, correctPostValue(implode(",", str_replace(',', ' ', $_POST[$key]))));
                } else {
                    session_setvalue('savedpost_lookup_' . $key, correctPostValue($val));
                }
            }
            if ($_local_error != "") {
                session_addvalue($slot . '_error', $_local_error);
            }
        }
    }
    $render_current_slot--;
    return $_local_error;
}