<?
chdir(dirname(__FILE__));

$start_time = microtime();

include "sCart_conf.php";
include "sCart_util.php";
$ErrLogFile    = "logs/ErrLog";
$TicketDir     = "logs";
$CatalogPriceFile = "logs/Catalog";

//
// This creates the file for new installations (prevents and error message)
// We could manually create the file but this will work too
//
// @touch($CatalogPriceFile);
// if($AltHeaderMsg)
//    $HeaderMsg = $AltHeaderMsg;
// else
//    $HeaderMsg = $ClientAccountId;
// $GoBack = "history.go(-1)";
// $GoBack = "history.back()";
RemoveOldTmpFiles($TmpDownloadDir);
SafeExtract(array( 'any' => array('Auth', 'Submit', 'Username', 'Password', 'ContentId', 'Email')));
if($Submit)
{
   ErrLog("AuthRequest: ($ContentId, $Email, Auth: '$Auth')---------------");
   AuthRequest($Username, $Password, $Email, $Auth)  ;
   $TotTime = sprintf( "%0.2f", microtime_diff($start_time, microtime()));
   ErrLog("Total Time: $TotTime\n");
   exit;
}
$DownloadMsg = "After you pay for the items in your shopping cart at CCBill.com, please login to download your videos";

//-----------------------------------------------------------------
//
//-----------------------------------------------------------------

function GetShoppingCartFile($CustId)
{
   if(isset($_COOKIE[$CustId]))
   {
		return $_COOKIE[$CustId];
   }
	else
	{
		ErrLog("Failed to get cookie in GetShoppingCartFile(CustId: '$CustId')");
		return false;
	}
}

// ------------------------------------------------------------------
//
// ------------------------------------------------------------------

function AuthRequest($Username, $Password, $Email, $Auth)
{
   global $DIAG, $Server, $RcvrUrl, $Domain, $ClientAccountId, $CustId, $CustAuthCode;

   // $GoBack = "history.go(-1)";
   // $GoBack = "history.back()";

	ErrLog("AuthRequest('$Username', '$Password', '$Email', '$Auth'");

	$ShoppingCartFileName = "";
	$PurchasedDir = "logs/purchased";
	if($Auth)
		$ShoppingCartFileName = $Auth;
	else
		$ShoppingCartFileName = GetShoppingCartFile($CustId);

	// Make sure we are not trying to read a file that aint' there
	if($ShoppingCartFileName)
	{
		if(is_readable("$PurchasedDir/$ShoppingCartFileName"))
		{
			$UserData = GetContentItems("$PurchasedDir/$ShoppingCartFileName");
			ErrLog("GetContentItems('$PurchasedDir/$ShoppingCartFileName')");
		}
		else
			ErrLog("Unable to read file: '$PurchasedDir/$ShoppingCartFileName'");
	}

   $Msg  = "Action="             .urlencode("Login");
   $Msg .= "&ClientAccountId="   .urlencode($ClientAccountId);
   $Msg .= "&Server="            .urlencode($Server);
   $Msg .= "&Username="          .urlencode($Username);
   $Msg .= "&Password="          .urlencode($Password);
   $Msg .= "&UserData="          .urlencode($UserData);
   $Msg .= "&UserIp="            .urlencode($_SERVER['REMOTE_ADDR']);
   $Msg .= "&Email="             .urlencode(strtolower($Email));

   // Record part of the posting, but not enough to give prying eyes anything important
   ErrLog("Posting Message: $Msg");
   ErrLog("SendMsgToRcvr($Msg, $Domain, $RcvrUrl");
   //
   // Process return message from server
   //
	 //**************  THE APOS TEST
   // ORIGIANL $Ret = urldecode(SendMsgToRcvr($Msg, $Domain, $RcvrUrl));
	 //***************
	 // DO NOT urldecode this
   $Ret = SendMsgToRcvr($Msg, $Domain, $RcvrUrl);
	 //***************
   ErrLog("Ret:\n$Ret");
   $Ret = parse_response($Ret);
  	ErrLog("Return Code From Phantom Cart Server: " .$Ret[0]);
  	if(!strstr($Ret[0], "200"))
  	{
      $Subject = "PhantomCart - Possible Failure - Important";
      $Msg .= "An Authorization request failed: $ClientAccountId\n$Email\n$Username\n$UserData\nReturn Code From Phantom Cart Server: " .$Ret[0];
      // SendEmail($Subject, $Msg);

      ErrLog("ERROR: A authorization request failed: $Username, $UserData, $Email");
      //
      // The following lines were commented out because even if the PhantomFlicks server is is down, we should deliver the content to the customer.
      //
            //$Error = "System Error. Please wait a few minutes then try again";
            //include "c_msg1.html";
            //exit;
  	}

  	$Ret = $Ret[2];
   //print "$Ret<br>";
   if(stristr($Ret, "B A D"))
   {
      list($junk, $Error) = explode("::", $Ret);
      ErrLog("ERROR: $Error  Email: '$Email'");
      //$Error = "Login failed"; removed when I put in the Brute force attack stuff

      $GoBack = "history.back()";
		$Err2 = "<INPUT type=\"button\" value=\"Click here to go back\" onClick=\"$GoBack\">";
      include "c_msg1.html";
      exit;
   }
   else
   {
    ErrLog("Authorization Approved==>$Ret");
		//list($Good, $AuthCookieVal, $UserData) = explode("::", $Ret);
		list($Good, $AuthCookieVal, $UserData) = explode("::", urldecode($Ret));
		if(trim($Good) != "GOOD")
		{
			ErrLog("ERROR: Authentication system error. Server returns: '$Ret' Email: '$Email' Ret: $Ret" . GetPlaceInFile(__FILE__, __LINE__));
			print "System Error: Contact webmaster<br>";
			exit;
		}
		else
		{
			//
			// Empty the cart.  Why?  If shopping car cookie has not expired for some returning customers who want to make another purchase,
			// The origianl shopping cart items(that they already purchased) will still show up, thus the customer gets charged a second time.
			//
			EmptyCart();


			// Authorization cookie expires at end of session
			$ServerName = preg_replace("/www\./", "", $_SERVER['SERVER_NAME']);
			if(!setcookie($CustAuthCode, $AuthCookieVal, 0, "/", ".$ServerName"))
			{
				ErrLog("Error: AuthCode not set in cookie: CustAuthCode: '$CustAuthCode' AuthCookieVal: '$AuthCookieVal' UserData: '$UserData' Email: '$Email'");
			}
			ErrLog("SUCCESS: Auth Cookie: '$AuthCookieVal' UserData: '$UserData' Email: '$Email'");
			//
			// Perpare message window
			//
			$DownloadMsg = "";
	    $Error  = "";
	    $Error .= "Click on links below to view/download your purchase(s).<br><br><br>";
		  //**************  THE APOS TEST
      //$Error .= urldecode($UserData);
      $Error .= ($UserData);
		  //**************  THE APOS TEST
      $GoBack = "history.back()";
			$Err2 = "<INPUT type=\"button\" value=\"Click here to go back\" onClick=\"$GoBack\">";
     	include "c_msg1.html";
			exit;
		}
   }
}

//-----------------------------------------------------------------
//
//-----------------------------------------------------------------

function EmptyCart()
{
	global $CartDir, $ShoppingCartFile, $ShoppingCartName;

	// EmptyCart()  CartDir: 'logs/carts',  ShoppingCartFile: '', ShoppingCartName: 'VodShoppingCart'
	ErrLog("EmptyCart()  CartDir: '$CartDir',  ShoppingCartFile: '$ShoppingCartFile', ShoppingCartName: '$ShoppingCartName'");

	$ServerName = preg_replace("/www\./", "", $_SERVER['SERVER_NAME']);
	setcookie($ShoppingCartName, "", 0, "/", ".$ServerName");
	//@unlink("$CartDir/$ShoppingCartFile");

}

//-------------------------------------------------------------
//
//-------------------------------------------------------------

function GetItemsFromShoppingCartFile($ShoppingCartFile)
{
	global $CartDir, $MsgWindow;

	if(!file_exists("$CartDir/$ShoppingCartFile"))
	{
		$Msg1 = "Error 001 - Shopping cart empty<br>";
		print "$Msg1";
		//include $MsgWindow;
		exit;
	}
	$ShoppingCartItems = file("$CartDir/$ShoppingCartFile");
	$ItemPrice = $SubTotal = 0;
	foreach($ShoppingCartItems as $ContentId)
	{
		$ContentId = trim($ContentId);
		$ItemPrice = GetPriceByContentId($ContentId);
		$SubTotal = $SubTotal + $ItemPrice;
	}
	return $SubTotal;
}


//-----------------------------------------------------------------
//
//-----------------------------------------------------------------

function ShoppingCartFile()
{
	global $CookieLife;
   if(isset($_COOKIE[$CustId]))
   {
		return $_COOKIE[$CustId];
   }
   else
   {
   	$CustIdCookie = GenerateRandomCustId(32);
   	$ServerName = preg_replace("/www\./", "", $_SERVER['SERVER_NAME']);
      setcookie($CustId, $CustIdCookie, time()+ $CookieLife, "/", ".$ServerName");
      return $CustIdCookie;
   }
}

?>



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title><? echo $HeaderMsg?></title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<SCRIPT LANGUAGE="JavaScript">
<!--

  function isEmpty(inputStr)
  {
        if (inputStr == "" || inputStr == null) return true;
        else return false;
  }
  function verifyIt()
  {

  		//Disable this
  		return;
	  if(isEmpty(document.Download.Email.value))
      {
      	alert("Please enter E-Mail address.");
         return false;
      }
	  if(isEmpty(document.Download.Username.value))
      {
      	alert("Please enter Username.");
         return false;
      }
	  if(isEmpty(document.Download.Password.value))
      {
      	alert("Please enter Password.");
         return false;
      }

	  	if(!document.Download.CheckBox.checked)
      {
      	alert("You must agree to the terms.\nPlease complete and resubmit.");
         return false;
      }
	  if(!confirm("Downloading \"<? echo $ContentId ?>\"\n\nPlease follow these instructions.\n\n1) Save this file to your hard drive so you can view it anytime.\n\n2) Remember where you put this file on your hard drive.\n\n3) Press OK, then wait a few moments for download to start."))
	      return false;
	  //if(!confirm("PRESS OK, THEN WAIT A FEW MOMENTS FOR DOWNLOAD TO START!"))
	  //    return false;
	  return true;
  }

function openAScrollWindow(pageToLoad, winName, height, width)
{
   var h = (screen.height/2) - (height/2);
   var w = (screen.width/2)  - (width/2);
   var args = 'top=' +h+ ', left=' +w+ ',menubar=0, hotkeys=0, titlebar=0, status=0, scrollbars=1, width=' + width + ', height=' + height;
   window.open(pageToLoad, winName, args);
}
-->
</script>
<link href="backend.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
.style1 {font-size: 11px}
-->
</style>
</head>
<noscript>
<div align="center"><br>
  <br>
  <br>
  <br>
  <a href="../NoJS/NoJavaScript.html">JavaScript must be enabled on your browser to complete your download.<br>
  <br>
  CLICK HERE FOR HELP</a><br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
  <br>
</div>
</noscript>
<body>
<div align="center" class="Title"> <br>
  <? echo $HeaderMsg?> <br>
  <br>
  Thank you for your purchase!
  <br>
  <br>
  Login to your account <br>
  <table width="376" border="0" cellpadding="0" class="outerTable">
    <tr>
      <td width="424" height="236" align="center" valign="middle"> <br>
        <table width="368" height="160" border="0" align="center" cellpadding="0" class="innerTable">
          <form name="Download" method="post"  action="sCart_auth.php">
            <tr>
              <td width="160" align="right" valign="middle"> E-mail address&nbsp; </td>
              <td width="219" align="left" valign="middle"><input name="Email" type="text" class="TextBox" id="Email" value="<?echo $Email?>" size="25"></td>
            </tr>
            <tr>
              <td width="160" align="right" valign="middle"> Username&nbsp; </td>
              <td width="219" align="left" valign="middle"><input name="Username" type="text" class="TextBox" id="Username" value="<?echo $Username?>" size="15"></td>
            </tr>
            <tr>
              <td width="160" align="right" valign="middle"> Password&nbsp; </td>
              <td width="219" align="left" valign="middle"><input name="Password" type="text" class="TextBox" id="Password" value="<?echo $Password?>" size="15"></td>
            </tr>
            <tr align="left">
              <td height="38" colspan="2" valign="middle"> <div align="center"><b>*** SAVE FILES TO YOUR HARD DRIVE ***</b> </div></td>
            </tr>
            <tr align="center">
              <td height="26" colspan="2" valign="top"><input name="ContentId" type="hidden" value="<? echo $ContentId ?>">
                <input type="submit" name="Submit" value="Download Now" onClick="return verifyIt();"> </td>
            </tr>
          </form>
        </table>
 <a href="javascript:openAScrollWindow('c_faq.html', 'Location', 350, 550)"><b>*** READ ME FIRST ***</b></a><br></td>
    </tr>
  </table>
  <table width="463" border="0">
    <tr>
      <td width="457"><div align="center"><a href="http://PhantomCart.com" target="_blank" class="style1">Software by PhantomCart.com</a></div></td>
    </tr>
  </table>
  <table width="495" border="0" class="innerTable">
    <tr>
      <td width="489"><div align="center">
         <?
  			@include("../AuxFooter.html");
		   ?>
        </div></td>
    </tr>
  </table>
</div>
</body>
</html>