citywebshop_cms/application/models/admin_orders_model.php

<?php

class admin_orders_model extends Model {
    
    
    public function getOrders() {
        if ($_SESSION['access_level'] == 13 || $_SESSION['access_level'] == 14) {
            $hotels = unserialize($_SESSION['admin_user']->admin_dashboard);
            foreach ($hotels as $hotel) {
                $list[] = str_replace("hotel_", "", $hotel);
            }
            $result = $this->query("SELECT * FROM azonics_orders WHERE order_uuid != '' AND order_hotel IN ('".implode("','",$list)."') ORDER BY order_date DESC;");
        }
        /*elseif ($_SESSION['access_level'] == 14) {
            $user = $_SESSION['admin_user']->admin_name;
            $result = $this->query("SELECT * FROM azonics_orders WHERE order_uuid != '' AND order_sales='".$user."' ORDER BY order_date DESC;");
        }*/
        else {
            $result = $this->query("SELECT * FROM azonics_orders WHERE order_uuid != '' ORDER BY order_date DESC;");
        }

        return $result;
    }
    
    
    public function loadOrder($uuid) {
        $row = $this->query("select * from azonics_orders where order_uuid='".$uuid."';");
        return $row[0];
    }
    
    
    public function loadCart() {
        $order_id = $this->escapeString($_REQUEST['id']);
        $result = $this->query("SELECT "
                . "cart.id AS cart_id, "
                . "cart.*, products.* "
                . "FROM cart "
                . "LEFT JOIN products ON products.id=cart.product_id "
                . "WHERE cart.status='1';");
        return $result;
    }
        
    
    public function deleteOrder($id) {
        $id = $this->escapeString($_REQUEST['id']);
        $this->execute("delete from orders where id='".$id."';");
        $this->execute("delete from cart where order_id='".$id."';");
        return true;
    }
    
    
    public function deleteCartItem($id) {
        $id = $this->escapeString($id);
        $this->execute("DELETE FROM cart WHERE id='".$id."';");
        return true;
    }
    
    
    public function updateOrderStatus($order_id, $auth_code, $error_code, $error_message) {
        $order_id = $this->escapeString($order_id);
        $auth_code = $this->escapeString($auth_code);
        $error_code = $this->escapeString($error_code);
        $error_message = $this->escapeString($error_message);
        $this->execute("UPDATE azonics_orders SET
            order_auth_code = '".$auth_code."',
            order_error_code = '".$error_code."',
            order_error_message = '".$error_message."'
            WHERE order_id = '".$order_id."';");
        return true;
    }


    public function setOrderState($id,$state) {
        $id = $this->escapeString($id);
        $state = $this->escapeString($state);
        $this->execute("update orders set status='".$state."' where id='".$id."';");
        
        $res = $this->query("SELECT * FROM orders WHERE id='".$id."';");
        $row = $res[0];
        
        if ($state=='3') {
            $headers = "From: Azonics.com <info@azonics.com>\r\n";
            $headers .= "Reply-To: Azonics.com <info@azonics.com>\r\n";
            $headers .= "MIME-Version: 1.0\r\n";
            $headers .= "Content-Type: text/html; charset=UTF-8\r\n";

            $message = file_get_contents("application/views/mails/order_payed_mail.html");
            $message = str_replace("%keresztnev%",$row->bill_knev,$message);
            $message = str_replace("%id%",$id,$message);
            $message = str_replace("%website%","Azonics.com",$message);
            $message = str_replace("%address%","1147 Budapest, Öv utca 133. (A)",$message);
            $message = str_replace("%phone%","+36 (30) 203-9960",$message);
            $message = str_replace("%email%","info@azonics.com",$message);

            mail($row->email,"A(z) ".$id." számú rendelés fizetve",$message,$headers);
        }
        elseif ($state=='4') {
            $headers = "From: Azonics.com <info@azonics.com>\r\n";
            $headers .= "Reply-To: Azonics.com <info@azonics.com>\r\n";
            $headers .= "MIME-Version: 1.0\r\n";
            $headers .= "Content-Type: text/html; charset=UTF-8\r\n";

            $message = file_get_contents("application/views/mails/order_delivered_mail.html");
            $message = str_replace("%keresztnev%",$row->bill_knev,$message);
            $message = str_replace("%id%",$id,$message);
            $message = str_replace("%website%","Azonics.com",$message);
            $message = str_replace("%address%","1147 Budapest, Öv utca 133. (A)",$message);
            $message = str_replace("%phone%","+36 (30) 203-9960",$message);
            $message = str_replace("%email%","info@azonics.com",$message);

            mail($row->email,"A(z) ".$id.". számú rendelés szállítás alatt",$message,$headers);
        }
        
        return true;
    }
    
    
}