<?php

/***************************************************************************

* copyright : (C) 2008 - 2015 WeBid

* site : http://www.webidsupport.com/

***************************************************************************/

/***************************************************************************

* This program is free software; you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation; either version 2 of the License, or

* (at your option) any later version. Although none of the code may be

* sold. If you have been sold this script, get a refund.

***************************************************************************/

include 'common.php';

include $include_path . 'membertypes.inc.php';

include $main_path . 'language/' . $language . '/categories.inc.php';

// Get parameters from the URL

foreach ($membertypes as $idm => $memtypearr)

{

$memtypesarr[$memtypearr['feedbacks']] = $memtypearr;

}

ksort($memtypesarr, SORT_NUMERIC);

$id = (isset($_SESSION['CURRENT_ITEM'])) ? intval($_SESSION['CURRENT_ITEM']) : 0;

$id = (isset($_REQUEST['id'])) ? intval($_REQUEST['id']) : 0;

if (!is_numeric($id)) $id = 0;

$bidderarray = array();

$bidderarraynum = 1;

$catscontrol = new MPTTcategories();

$_SESSION['CURRENT_ITEM'] = $id;

$_SESSION['REDIRECT_AFTER_LOGIN'] = $system->SETTINGS['siteurl'] . 'item.php?id=' . $id;

// get auction all needed data

$query = "SELECT a.*, ac.counter, u.nick, u.reg_date, u.country, u.zip FROM " . $DBPrefix . "auctions a

LEFT JOIN " . $DBPrefix . "users u ON (u.id = a.user)

LEFT JOIN " . $DBPrefix . "auccounter ac ON (ac.auction_id = a.id)

WHERE a.id = :auction_id LIMIT 1";

$params = array();

$params[] = array(':auction_id', $id, 'int');

$db->query($query, $params);

if ($db->numrows() == 0)

{

$_SESSION['msg_title'] = $ERR_622;

$_SESSION['msg_body'] = $ERR_623;

header('location: message.php');

exit;

}

$auction_data = $db->result();

$category = $auction_data['category'];

$auction_type = $auction_data['auction_type'];

$ends = $auction_data['ends'];

$start = $auction_data['starts'];

$user_id = $auction_data['user'];

$minimum_bid = $auction_data['minimum_bid'];

$high_bid = $auction_data['current_bid'];

$customincrement = $auction_data['increment'];

$seller_reg = FormatDate($auction_data['reg_date'], '/', false);

// sort out counter

if (empty($auction_data['counter']))

{

$query = "INSERT INTO `" . $DBPrefix . "auccounter` (`auction_id`, `counter`) VALUES (:counter, 1)";

$params = array();

$params[] = array(':counter', $id, 'int');

$db->query($query, $params);

$auction_data['counter'] = 1;

}

else

{

if (!isset($_SESSION['WEBID_VIEWED_AUCTIONS']))

{

$_SESSION['WEBID_VIEWED_AUCTIONS'] = array();

}

if (!in_array($id, $_SESSION['WEBID_VIEWED_AUCTIONS']))

{

$query = "UPDATE " . $DBPrefix . "auccounter set counter = counter + 1 WHERE auction_id = :auction_id";

$params = array();

$params[] = array(':auction_id', $id, 'int');

$db->query($query, $params);

$_SESSION['WEBID_VIEWED_AUCTIONS'][] = $id;

}

}

// get watch item data

if ($user->logged_in)

{

// Check if this item is not already added

$query = "SELECT item_watch FROM " . $DBPrefix . "users WHERE id = :user_id";

$params = array();

$params[] = array(':user_id', $user->user_data['id'], 'int');

$db->query($query, $params);

$watcheditems = trim($db->result('item_watch'));

$auc_ids = explode(' ', $watcheditems);

if (in_array($id, $auc_ids))

{

$watch_var = 'delete';

$watch_string = $MSG['5202_0'];

}

else

{

$watch_var = 'add';

$watch_string = $MSG['5202'];

}

}

else

{

$watch_var = '';

$watch_string = '';

}

// get ending time

$difference = $ends - time();

$showendtime = false;

$has_ended = false;

if ($start > time())

{

$ending_time = '<span class="errfont">' . $MSG['668'] . '</span>';

}

elseif ($difference > 0)

{

$ending_time = '';

$d = 0;

$days_difference = floor($difference / 86400);

if ($days_difference > 0)

{

$daymsg = ($days_difference == 1) ? $MSG['126b'] : $MSG['126'];

$ending_time .= $days_difference . ' ' . $daymsg . ' ';

$d++;

}

$difference = $difference % 86400;

$hours_difference = floor($difference / 3600);

if ($hours_difference > 0)

{

$ending_time .= $hours_difference . $MSG['25_0037'] . ' ';

$d++;

}

$difference = $difference % 3600;

$minutes_difference = floor($difference / 60);

$seconds_difference = $difference % 60;

if ($minutes_difference > 0 && $d < 2)

{

$ending_time .= $minutes_difference . $MSG['25_0032'] . ' ';

$d++;

}

if ($seconds_difference > 0 && $d < 2)

{

$ending_time .= $seconds_difference . $MSG['25_0033'];

}

$showendtime = true;

}

else

{

$ending_time = '<span class="errfont">' . $MSG['911'] . '</span>';

$has_ended = true;

}

// build bread crumbs

$query = "SELECT left_id, right_id, level FROM " . $DBPrefix . "categories WHERE cat_id = :cat_id";

$params = array();

$params[] = array(':cat_id', $auction_data['category'], 'int');

$db->query($query, $params);

$parent_node = $db->result();

$cat_value = '';

$crumbs = $catscontrol->get_bread_crumbs($parent_node['left_id'], $parent_node['right_id']);

for ($i = 0; $i < count($crumbs); $i++)

{

if ($crumbs[$i]['cat_id'] > 0)

{

if ($i > 0)

{

$cat_value .= ' > ';

}

$cat_value .= '<a href="' . $system->SETTINGS['siteurl'] . 'browse.php?id=' . $crumbs[$i]['cat_id'] . '">' . $category_names[$crumbs[$i]['cat_id']] . '</a>';

}

}

$secondcat_value = '';

if ($system->SETTINGS['extra_cat'] == 'y' && intval($auction_data['secondcat']) > 0)

{

$query = "SELECT left_id, right_id, level FROM " . $DBPrefix . "categories WHERE cat_id = :sec_cat_id";

$params = array();

$params[] = array(':sec_cat_id', $auction_data['secondcat'], 'int');

$db->query($query, $params);

$parent_node = $db->result();

$crumbs = $catscontrol->get_bread_crumbs($parent_node['left_id'], $parent_node['right_id']);

for ($i = 0; $i < count($crumbs); $i++)

{

if ($crumbs[$i]['cat_id'] > 0)

{

if ($i > 0)

{

$secondcat_value .= ' > ';

}

$secondcat_value .= '<a href="' . $system->SETTINGS['siteurl'] . 'browse.php?id=' . $crumbs[$i]['cat_id'] . '">' . $category_names[$crumbs[$i]['cat_id']] . '</a>';

}

}

}

// history

$query = "SELECT b.*, u.nick, u.rate_sum FROM " . $DBPrefix . "bids b

LEFT JOIN " . $DBPrefix . "users u ON (u.id = b.bidder)

WHERE b.auction = :auc_id ORDER BY b.bid DESC, b.quantity DESC, b.id DESC";

$params = array();

$params[] = array(':auc_id', $id, 'int');

$db->query($query, $params);

$num_bids = $db->numrows();

$i = 0;

$left = $auction_data['quantity'];

$hbidder_data = array();

foreach ($db->fetchall() as $bidrec)

{

if (!isset($bidderarray[$bidrec['nick']]))

{

if ($system->SETTINGS['buyerprivacy'] == 'y' && $user->user_data['id'] != $auction_data['user'] && $user->user_data['id'] != $bidrec['bidder'])

{

$bidderarray[$bidrec['nick']] = $MSG['176'] . ' ' . $bidderarraynum;

$bidderarraynum++;

}

else

{

$bidderarray[$bidrec['nick']] = $bidrec['nick'];

}

}

if ($left > 0 && !in_array($bidrec['bidder'], $hbidder_data)) //store highest bidder details

{

$hbidder_data[] = $bidrec['bidder'];

$fb_pos = $fb_neg = 0;

// get seller feebacks

$query = "SELECT rate FROM " . $DBPrefix . "feedbacks WHERE rated_user_id = :rate_users_id";

$params = array();

$params[] = array(':rate_users_id', $bidrec['bidder'], 'int');

$db->query($query, $params);

// count numbers

$fb_pos = $fb_neg = 0;

while ($fb_arr = $db->fetch())

{

if ($fb_arr['rate'] == 1)

{

$fb_pos++;

}

elseif ($fb_arr['rate'] == - 1)

{

$fb_neg++;

}

}

$total_rate = $fb_pos - $fb_neg;

foreach ($memtypesarr as $k => $l)

{

if ($k >= $total_rate || $i++ == (count($memtypesarr) - 1))

{

$buyer_rate_icon = $l['icon'];

break;

}

}

$template->assign_block_vars('high_bidders', array(

'BUYER_ID' => $bidrec['bidder'],

'BUYER_NAME' => $bidderarray[$bidrec['nick']],

'BUYER_FB' => $bidrec['rate_sum'],

'BUYER_FB_ICON' => (!empty($buyer_rate_icon) && $buyer_rate_icon != 'transparent.gif') ? '<img src="' . $system->SETTINGS['siteurl'] . 'images/icons/' . $buyer_rate_icon . '" alt="' . $buyer_rate_icon . '" class="fbstar">' : ''

));

}

$template->assign_block_vars('bidhistory', array(

'BGCOLOUR' => (!($i % 2)) ? '' : 'class="alt-row"',

'ID' => $bidrec['bidder'],

'NAME' => $bidderarray[$bidrec['nick']],

'BID' => $system->print_money($bidrec['bid']),

'WHEN' => ArrangeDateNoCorrection($bidrec['bidwhen'] + $system->tdiff) . ':' . date('s', $bidrec['bidwhen']),

'QTY' => $bidrec['quantity']

));

$left -= $bidrec['quantity'];

$i++;

}

$userbid = false;

if ($user->logged_in && $num_bids > 0)

{

// check if youve bid on this before

$query = "SELECT bid FROM " . $DBPrefix . "bids WHERE auction = :auction AND bidder = :bidder LIMIT 1";

$params = array();

$params[] = array(':auction', $id, 'int');

$params[] = array(':bidder', $user->user_data['id'], 'int');

$db->query($query, $params);

if ($db->numrows() > 0)

{

if (in_array($user->user_data['id'], $hbidder_data))

{

$yourbidmsg = $MSG['25_0088'];

$yourbidclass = 'yourbidwin';

if ($difference <= 0 && $auction_data['reserve_price'] > 0 && $auction_data['current_bid'] < $auction_data['reserve_price'])

{

$yourbidmsg = $MSG['514'];

$yourbidclass = 'yourbidloss';

}

elseif ($difference <= 0 || $auction_data['bn_only'] == 'y')

{

$yourbidmsg = $MSG['25_0089'];

}

}

elseif ($auction_data['bn_only'] == 'y')

{

$yourbidmsg = $MSG['25_0089'];

$yourbidclass = 'yourbidwin';

}

else

{

$yourbidmsg = $MSG['25_0087'];

$yourbidclass = 'yourbidloss';

}

$userbid = true;

}

}

// sort out user questions

$query = "SELECT id FROM " . $DBPrefix . "messages WHERE reply_of = 0 AND public = 1 AND question = :question_id";

$params = array();

$params[] = array(':question_id', $id, 'int');

$db->query($query, $params);

$num_questions = $db->numrows();

foreach ($db->fetchall() as $row)

{

$template->assign_block_vars('questions', array()); // just need to create the block

$query = "SELECT sentfrom, message FROM " . $DBPrefix . "messages WHERE question = :id AND reply_of = :reply_of OR id = :message_id ORDER BY sentat ASC";

$params = array();

$params[] = array(':id', $id, 'int');

$params[] = array(':reply_of', $row['id'], 'int');

$params[] = array(':message_id', $row['id'], 'int');

$db->query($query, $params);

while ($row_ = $db->fetch())

{

$template->assign_block_vars('questions.conv', array(

'MESSAGE' => $row_['message'],

'BY_WHO' => ($user_id == $row_['sentfrom']) ? $MSG['125'] : $MSG['555']

));

}

}

$high_bid = ($num_bids == 0) ? $minimum_bid : $high_bid;

if ($customincrement == 0)

{

// Get bid increment for current bid and calculate minimum bid

$query = "SELECT increment FROM " . $DBPrefix . "increments WHERE

((low <= :val0 AND high >= :val1) OR

(low < :val2 AND high < :val3)) ORDER BY increment DESC";

$params = array();

$params[] = array(':val0', $high_bid, 'float');

$params[] = array(':val1', $high_bid, 'float');

$params[] = array(':val2', $high_bid, 'float');

$params[] = array(':val3', $high_bid, 'float');

$db->query($query, $params);

if ($db->numrows() != 0)

{

$increment = $db->result('increment');

}

}

else

{

$increment = $customincrement;

}

if ($auction_type == 2)

{

$increment = 0;

}

if ($customincrement > 0)

{

$increment = $customincrement;

}

if ($num_bids == 0 || $auction_type == 2)

{

$next_bidp = $minimum_bid;

}

else

{

$next_bidp = $high_bid + $increment;

}

$view_history = '';

if ($num_bids > 0 && !isset($_GET['history']))

{

$view_history = '(<a href="' . $system->SETTINGS['siteurl'] . 'item.php?id=' . $id . '&history=view#history">' . $MSG['105'] . '</a>)';

}

elseif (isset($_GET['history']))

{

$view_history = '(<a href="' . $system->SETTINGS['siteurl'] . 'item.php?id=' . $id . '">' . $MSG['507'] . '</a>)';

}

$min_bid = $system->print_money($minimum_bid);

$high_bid = $system->print_money($high_bid);

if ($difference > 0)

{

$next_bid = $system->print_money($next_bidp);

}

else

{

$next_bid = '--';

}

// get seller feebacks

$query = "SELECT rate FROM " . $DBPrefix . "feedbacks WHERE rated_user_id = :user_id";

$params = array();

$params[] = array(':user_id', $user_id, 'int');

$db->query($query, $params);

$num_feedbacks = $db->numrows();

// count numbers

$fb_pos = $fb_neg = 0;

while ($fb_arr = $db->fetch())

{

if ($fb_arr['rate'] == 1)

{

$fb_pos++;

}

elseif ($fb_arr['rate'] == - 1)

{

$fb_neg++;

}

}

$total_rate = $fb_pos - $fb_neg;

if ($total_rate > 0)

{

$i = 0;

foreach ($memtypesarr as $k => $l)

{

if ($k >= $total_rate || $i++ == (count($memtypesarr) - 1))

{

$seller_rate_icon = $l['icon'];

break;

}

}

}

// Pictures Gellery

$K = 0;

$UPLOADED_PICTURES = array();

if (file_exists($uploaded_path . $id))

{

$dir = @opendir($uploaded_path . $id);

if ($dir)

{

while ($file = @readdir($dir))

{

if ($file != '.' && $file != '..' && strpos($file, 'thumb-') === false)

{

$UPLOADED_PICTURES[$K] = $file;

$K++;

}

}

@closedir($dir);

}

$GALLERY_DIR = $id;

if (is_array($UPLOADED_PICTURES))

{

foreach ($UPLOADED_PICTURES as $k => $v)

{

$TMP = @getimagesize($uploaded_path . $id . '/' . $v);

if ($TMP[2] >= 1 && $TMP[2] <= 3)

{

$template->assign_block_vars('gallery', array(

'V' => $v

));

}

}

}

}

// payment methods

$payment = explode(', ', $auction_data['payment']);

$payment_methods = '';

$query = "SELECT * FROM " . $DBPrefix . "gateways";

$db->direct_query($query);

$gateways_data = $db->result();

$gateway_list = explode(',', $gateways_data['gateways']);

$p_first = true;

foreach ($gateway_list as $v)

{

$v = strtolower($v);

if ($gateways_data[$v . '_active'] == 1 && _in_array($v, $payment))

{

if (!$p_first)

{

$payment_methods .= ', ';

}

else

{

$p_first = false;

}

$payment_methods .= $system->SETTINGS['gatways'][$v];

}

}

$payment_options = unserialize($system->SETTINGS['payment_options']);

foreach ($payment_options as $k => $v)

{

if (_in_array($k, $payment))

{

if (!$p_first)

{

$payment_methods .= ', ';

}

else

{

$p_first = false;

}

$payment_methods .= $v;

}

}

$bn_link = (!$has_ended) ? ' <a href="' . $system->SETTINGS['siteurl'] . 'buy_now.php?id=' . $id . '"><img border="0" align="absbottom" alt="' . $MSG['496'] . '" src="' . get_lang_img('buy_it_now.gif') . '"></a>' : '';

$page_title = $system->uncleanvars($auction_data['title']);

$sslurl = ($system->SETTINGS['usersauth'] == 'y' && $system->SETTINGS['https'] == 'y') ? str_replace('http://', 'https://', $system->SETTINGS['siteurl']) : $system->SETTINGS['siteurl'];

$sslurl = (!empty($system->SETTINGS['https_url'])) ? $system->SETTINGS['https_url'] : $sslurl;

$shipping = '';

if ($auction_data['shipping'] == 1)

$shipping = $MSG['031'];

elseif ($auction_data['shipping'] == 2)

$shipping = $MSG['032'];

elseif ($auction_data['shipping'] == 3)

$shipping = $MSG['867'];

$template->assign_vars(array(

'ID' => $auction_data['id'],

'TITLE' => $system->uncleanvars($auction_data['title']),

'SUBTITLE' => $system->uncleanvars($auction_data['subtitle']),

'AUCTION_DESCRIPTION' => $auction_data['description'],

'PIC_URL' => $uploaded_path . $id . '/' . $auction_data['pict_url'],

'SHIPPING_COST' => ($auction_data['shipping_cost'] > 0) ? $system->print_money($auction_data['shipping_cost']) : $MSG['1152'],

'ADDITIONAL_SHIPPING_COST' => $system->print_money($auction_data['shipping_cost_additional']),

'COUNTRY' => $auction_data['country'],

'ZIP' => $auction_data['zip'],

'QTY' => $auction_data['quantity'],

'ENDS' => $ending_time,

'ENDS_IN' => ($ends - time()),

'STARTTIME' => ArrangeDateNoCorrection($start + $system->tdiff),

'ENDTIME' => ArrangeDateNoCorrection($ends + $system->tdiff),

'BUYNOW1' => $auction_data['buy_now'],

'BUYNOW2' => ($auction_data['buy_now'] > 0) ? $system->print_money($auction_data['buy_now']) . $bn_link : $system->print_money($auction_data['buy_now']),

'NUMBIDS' => $num_bids,

'MINBID' => $min_bid,

'MAXBID' => $high_bid,

'NEXTBID' => $next_bid,

'INTERNATIONAL' => ($auction_data['international'] == 1) ? $MSG['033'] : $MSG['043'],

'SHIPPING' => $shipping,

'SHIPPINGTERMS' => nl2br($system->uncleanvars($auction_data['shipping_terms'])),

'PAYMENTS' => $payment_methods,

'AUCTION_VIEWS' => $auction_data['counter'],

'AUCTION_TYPE' => ($auction_data['bn_only'] == 'n') ? $system->SETTINGS['auction_types'][$auction_type] : $MSG['933'],

'ATYPE' => $auction_type,

'THUMBWIDTH' => $system->SETTINGS['thumb_show'],

'VIEW_HISTORY1' => (empty($view_history)) ? '' : $view_history . ' | ',

'VIEW_HISTORY2' => $view_history,

'TOPCATSPATH' => ($system->SETTINGS['extra_cat'] == 'y' && isset($_SESSION['browse_id']) && $_SESSION['browse_id'] == $auction_data['secondcat']) ? $secondcat_value : $cat_value,

'CATSPATH' => $cat_value,

'SECCATSPATH' => $secondcat_value,

'CAT_ID' => $auction_data['category'],

'UPLOADEDPATH' => $uploaded_path,

'BNIMG' => get_lang_img('buy_it_now.gif'),

'SELLER_REG' => $seller_reg,

'SELLER_ID' => $auction_data['user'],

'SELLER_NICK' => $auction_data['nick'],

'SELLER_TOTALFB' => $total_rate,

'SELLER_FBICON' => (!empty($seller_rate_icon) && $seller_rate_icon != 'transparent.gif') ? '<img src="' . $system->SETTINGS['siteurl'] . 'images/icons/' . $seller_rate_icon . '" alt="' . $seller_rate_icon . '" class="fbstar">' : '',

'SELLER_NUMFB' => $num_feedbacks,

'SELLER_FBPOS' => ($num_feedbacks > 0) ? '(' . ceil($fb_pos * 100 / $num_feedbacks) . '%)' : $MSG['000'],

'SELLER_FBNEG' => ($fb_neg > 0) ? $MSG['5507'] . ' (' . ceil($fb_neg * 100 / $total_rate) . '%)' : '0',

'WATCH_VAR' => $watch_var,

'WATCH_STRING' => $watch_string,

'YOURBIDMSG' => (isset($yourbidmsg)) ? $yourbidmsg : '',

'YOURBIDCLASS' => (isset($yourbidclass)) ? $yourbidclass : '',

'BIDURL' => $sslurl,

'B_HASENDED' => $has_ended,

'B_CANEDIT' => ($user->logged_in && $user->user_data['id'] == $auction_data['user'] && $num_bids == 0 && $difference > 0),

'B_CANCONTACTSELLER' => (($system->SETTINGS['contactseller'] == 'always' || ($system->SETTINGS['contactseller'] == 'logged' && $user->logged_in)) && (!$user->logged_in || $user->user_data['id'] != $auction_data['user'])),

'B_HASIMAGE' => (!empty($auction_data['pict_url'])),

'B_NOTBNONLY' => ($auction_data['bn_only'] == 'n'),

'B_HASRESERVE' => ($auction_data['reserve_price'] > 0 && $auction_data['reserve_price'] > $auction_data['current_bid']),

'B_BNENABLED' => ($system->SETTINGS['buy_now'] == 2),

'B_HASGALELRY' => (count($UPLOADED_PICTURES) > 0),

'B_SHOWHISTORY' => (isset($_GET['history']) && $num_bids > 0),

'B_BUY_NOW' => ($auction_data['buy_now'] > 0 && ($auction_data['bn_only'] == 'y' || $auction_data['bn_only'] == 'n' && ($auction_data['num_bids'] == 0 || ($auction_data['reserve_price'] > 0 && $auction_data['current_bid'] < $auction_data['reserve_price'])))),

'B_BUY_NOW_ONLY' => ($auction_data['bn_only'] == 'y'),

'B_ADDITIONAL_SHIPPING_COST' => ($auction_data['auction_type'] == '2'),

'B_USERBID' => $userbid,

'B_BIDDERPRIV' => ($system->SETTINGS['buyerprivacy'] == 'y' && (!$user->logged_in || ($user->logged_in && $user->user_data['id'] != $auction_data['user']))),

'B_HASBUYER' => (count($hbidder_data) > 0),

'B_COUNTDOWN' => ($system->SETTINGS['hours_countdown'] > (($ends - time()) / 3600)),

'B_HAS_QUESTIONS' => ($num_questions > 0),

'B_CAN_BUY' => $user->can_buy && !($start > time()),

'B_SHOWENDTIME' => $showendtime,

'B_SHOW_ADDITIONAL_SHIPPING_COST' => ($auction_data['shipping_cost_additional'] > 0)

));

include 'header.php';

$template->set_filenames(array(

'body' => 'item.tpl'

));

$template->display('body');

include 'footer.php';

unset($_SESSION['browse_id']);