Escape (Tools_Http::Post('name'));
$surname = $DB -> Escape (Tools_Http::Post('surname'));
$phone = $DB -> Escape (Tools_Http::Post('phone'));
$email = $DB -> Escape (Tools_Http::Post('email'));
$address = $DB -> Escape (Tools_Http::Post('address'));
$deliver = $DB -> Escape (Tools_Http::Post('deliver',true));
$comment = $DB -> Escape (Tools_Http::Post('comment'));
$client_card = $DB -> Escape (Tools_Http::Post('client_card'));
if($deliver==2) {
$delivery=0;
$value= Tools_Http::Post('shop');
$delivery_address='';
}
if($deliver==1) {
$delivery=1;
$value=$value= Tools_Http::Post('delivery_type');
$delivery_address=$address;
}
if($deliver==3) {
$delivery=3;
$value= 'Omniva';
$pointsClass = Products_DeliveryPoints::getInstance();
$delivery_param = Tools_Http::Post('delivery_param');
$points = $pointsClass-> getPointsAddresses(array('address_id'=>$delivery_param));
$point = $points[0];
$delivery_address=$point['name'].','.$point['address'].','.$point['city_name'];
}
$errors = array();
if (!$name) {
$errors[] = $L->Str('Please enter your name!');
}
if (!$surname) {
$errors[] = $L->Str('Please enter your surname!');
}
if (!$email) {
$errors[] = $L->Str('Please enter your email!');
}
if (!$phone) {
$errors[] = $L->Str('Please enter your phone!');
}
if ($deliver==1 && !$address) {
$errors[] = $L->Str('Please enter your delviery address!');
}
if (!empty($errors)) {
?>
getBasketContents();
if (!empty($contents)) {
$check = "SELECT id FROM goods_users WHERE email = '".$email."' OR phone = '".$phone."'";
$res = $DB ->Exec($check);
if (!$DB->Count($res)) {
$sql = "INSERT INTO goods_users SET email = '".$email."', name='".$name."', surname='".$surname."', phone='".$phone."', address='".$address."'";
$DB->Exec($sql);
$userid = $DB -> lastId();
} else {
$row = $DB->Fetch($res);
$userid = $row['id'];
$DB -> Exec("UPDATE goods_users SET orders = orders + 1, name = '".$name."' , surname='".$surname."',phone='".$phone."' WHERE id = ".$userid);
}
$orders = new Products_Orders();
$orderid = $orders -> createOrder($userid);
/* if(isset($_SESSION['USER']['email'])) {
$id = $orders->checkUser($_SESSION['USER']['email']);
$orders->saveUser($id,$email,$name,$surname,$phone,$address );
} */
if ($orderid) {
foreach ($contents as $goodid => $data) {
$orders -> addLine ($orderid, $goodid, $data['count']);
}
$orders -> addDelivery($orderid,$delivery,$value,$comment,$delivery_address,$client_card);
$orders -> sendOrder($orderid,$L->getCurrentLanguage());
//$text = $orders->getSMSTemplate($L->getCurrentLanguage());
//$text = str_replace('%%order_number%%',$orderid,$text);
//$orders->sendSMS($phone,$text);
}
$Cart -> clearBasket();
}
ob_start();
?>