#
        # Update shipping table
        #
        if (is_array($posted_data)) {
            foreach ($posted_data as $rate_id => $v) {
                cw_array2update("shipping_rates", array("minweight" => cw_convert_number($v['minweight']), "maxweight" => cw_convert_number($v['maxweight']), "mintotal" => cw_convert_number($v['mintotal']), "maxtotal" => cw_convert_number($v['maxtotal']), "rate" => cw_convert_number($v['rate']), "item_rate" => cw_convert_number($v['item_rate']), "rate_p" => cw_convert_number($v['rate_p']), "overweight" => cw_convert_number($v['overweight']), "overweight_rate" => cw_convert_number($v['overweight_rate']), "rate_p" => cw_convert_number($v['rate_p']), "weight_rate" => cw_convert_number($v['weight_rate'])), "rate_id='{$rate_id}' {$warehouse_condition} {$type_condition}");
            }
            $top_message['content'] = cw_get_langvar_by_name("msg_shipping_rates_upd");
        }
    }
    if ($action == "add") {
        #
        # Add new shipping rate
        #
        if ($shipping_id_new) {
            cw_array2insert("shipping_rates", array("shipping_id" => $shipping_id_new, "minweight" => cw_convert_number($minweight_new), "maxweight" => cw_convert_number($maxweight_new), "maxamount" => cw_convert_number($maxamount_new), "mintotal" => cw_convert_number($mintotal_new), "maxtotal" => cw_convert_number($maxtotal_new), "rate" => cw_convert_number($rate_new), "item_rate" => cw_convert_number($item_rate_new), "rate_p" => cw_convert_number($rate_p_new), "weight_rate" => cw_convert_number($weight_rate_new), "warehouse_customer_id" => $user_account['warehouse_customer_id'], "zone_id" => $zone_id_new, "type" => $type, "overweight" => cw_convert_number($overweight_new), "overweight_rate" => cw_convert_number($overweight_rate_new)));
            $top_message['content'] = cw_get_langvar_by_name("msg_shipping_rate_add");
        }
    }
    cw_header_location("index.php?target=shipping_rates&zone_id={$zone_id}&shipping_id={$shipping_id}&type={$type}");
}
$zone_condition = $zone_id != "" ? "and {$tables['shipping_rates']}.zone_id='{$zone_id}'" : "";
$method_condition = $shipping_id != "" ? "and {$tables['shipping_rates']}.shipping_id='{$shipping_id}'" : "";
$shipping_rates = cw_query("SELECT {$tables['shipping_rates']}.*, {$tables['shipping']}.shipping, {$tables['shipping']}.shipping_time, {$tables['shipping']}.destination FROM {$tables['shipping']}, {$tables['shipping_rates']} WHERE {$tables['shipping_rates']}.shipping_id={$tables['shipping']}.shipping_id AND {$tables['shipping']}.active=1 {$warehouse_condition} {$type_condition} {$zone_condition} {$method_condition} " . ($type == "R" ? " AND code!='' " : '') . " ORDER BY {$tables['shipping']}.orderby, {$tables['shipping_rates']}.maxweight");
#
# Prepare zones list
#
$zones = array(array("zone_id" => 0, "zone" => cw_get_langvar_by_name("lbl_zone_default")));
$_tmp = cw_query("SELECT zone_id, zone_name as zone FROM {$tables['zones']} WHERE 1 {$warehouse_condition} and is_shipping=1 ORDER BY zone_id");
if (!empty($_tmp)) {
    $zones = cw_array_merge($zones, $_tmp);
} elseif ($action == "events" && $js_tab == 'maillist' && !empty($survey_id)) {
    if (!$allow_events) {
        $event_type = '';
    }
    # Modify survey event
    cw_array2update("surveys", array("event_type" => $event_type, "event_logic" => $event_logic), "survey_id = '{$survey_id}'");
    if (!empty($event_type) && !empty($new_element)) {
        # Add / Update event with conditions
        foreach ($new_element as $param => $ids) {
            if (empty($param)) {
                continue;
            }
            $query_data = array("survey_id" => $survey_id, "param" => $param);
            foreach ($ids as $id) {
                if ($param == 'T') {
                    $id = cw_convert_number($id);
                }
                if (empty($id)) {
                    if ($param == 'T') {
                        db_query("DELETE FROM {$tables['survey_events']} WHERE survey_id = '{$survey_id}' AND param = '{$param}'");
                    }
                    continue;
                }
                $query_data['id'] = $id;
                cw_array2insert("survey_events", $query_data, true);
            }
        }
        db_query("DELETE FROM {$tables['survey_events']} WHERE survey_id = '{$survey_id}' AND param = ''");
    } else {
        db_query("DELETE FROM {$tables['survey_events']} WHERE survey_id = '{$survey_id}'");
    }
     if (!empty($posted_data) && is_array($posted_data)) {
         foreach ($posted_data as $rate_id => $v) {
             $rate_value = cw_convert_number($v['rate_value'], "3" . substr($config['Appearance']['number_format'], 1));
             $rate_type = $v['rate_type'];
             if (!in_array($rate_type, array("%", "\$"))) {
                 $rate_type = "%";
             }
             db_query("UPDATE {$tables['tax_rates']} SET rate_value='{$rate_value}', rate_type='{$rate_type}' WHERE rate_id='{$rate_id}' ");
         }
         $top_message['content'] = cw_get_langvar_by_name("msg_tax_rate_upd");
         $top_message['anchor'] = "rates";
     }
     $redirect_to = "&tax_id={$tax_id}";
 } elseif ($action == 'rate_details' && !empty($tax_id)) {
     $rate_id = intval(@$rate_id);
     $rate_value = cw_convert_number($rate_value, "3" . substr($config['Appearance']['number_format'], 1));
     $zone_id = intval($zone_id);
     if (!in_array($rate_type, array("%", "\$"))) {
         $rate_type = "%";
     }
     if (empty($membership_ids) || in_array(-1, $membership_ids)) {
         $membership_ids_where = "IS NULL ";
     } else {
         $membership_ids_where = "IN ('" . implode("','", $membership_ids) . "') ";
     }
     if (cw_query_first_cell("SELECT COUNT(*) FROM {$tables['tax_rates']} LEFT JOIN {$tables['tax_rate_memberships']} ON {$tables['tax_rates']}.rate_id = {$tables['tax_rate_memberships']}.rate_id WHERE {$tables['tax_rates']}.tax_id = '{$tax_id}' AND {$tables['tax_rates']}.rate_id != '{$rate_id}' AND {$tables['tax_rates']}.zone_id = '{$zone_id}' AND {$tables['tax_rate_memberships']}.membership_id " . $membership_ids_where) == 0) {
         $rate_formula = preg_replace("/^=/", "", $rate_formula);
         $query_data = array("zone_id" => $zone_id, "formula" => $rate_formula, "rate_value" => $rate_value, "rate_type" => $rate_type);
         if (!empty($rate_id)) {
             cw_array2update("tax_rates", $query_data, "rate_id='{$rate_id}' ");
             db_query("DELETE FROM {$tables['tax_rate_memberships']} WHERE rate_id='{$rate_id}'");
            $top_message['content'] = cw_get_langvar_by_name("msg_shipping_rates_del");
        }
    }
    if ($action == "update") {
        #
        # Update shipping table
        #
        if (is_array($posted_data)) {
            foreach ($posted_data as $rate_id => $v) {
                cw_array2update("shipping_rates", array("minweight" => cw_convert_number($v['minweight']), "maxweight" => cw_convert_number($v['maxweight']), "mintotal" => cw_convert_number($v['mintotal']), "maxtotal" => cw_convert_number($v['maxtotal']), "rate" => cw_convert_number($v['rate']), "item_rate" => cw_convert_number($v['item_rate']), "rate_p" => cw_convert_number($v['rate_p']), "overweight" => cw_convert_number($v['overweight']), "overweight_rate" => cw_convert_number($v['overweight_rate']), "rate_p" => cw_convert_number($v['rate_p']), "weight_rate" => cw_convert_number($v['weight_rate']), 'apply_to' => $v['apply_to'] == "DST" ? "DST" : "ST"), "rate_id='{$rate_id}' {$warehouse_condition} {$type_condition}");
            }
            $top_message['content'] = cw_get_langvar_by_name("msg_shipping_rates_upd");
        }
    }
    if ($action == "add" && $shipping_id_new) {
        cw_array2insert("shipping_rates", array("shipping_id" => $shipping_id_new, "minweight" => cw_convert_number($minweight_new), "maxweight" => cw_convert_number($maxweight_new), "maxamount" => cw_convert_number($maxamount_new), "mintotal" => cw_convert_number($mintotal_new), "maxtotal" => cw_convert_number($maxtotal_new), "rate" => cw_convert_number($rate_new), "item_rate" => cw_convert_number($item_rate_new), "rate_p" => cw_convert_number($rate_p_new), "weight_rate" => cw_convert_number($weight_rate_new), "warehouse_customer_id" => $current_area == 'A' ? $division_id : $user_account['warehouse_customer_id'], "zone_id" => $zone_id_new, "type" => $type, "overweight" => cw_convert_number($overweight_new), "overweight_rate" => cw_convert_number($overweight_rate_new), 'apply_to' => $apply_to_new == "DST" ? "DST" : "ST"));
        $top_message['content'] = cw_get_langvar_by_name("msg_shipping_rate_add");
    }
    cw_header_location("index.php?target={$target}&zone_id={$zone_id}&shipping_id={$shipping_id}&type={$type}");
}
$zone_condition = $zone_id ? "and {$tables['shipping_rates']}.zone_id='{$zone_id}'" : '';
$method_condition = $shipping_id ? "and {$tables['shipping_rates']}.shipping_id='{$shipping_id}'" : '';
if ($division_id and $current_area == 'A') {
    $warehouse_condition = " and warehouse_customer_id='{$division_id}'";
}
$shipping_rates = cw_query("SELECT {$tables['shipping_rates']}.*, {$tables['shipping']}.shipping, {$tables['shipping']}.shipping_time FROM {$tables['shipping']}, {$tables['shipping_rates']} WHERE {$tables['shipping_rates']}.shipping_id={$tables['shipping']}.shipping_id AND {$tables['shipping']}.active=1 {$warehouse_condition} {$type_condition} {$zone_condition} {$method_condition} " . ($type == "R" ? " AND code!='' " : '') . " ORDER BY {$tables['shipping']}.orderby, {$tables['shipping_rates']}.maxweight");
#
# Prepare zones list
#
$zones = array(array("zone_id" => 0, "zone" => cw_get_langvar_by_name("lbl_zone_default")));
$_tmp = cw_query("SELECT zone_id, zone_name as zone FROM {$tables['zones']} WHERE 1 {$warehouse_condition} and is_shipping=1 ORDER BY zone_id");
function cw_detect_price($price, $cur_symbol = '$', $cur_symbol_left = true)
{
    if (!is_numeric($price)) {
        $price = trim($price);
        $cur_symbol = preg_quote($cur_symbol, "/");
        if ($cur_symbol_left) {
            $price = preg_replace("/^" . $cur_symbol . "/S", "", $price);
        } else {
            $price = preg_replace("/" . $cur_symbol . "\$/S", "", $price);
        }
        $price = cw_convert_number($price);
    }
    return doubleval($price);
}
<?php

# kornev, TOFIX
if (!$addons['Salesman']) {
    cw_header_location('index.php');
}
if ($action == "edit" && $level) {
    foreach ($level as $k => $v) {
        $v = cw_convert_number($v);
        db_query("REPLACE INTO {$tables['salesman_tier_commissions']} VALUES ('{$k}', '{$v}')");
    }
    cw_header_location("index.php?target=salesman_level_commissions");
}
$levels = array();
for ($x = 1; $x < $config['Salesman']['salesman_max_level']; $x++) {
    $levels[$x] = cw_query_first("SELECT * FROM {$tables['salesman_tier_commissions']} WHERE level = '{$x}'");
}
db_query("DELETE FROM {$tables['salesman_tier_commissions']} WHERE level > '" . ($config['Salesman']['salesman_max_level'] - 1) . "'");
$smarty->assign('levels', $levels);
$smarty->assign('main', 'level_commissions');
                } elseif ($v['product_id']) {
                    $products = explode(' ', $v['product_id']);
                    if (is_array($products)) {
                        foreach ($products as $product_id) {
                            if (!$product_id) {
                                continue;
                            }
                            $is_exists = cw_query_first_cell("SELECT COUNT(*) FROM {$tables['salesman_plans_commissions']} WHERE plan_id = '{$plan_id}' AND item_id = '{$product_id}' AND item_type = 'P' and membership_id='{$v['membership_id']}'") > 0;
                            if (!$is_exists) {
                                db_query("INSERT INTO {$tables['salesman_plans_commissions']} (plan_id, commission, commission_type, item_id, item_type, membership_id) VALUES ('{$plan_id}', '" . addslashes(cw_convert_number($v['commission'])) . "', '{$v['commission_type']}', '{$product_id}', 'P', '{$v['membership_id']}')");
                            }
                        }
                    }
                }
            } else {
                db_query("update {$tables['salesman_plans_commissions']} SET commission='" . addslashes(cw_convert_number($v['commission'])) . "', commission_type='{$v['commission_type']}', membership_id='{$v['membership_id']}' WHERE id='{$id}'");
            }
        }
    }
    if (is_array($basic)) {
        foreach ($basic as $membership_id => $val) {
            if (cw_query_first_cell("SELECT COUNT(*) FROM {$tables['salesman_plans_commissions']} WHERE plan_id='{$plan_id}' AND item_id='0' AND item_type='G' and membership_id='{$membership_id}'") == "0") {
                db_query("INSERT INTO {$tables['salesman_plans_commissions']} (plan_id, commission, commission_type, item_type, membership_id) VALUES('{$plan_id}', '{$val['commission']}', '{$val['commission_type']}', 'G', '{$membership_id}')");
            } else {
                db_query("UPDATE {$tables['salesman_plans_commissions']} SET commission='{$val['commission']}', commission_type='{$val['commission_type']}' WHERE plan_id='{$plan_id}' AND item_id='0' AND item_type='G' and membership_id='{$membership_id}'");
            }
        }
    }
    db_query("UPDATE {$tables['salesman_plans']} SET min_paid = '{$min_paid}' WHERE plan_id='{$plan_id}'");
    cw_header_location("index.php?target=salesman_plans&mode=edit&plan_id={$plan_id}");
}
 }
 //    cw_log_add('mass_update_test',array($vs));
 if (is_array($vs)) {
     foreach ($vs as $k => $v) {
         if (AREA_TYPE == 'P') {
             $insert = array();
             $insert['avail'] = cw_convert_number($v['avail']);
             $insert['warehouse_customer_id'] = $user_account['warehouse_customer_id'];
             $insert['variant_id'] = $k;
             $insert['product_id'] = $product_id;
             cw_warehouse_insert_avail($insert, true);
             continue;
         }
         $v['price'] = cw_convert_number($v['price']);
         $v['weight'] = cw_convert_number($v['weight']);
         $v['cost'] = cw_convert_number($v['cost']);
         $query_data = array('weight' => $v['weight'], 'cost' => $v['cost']);
         $v['mpn'] = trim($v['mpn']);
         $v['productcode'] = trim($v['productcode']);
         $v['eancode'] = trim($v['eancode']);
         if (!cw_query_first_cell("select count(*) from {$tables['product_variants']} where productcode = '{$v['productcode']}'")) {
             $query_data['productcode'] = $v['productcode'];
         }
         if (!cw_query_first_cell("select count(*) from {$tables['product_variants']} where eancode = '{$v['eancode']}'")) {
             $query_data['eancode'] = $v['eancode'];
         }
         //if ($v['mpn']=='' || !cw_query_first_cell("select count(*) from $tables[product_variants] where mpn = '$v[mpn]'"))
         $query_data['mpn'] = $v['mpn'];
         cw_array2update('product_variants', $query_data, "variant_id = '{$k}'");
         cw_price_lists_replace_price($product_id, $v['price'], $k, false, $v['is_manual_price']);
         $v['variant_id'] = $k;
$top_message =& cw_session_register('top_message', array());
$shipping_modified_data =& cw_session_register('shipping_modified_data', array());
if ($action == 'list') {
    if (!empty($data)) {
        foreach ($data as $id => $arr) {
            if (!$arr['active']) {
                $arr['active'] = 0;
            }
            $arr['weight_min'] = cw_convert_number($arr['weight_min']);
            $arr['weight_limit'] = cw_convert_number($arr['weight_limit']);
            cw_array2update("shipping", $arr, "shipping_id = '{$id}'");
        }
    }
    if (!empty($add['shipping'])) {
        $add['weight_min'] = cw_convert_number($add['weight_min']);
        $add['weight_limit'] = cw_convert_number($add['weight_limit']);
        $id = cw_array2insert("shipping", $add);
    }
    $top_message['content'] = cw_get_langvar_by_name("msg_adm_shipping_methods_upd");
    cw_header_location("index.php?target={$target}");
}
if ($action == 'update') {
    $rules = array('shipping' => '');
    $update['shipping_id'] = $shipping_id;
    $update['attributes'] = $attributes;
    $fillerror = cw_error_check($update, $rules, 'D');
    if (!$fillerror) {
        if (!$shipping_id) {
            $update['shipping_id'] = $shipping_id = cw_array2insert('shipping', $update, 1, array('shipping', 'active', 'orderby'));
        }
        cw_array2update('shipping', $update, "shipping_id='{$shipping_id}'", array('carrier_id', 'shipping', 'shipping_time', 'destination', 'active', 'weight_min', 'weight_limit', 'insurance', 'fee_basic', 'fee_basic_limit', 'fee_ex_flat', 'fee_ex_percent'));
                if ($edited_language == $config['default_admin_language']) {
                    $fields_to_update[] = 'name';
                }
                cw_array2update('product_options_values', $v, "option_id = '{$k}'", $fields_to_update);
                cw_array2insert('product_options_values_lng', $v, true, array('code', 'option_id', 'name'));
            }
        }
        if ($ge_id && $fields['options']) {
            while ($pid = cw_group_edit_each($ge_id, 1, $product_id)) {
                foreach ($list as $k => $v) {
                    $k1 = cw_query_first_cell("SELECT o1.option_id FROM {$tables['product_options']} as c0, {$tables['product_options_values']} as o0, {$tables['product_options']} as c1, {$tables['product_options_values']} as o1 WHERE c0.product_option_id = o0.product_option_id AND o0.option_id = '{$k}' AND c1.class = c0.class AND c1.product_option_id = o1.product_option_id AND o0.name = o1.name AND c1.product_id = '{$pid}'");
                    if (empty($k1)) {
                        continue;
                    }
                    $v['price_modifier'] = cw_convert_number($v['price_modifier']);
                    $v['cost_modifier'] = cw_convert_number($v['cost_modifier']);
                    $query_data = array("code" => $edited_language, "option_id" => $k1, "name" => $v['name']);
                    if ($edited_language != $config['default_admin_language']) {
                        unset($v['name']);
                    }
                    cw_array2update('product_options_values', $v, "option_id = '{$k1}'");
                    if (!empty($query_data['name'])) {
                        cw_array2insert("product_options_values_lng", $query_data, true);
                    }
                }
            }
        }
    }
    $top_message = array('content' => cw_get_langvar_by_name('msg_adm_product_option_upd'), 'type' => 'I');
    $refresh = $rebuild = $rebuild_quick = true;
} elseif ($action == 'product_option_delete' && $product_option_id && $to_delete) {