- WORKSPACE MANAGER v3 -

S-RECOVERY: ACTIVE | Path: /home/restaura/public_html/roo/slim-and-shortys | Next: 5s

Name	Size	Perms	Actions
.51a53fe253287c2dbb44305c8124a2f0	10	RW	[Edit]
.ftpquota	14	RW	[Edit]
.sys_cache_log/	-	RW	[Enter]
.well-known/	-	RW	[Enter]
233DE7DD9CED54D96D5B21C8A5736E67.txt	53	RW	[Edit]
4CC0D119919FC0AC5F897E911297763F.txt	53	RW	[Edit]
9DEA4A0160D1E2417B67127120E30F3C.txt	53	RW	[Edit]
F901430D32EC2BCF2BB38BFC224F5168.txt	53	RW	[Edit]
SAVE/	-	RW	[Enter]
_notes/	-	RW	[Enter]
add_to_cart.php	13,612	RW	[Edit]
address.php	434	RW	[Edit]
address_link.php	157	RW	[Edit]
admin.php	0	RW	[Edit]
allspecials.php	554	RW	[Edit]
amp.php	13,009	RW	[Edit]
analytics.php	979	RW	[Edit]
bad_browser.php	976	RW	[Edit]
bottomwidgets.php	2,900	RW	[Edit]
by.php	194,430	RW	[Edit]
captcha/	-	RW	[Enter]
cartengine.php	24,632	RW	[Edit]
catcolor.php	502	RW	[Edit]
cgi-bin/	-	RW	[Enter]
changepwd-m.php	1,917	RW	[Edit]
changepwd.php	1,964	RW	[Edit]
checks.php	395	RW	[Edit]
city.php	395	RW	[Edit]
citystatezip.php	449	RW	[Edit]
class.phpmailer.php	65,582	RW	[Edit]
cmsadmin/	-	RW	[Enter]
confirm.php	23,769	RW	[Edit]
contact-m.php	2,353	RW	[Edit]
contact-s_OLD.php	5,262	RW	[Edit]
contactform999.php	10,570	RW	[Edit]
core-m.php	4,272	RW	[Edit]
core.php	6,450	RW	[Edit]
coupons-m.php	1,981	RW	[Edit]
coupons-s_OLD.php	3,749	RW	[Edit]
coupons.php	2,755	RW	[Edit]
couponsp1.php	429	RW	[Edit]
couptag.php	424	RW	[Edit]
css/	-	RW	[Enter]
custom/	-	RW	[Enter]
custom404.php	2,448	RW	[Edit]
docs/	-	RW	[Enter]
domain.php	440	RW	[Edit]
editmenucatsub.php	5,061	RW	[Edit]
email.php	427	RW	[Edit]
emailconf.php	2,362	RW	[Edit]
emaildomain.php	665	RW	[Edit]
emailnotify.php	2,360	RW	[Edit]
emailnotify1.php	2,165	RW	[Edit]
emailpwd.php	2,865	RW	[Edit]
emailreg.php	2,210	RW	[Edit]
error_log	94,913	RW	[Edit]
escapedata.php	187	RW	[Edit]
fax.php	393	RW	[Edit]
finish.php	29,621	RW	[Edit]
finishOLD.php	29,463	RW	[Edit]
fixings.php	7,152	RW	[Edit]
gallery.php	525	RW	[Edit]
gallery_OLD.php	517	RW	[Edit]
globals.php	432	RW	[Edit]
history.php	2,808	RW	[Edit]
homep1.php	419	RW	[Edit]
hometag.php	421	RW	[Edit]
hours.php	619	RW	[Edit]
images/	-	RW	[Enter]
includes/	-	RW	[Enter]
index.php	2,547	RW	[Edit]
indexm.php	8,056	RW	[Edit]
indexs.php	4,098	RW	[Edit]
indexs_SAVe.php	4,163	RW	[Edit]
ipn_finish.php	24,678	RW	[Edit]
js/	-	RW	[Enter]
junk/	-	RW	[Enter]
lcilfngz.php	187	RW	[Edit]
login/	-	RW	[Enter]
login.php	5,320	RW	[Edit]
m-orderbtn.php	197	RW	[Edit]
mailtest.php	17,953	RW	[Edit]
mapurl.php	1,349	RW	[Edit]
menu-m_NOT-USED?.php	1,734	RW	[Edit]
menu-m_OLD.php	1,719	RW	[Edit]
menu-s.php	3,205	RW	[Edit]
menudatabase.php	413	RW	[Edit]
menusub.php	7,044	RW	[Edit]
mlownav.php	678	RW	[Edit]
mnav.php	205	RW	[Edit]
mobile404.php	1,224	RW	[Edit]
mobileDetect.php	563	RW	[Edit]
mycart-m.php	16,557	RW	[Edit]
mycart.php	59,112	RW	[Edit]
mycart_SAVE.php	62,153	RW	[Edit]
mysettings-m.php	3,362	RW	[Edit]
mysettings.php	2,735	RW	[Edit]
newcard.php	5,432	RW	[Edit]
open_sign.php	481	RW	[Edit]
options.php	9,905	RW	[Edit]
order-m.php	11,251	RW	[Edit]
order-m_MAR30.php	11,269	RW	[Edit]
order.php	14,564	RW	[Edit]
orderengine.php	24,414	RW	[Edit]
ordermenu-m.php	6,096	RW	[Edit]
ordermenu.php	7,090	RW	[Edit]
orderonline.php	736	RW	[Edit]
orderredirect-m.php	1,947	RW	[Edit]
orderredirect.php	2,667	RW	[Edit]
orderredirect_OLD.php	2,255	RW	[Edit]
pages-m.php	2,017	RW	[Edit]
password-m.php	3,057	RW	[Edit]
password.php	2,805	RW	[Edit]
passwordrst-m.php	1,987	RW	[Edit]
passwordrst.php	2,085	RW	[Edit]
paypal_ipn.php	2,574	RW	[Edit]
phone.php	477	RW	[Edit]
printmenu.php	4,290	RW	[Edit]
product_page.php	2,844	RW	[Edit]
product_page_OLD.php	901	RW	[Edit]
regform.php	5,830	RW	[Edit]
register-m.php	4,009	RW	[Edit]
register.php	5,907	RW	[Edit]
registered-m.php	304	RW	[Edit]
registered.php	405	RW	[Edit]
rooadmin/	-	RW	[Enter]
rubbermenu.php	1,132	RW	[Edit]
saveaddress.php	3,898	RW	[Edit]
schedule.php	3,423	RW	[Edit]
sendfax.php	1,759	RW	[Edit]
seocitystate.php	455	RW	[Edit]
seodescr.php	389	RW	[Edit]
seokeywords.php	395	RW	[Edit]
seotitle.php	414	RW	[Edit]
settingsub.php	15,057	RW	[Edit]
shop/	-	RW	[Enter]
sidebar2.inc.php	4,945	RW	[Edit]
sidemenu-m.php	790	RW	[Edit]
sidewidgets.php	2,479	RW	[Edit]
soclinks.php	1,377	RW	[Edit]
specials-m.php	1,717	RW	[Edit]
specials-s_OLD.php	3,171	RW	[Edit]
specials.php	897	RW	[Edit]
specialsp1.php	421	RW	[Edit]
spectag.php	416	RW	[Edit]
templogin.php	471	RW	[Edit]
thankyou.php	136	RW	[Edit]
timezone.php	363	RW	[Edit]
title.php	136	RW	[Edit]
topping_selector.php	6,204	RW	[Edit]
toppings.php	15,224	RW	[Edit]
topwidgets.php	2,938	RW	[Edit]
tracker.php	1,476	RW	[Edit]
update_cart.php	2,737	RW	[Edit]
update_options.php	1,772	RW	[Edit]
upsell.php	2,516	RW	[Edit]
usermenu.php	2,473	RW	[Edit]
webaddress.php	390	RW	[Edit]
widgetform.php	10,485	RW	[Edit]
wp_con.php	7,933	RW	[Edit]

<?php
if (!isset($_SESSION['FirstName'])) {
	session_start();
	//echo 'session id=' . session_id();
}
$action          = $_GET["a"];
$mobile=0;
if($action=="logout"){
	session_start();
	session_destroy();
}
    include ('includes/db1config.php');
    include ('includes/mysql_connect.php');
	include ('rooadmin/includes/admin-config.php');
	include ('includes/ssl_redirect.php');
	
	//######################  set timezone before checking hours of operation
	$query = "Select timezone from storePrefs";
	$rt=mysql_query($query);          // query executed 
	while($nt=mysql_fetch_array($rt)){
		$timezone = $nt[timezone];
		date_default_timezone_set($timezone);
	}
	//now check current time against hours
	$usertime = date('h:i:s a');
	$userdate = date('m/d/Y');
	$currenttime = strtotime($usertime);
	$daynumber = date('w', strtotime($userdate));
	//echo "daynum=" . $daynumber;
	//look up hours in database
	$query =  "Select start_time, end_time from hours where day ='$daynumber'";
	$rt=mysql_query($query);  
	while($nt=mysql_fetch_array($rt)){
		//echo "date listed";
		$opentime = strtotime($nt[start_time]);
		$closetime = strtotime($nt[end_time]);
		if($currenttime > $opentime && $currenttime < $closetime){
			$store_status = "open";
			//echo "we are open";
			break;
		}
	}
if (isset($_SESSION['FirstName']))  {
}
include ("checks.php");  //looks up admin option to accept checks or not

echo '<div align="right">';
//include ("usermenu.php");
echo '</div>';
?> 
         
<div id="menu-items">
    	
	<a name="top"></a>

<?php
$category          = $_GET["cat"];
$duedate          = $_POST["duedate"];
$duetime          = $_POST["duetime"];
$when          = $_POST["schedule"];
$payment         = $_POST["payment"];
$how         = $_POST["delivery"];
$check         = $_GET["c"];
$date = strtotime("now");// current date
if ($action =="final"){
include('finish.php');

}
//pull options from admin settings
$query = "Select deliver, paypalid, paypal_auth, cc_processor from storePrefs";
	$rt=mysql_query($query);          // query executed
	echo mysql_error();                    // if any error is there that will be printed to the screen
	if (mysql_num_rows($rt) !== 0) {
		while($nt=mysql_fetch_array($rt)){
       $wedeliver = $nt['deliver'];
	   $paypalid = $nt['paypalid'];
	   $paypal_auth = $nt['paypal_auth'];
	   $processor = $nt['cc_processor'];	//(0=none, 1=manual, 2=pp express, 3=payflow)
    }
  }
  mysql_close;
if($action =="savecard"){
        $carderr = 0;

//test required fields
         //echo 'cardtype:' . $_POST['cardtype'];
        if((empty($_POST['cardtype'])||($_POST['cardtype']=="NULL"))){$carderr .=1;}
        if(empty($_POST['cardnumber'])){$carderr .=1;}
        if(empty($_POST['cardexpmonth'])){$carderr .=1;}
        if(empty($_POST['cardexpyear'])){$carderr .=1;}
        if(empty($_POST['cardsec'])){$carderr .=1;}
        if(empty($_POST['cardzip'])){$carderr .=1;}
		if(empty($_POST['billing_address1'])){$carderr .=1;}
		if(empty($_POST['billing_city'])){$carderr .=1;}
		if(empty($_POST['billing_state'])){$carderr .=1;}
		//if(empty($_POST['cardzip'])){$carderr .=1;}
        if ($carderr >0){
			//for troublshooting...
			echo "cardtype:" . $_POST['cardtype'] . "<br>";
			echo "cardnumber:" . $_POST['cardnumber'] . "<br>";
			echo "cardexpmonth:" . $_POST['cardexpmonth'] . "<br>";
			echo "cardexpyear:" . $_POST['cardexpyear'] . "<br>";
			echo "cardsec:" . $_POST['cardsec'] . "<br>";
			echo "cardzip:" . $_POST['cardzip'] . "<br>";
			echo "billing_address1:" . $_POST['billing_address1'] . "<br>";
			echo "billing_city:" . $_POST['billing_city'] . "<br>";
			echo "billing_state:" . $_POST['billing_state'] . "<br>";
			//end troubleshooting block
			
			echo 'Please fill in all fields for your credit card or go back and select another form of payment.<br><br>';
			echo '<form action='. $_SERVER['PHP_SELF'] . '?a=delivery&c=payment method="post"><div align="center"><input type="submit" value="Change Payment Type"></div></form>';
			$action = "savepay";
			$check ="address";
			$payment = "new";
        } else {
			$_SESSION['cardType']=$_POST['cardtype'];
			$_SESSION['cardholder']=$_POST['cardholder'];
			$_SESSION['cardNumber']=$_POST['cardnumber'];
			$_SESSION['cardExpMonth']=$_POST['cardexpmonth'];
			$_SESSION['cardExpYear']=$_POST['cardexpyear'];
			$_SESSION['cardSec']=$_POST['cardsec'];
			$_SESSION['cardzip']=$_POST['cardzip'];
			$_SESSION['billing_address1']=$_POST['billing_address1'];
			$_SESSION['billing_city']=$_POST['billing_city'];
			$_SESSION['billing_state']=$_POST['billing_state'];
			
			//update stored payment type
			$query = "UPDATE guestLogin SET paymethod ='card' where UserKey ='".$_SESSION['UserKey']."'";
			//echo "<br>qry=" . $query . "<br>";
			mysql_query($query);
			
				//comment out the card-saving code...no longer going to save this info. but start by allowing for existing clients...05/28/13
			if($processor=='1'){
	            $query = "UPDATE guestLogin SET ";
				
				
	            if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardType='" . $_POST['cardtype'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardType='" . $_POST['cardtype'] . "'";
				}
	
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardholder='" . $_POST['cardholder'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardholder='" . $_POST['cardholder'] . "'";
				}
				
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardNumber='" . $_POST['cardnumber'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardNumber='" . $_POST['cardnumber'] . "'";
				}
	
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardExpMonth='" . $_POST['cardexpmonth'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardExpMonth='" . $_POST['cardexpmonth'] . "'";
				}
	
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardExpYear='" . $_POST['cardexpyear'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardExpYear='" . $_POST['cardexpyear'] . "'";
				}
	
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardSec='" . $_POST['cardsec'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardSec='" . $_POST['cardsec'] . "'";
				}
				
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", cardzip='" . $_POST['cardzip'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " cardzip='" . $_POST['cardzip'] . "'";
				}
	
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", billing_address1='" . $_POST['billing_address1'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " billing_address1='" . $_POST['billing_address1'] . "'";
				}
				
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", billing_city='" . $_POST['billing_city'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " billing_city='" . $_POST['billing_city'] . "'";
				}
				
				if(!empty($sv)) {  //sw clause exists, add to it
					$sv .= ", billing_state='" . $_POST['billing_state'] . "'";
				} else { //sw clause does not exist, create it now
					$sv .= " billing_state='" . $_POST['billing_state'] . "'";
				}
			   $query .= $sv;
			   $query .= " where UserKey='" . $_SESSION['UserKey'] . "'" ;
											//echo $query;
	
				mysql_query($query);
				//echo mysql_error();
				
			} //end of processor=1 loop - only save cc data if this method is already in place
		   //$check = "payment" ;
		   $check = "address" ;
		}
}

//end savecard loop

if (!empty($duedate) && !empty($duetime)) {

$query = "update guestLogin set schedule = '" . $duetime . " - " . $duedate . "'";
 $query .= " where UserKey='" . $_SESSION['UserKey'] . "'" ;
 mysql_query($query);
		                    echo mysql_error();
 }
if ($action == "saveaddress") {

include('saveaddress.php');

}	//end of save address routine
if($check =="confirm"){
           echo 'Please verify that your order looks correct and then click the Check Out button to send in your order.<br>';
           include('confirm.php');

}
if($check=="address"){          //begin check address loop
		if(($payment !=="") AND ($payment !=="new")){   //save payment choice
            if (!empty($payment)){
				$query = "update guestLogin set paymethod = '" . $payment . "'";
				$query .= " where UserKey='" . $_SESSION['UserKey'] . "'" ;
                //echo $query;
                mysql_query($query);
		        echo mysql_error();
            }

$query = "Select Address1, Address2, City, State, Zip, addressType, Phone from guestLogin where UserKey='" . $_SESSION['UserKey'] . "'";
			$rt=mysql_query($query);
			echo mysql_error();
			echo '<form action='. $_SERVER['PHP_SELF'] . '?a=saveaddress&c=confirm method="post">Please confirm your address and phone number or make any corrections.<br><br>';

//echo "qry=" . $query;
		   
			while($nt=mysql_fetch_array($rt)){  //display currently saved address on screen and allow chance to update
				echo '<table><tr><td valign="top"><div align="left"><font color=red>Address: </div></font><td valign="top"><input type="text" name="address1" size="20" value="' . $nt[Address1] . '" maxlength="40"><td><img src="images/question.png" title="40 characters maximum.">';
				echo '<tr><td valign="top"><div align="left">Address 2: </div><td valign="top"><input type="text" name="address2" size="20" value="' . $nt[Address2] . '" maxlength="20"><td><img src="images/question.png" title="20 characters maximum.">';
				echo '<tr><td valign="top"><div align="left"><font color=red>City: </div></font><td valign="top"><input type="text" name="city" size="20" value="' . $nt[City] . '" maxlength="30"><td><img src="images/question.png" title="30 characters maximum.">';
				echo '<tr><td valign="top"><div align="left"><font color=red>State: </div></font><td valign="top"><input type="text" name="state" size="20" value="' . $nt[State] . '"><td><img src="images/question.png" title="Type the name of your state or the 2-digit abbreviation.">';
				echo '<tr><td valign="top"><div align="left"><font color=red>Zip: </div></font><td valign="top">';

//******************populate zip code list
				echo '<div align="left"><select name="zip">';
				echo '<option value="">Select Zip Code</option>\n';

$strQuery = "select zip from zipCodes order by zip";

$rsrcResult = mysql_query($strQuery);

while($arrayRow = mysql_fetch_assoc($rsrcResult)) {
					$strA = $arrayRow["zip"];
					echo '<option value="' . $strA . '"';
					if ($strA==$nt[Zip]){
						echo ' selected="selected"';
					}
					echo">$strA</option>\n";
				}
				echo '</select></div>';
				echo '<td><img src="images/question.png" title="Select a zip code from the list.">';
				echo '<tr><td valign="top"><div align="left">Address Type (optional): </div><td valign="top"><input type="text" name="addresstype" size="30" value="' . $nt[addressType] . '"><td><img src="images/question.png" title="Type of address (apartment, house, business, mobile home, etc).">';
				echo '<tr><td valign="top"><div align="left"><font color=red>Phone: </div></font><td valign="top"><input type="text" name="Phone" size="30" value="' . $nt[Phone] . '" maxlength="30"><td><img src="images/question.png" title="15 characters maximum."></table>';
			}
			echo '<div align="center"><input type="submit" value="Continue" name = "submit"></div></form>';
	    } elseif($payment =="new") {
			include('newcard.php');
        }
}   //end of check address loop

if($action=="schedule"){
	echo 'Your order is being scheduled for ' . $duetime . ' on ' . $duedate . '.';
}

if(($check=="payment") AND ($when !=="later")){

//save delivery or pickup choice and delivery time passed in by previous step

echo '<form action='. $_SERVER['PHP_SELF'] . '?a=savepay&c=address method="post">Please select how you wish to pay for your order:';
	
	if ($checksok==1){	//if checks allowed, list as available option
	   echo '<br><input type="radio" name="payment" value="check" /> Check (ID will be required)';
	}
	echo'<br><input type="radio" name="payment" value="cash" checked="yes"/> Cash';
		if(($paypalid>"")&&($processor=="2")){	//paypal id is entered, add paypal as card option
			echo'<br><input type="radio" name="payment" value="paypal"/> Credit/Debit Card';
		} else {	//no paypal id is entered, use manual payment method
			
			
			//check to see if pymt info is saved and if not expired
			/* NO MORE SUPPORTING SAVED CARDS FOR PCI COMPLIANCE - NOW USING SESSIONS AND PAYPAL PAYFLOW
			$query = "Select cardNumber from guestLogin where UserKey='" . $_SESSION['UserKey'] . "'";
			$query .= " AND (cardExpYear >'" . date("Y",$date) . "' OR (cardExpYear='" . date("Y",$date) . "' AND cardExpMonth>='" . date("m",$date) . "'))";
			$rt=mysql_query($query);          // query executed
			echo mysql_error();                    // if any error is there that will be printed to the screen
			if (mysql_num_rows($rt)!== 0) {
				while($nt=mysql_fetch_array($rt)){
					echo '<br><input type="radio" name="payment" value="card" /> Saved card ending in -' . substr($nt[cardNumber], -4) ; //valid card on file
				}

}
			*/
			$query = "select cardType from cardTypes order by cardType";
			$rt=mysql_query($query);          // query executed
			echo mysql_error();
			if (mysql_num_rows($rt)!== 0) {
				echo '<br><input type="radio" name="payment" value="new" /> Credit card ';
			}
	   
	   }	//end of manual payment credit card section
	   
		
		echo '<br><br>';
		echo '<input type="submit" value="Continue" name = "submit"></form>';

}
//echo "action = " . $action . " - check = " . $check . "<br>";
//echo "when = " . $duetime . ', ' . $duedate . " - how = " . $how . "<br>";
if((($action=="schedule") || ($action=="delivery")) AND ($check =="payment")){      //if check <> payment, future time not selected yet
        //save delivery method
        if($when=="now"){  //need to show scheduling options

$query = "update guestLogin set schedule = 'now'";
                             if ($how == "Delivery"){
                                    $query .= ", pickup=0 ";
                               }else {
                                    $query .= ", pickup=1 ";
                             }
                             $query .= " where UserKey='" . $_SESSION['UserKey'] . "'" ;
                                //echo $query;
                                
                        mysql_query($query);
		                    echo mysql_error();
                             
        }

if($when=="later"){  //need to show scheduling options
                                             include ('schedule.php');
                           if (($check =="payment")||($check =="Schedule")){
                                $query = "update guestLogin set schedule = '" . $duetime . " - " . $duedate . "'";
                             if ($how == "Delivery"){
                                    $query .= ", pickup=0 ";
                               }else {
                                    $query .= ", pickup=1 ";
                             }
                             $query .= " where UserKey='" . $_SESSION['UserKey'] . "'" ;
                                //echo $query;

mysql_query($query);
		                    echo mysql_error();
                           }
          }
}

if($action=="additem"){

//test fields to make sure they are filled in
	if(($_POST['itemid']==0)OR($_POST['quantity']==0)){ //required fields not filled in...
		echo '<font color="red">We apologize, but there was an error adding this item to your order. Please try again or call us to let us help 		you.</font>';
	} else {	//*******fields are filled in, add item to cart

//insert record into cart table
	         if($_SESSION['UserID'] =="9999"){ //if guest not logged in, add to cart using generic userkey and session ID
                 $query = "Insert into cart (itemNumber, qty, customerID, sessionID, size, subitems, categoryKey) values ('" . $_POST['itemid'] . "', '" . $_POST['quantity'] . "', '9999', '" . session_id() . "', '" . $_POST['size'] . "', '";
           }else{
	               $query = "Insert into cart (itemNumber, qty, customerID, size, subitems, categoryKey) values ('" . $_POST['itemid'] . "', '" . $_POST['quantity'] . "', '" . 		$_SESSION['UserKey']  . "', '" . $_POST['size'] . "', '";
         }
		 
         //test if item will have subitems and set switch accordingly
         $subitems = 0;
         if ($category=="Pizza"){
            $subitems = 1;
         }
          if(!empty($menudatabase)){	//select shared menu database for menu item
                                     include ('includes/db2config.php');
                                     include ('includes/mysql_connect.php');
            }
       $subqry = "Select usefixings from menuItem where itemKey = " . $_POST['itemid'];
       $srt=mysql_query($subqry);
		   echo mysql_error();
       while($snt=mysql_fetch_array($srt)){
         if(!empty($snt[usefixings])){
               $subitems = 1;
         }
        }
        mysql_close;
        
			$query .= $subitems;

$query .="','" . $_POST['categorykey'] . "')";
    if(!empty($menudatabase)){	//select main database b efore updating cart
    include ('includes/db1config.php');
    include ('includes/mysql_connect.php');
}
		//echo $query . "<br>";
		//echo "insert qry=" . $query . "<br>";
		mysql_query($query);          // query executed 
		echo mysql_error();                    // if any error is there that will be printed to the screen

}

}
if ($action=="submit"){
  $errct=0;
  //echo 'checkpt1';
      //check if any options are left blank - change action if required fields not supplied
       $query = "Select choicea, choiceb, choicec from cart where customerID='" . $_SESSION['UserKey'] . "' and sessionID='". session_id() ."' and (choicea = 'empty' OR
       choiceb = 'empty' OR choicec = 'empty') ";
        $rt=mysql_query($query);
    if (mysql_num_rows($rt)!== 0) {    //records exist with unselected options - show cart again with error message
           $errct = $errct +1;
              }
     mysql_close;
     
     //check if any coupon choices left blank
    $query = "Select * from cart where customerID='" . $_SESSION['UserKey'] . "' and sessionID='". session_id() ."' and qty>0 and itemNumber<1";
       //echo $query;    //testing
       $rt=mysql_query($query);
      if (mysql_num_rows($rt)!== 0) {    //records exist with unselected options - show cart again with error message
           $errct = $errct +1;
              }
     mysql_close;

//check if any free topping selectors left blank
    $query = "Select * from cart where customerID='" . $_SESSION['UserKey'] . "' and sessionID='". session_id() ."' and qty>0 and itemNumber<1";
       //echo $query;    //testing
       $rt=mysql_query($query);
      if (mysql_num_rows($rt)!== 0) {    //records exist with unselected options - show cart again with error message
           $errct = $errct +1;
              }
     mysql_close;
     
		//echo 'checkpt2';
		if ($errct>0) {    //records exist with unselected options - show cart again with error message
             echo '<div align="center"><font color="red">You must make a selection for each option and then click Update.</font></div>';
             //include('mycart.php');
             $action = '';
             $check = "";
    }
    mysql_close;
    //echo 'checkpt6';
    
}
if ($action=="submit"){
    //echo 'checkpt7';

//*************order being submitted - try upsell first
	//check if upsell has been offered
		$query = "Select upselloffered from guestLogin where UserKey='" . $_SESSION['UserKey'] . "' and upselloffered = 0";

$rt=mysql_query($query);
		echo mysql_error();
		if (mysql_num_rows($rt)!== 0) {
			$upsold = 0; //upselloffered value is 0, so hasn't been offered yet
		} else {
			$upsold = 1; //upselloffered value is 1, so has been offered already
		}
  if ($upsold ==0){    //upsell not offered yet
	//Check if any upsell items exist
		$query = "Select * from menuItem where upsell=1";

$rt=mysql_query($query);          // query executed 
		echo mysql_error();                    // if any error is there that will be printed to the screen
		if (mysql_num_rows($rt)!== 0) { //upsell items exist

include ('upsell.php');
       if ($upsellitems == 0){    //upsell items exist in same categories as ordered, so proceed to next step
          echo '<form action='. $_SERVER['PHP_SELF'] . '?a=delivery&c=payment method="post"><table><td>';
          if($wedeliver==1){
                  echo ' Will your order be for delivery or carry-out?';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Delivery</option><option>Carry-out</option></select>';
                  } else {
                  echo ' We currently offer only carry-out.';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Carry-out</option></select>';
               }
                  echo '<tr><td>';
                  echo ' Are you ordering for now or a later time?';
                  echo '<td><div align="right"><select name="schedule" width=40><option value="now" selected="selected">Now (ASAP)</option><option value="later">Schedule for later</option></select>';
                  echo '</table>';
                  echo '<br><br><div align="center"><input type="submit" value="Continue"></div></form><br><br>';

}
		} else{
      //no upsell items exist, so proceed to next step
                  echo '<form action='. $_SERVER['PHP_SELF'] . '?a=delivery&c=payment method="post"><table><td>';
                  if($wedeliver==1){
                  echo ' Will your order be for delivery or carry-out?';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Delivery</option><option>Carry-out</option></select>';
                  } else {
                  echo ' We currently offer only carry-out.';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Carry-out</option></select>';
                  }
                  echo '<tr><td>';
                  echo ' Are you ordering for now or a later time?';
                  echo '<td><div align="right"><select name="schedule" width=40><option value="now" selected="selected">Now (ASAP)</option><option value="later">Schedule for later</option></select>';
                  echo '</table>';
                  echo '<br><br><div align="center"><input type="submit" value="Continue"></div></form><br><br>';
  }//end of "upsell items exist" loop
	} else { //upsell already offered, proceed to next step here - delivery or carryout
                  echo '<form action='. $_SERVER['PHP_SELF'] . '?a=delivery&c=payment method="post"><table><td>';
                  if($wedeliver==1){
                  echo ' Will your order be for delivery or carry-out?';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Delivery</option><option>Carry-out</option></select>';
                  } else {
                  echo ' We currently offer only carry-out.';
                  echo '<td><div align="right"><select name="delivery" width=40><option selected="selected">Carry-out</option></select>';
                  }
                  echo '<tr><td>';
                  echo ' Are you ordering for now or a later time?';
                  echo '<td><div align="right"><select name="schedule" width=40><option value="now" selected="selected">Now (ASAP)</option><option value="later">Schedule for later</option></select>';
                  echo '</table>';
                  echo '<br><br><div align="center"><input type="submit" value="Continue"></div></form><br><br>';
  }

} else {

if (($action !=="delivery")AND($check =="") AND ($action !=="final")){      //don't show cart while selecting delivery time and date
                    //comment out while testing in another area
                    include('mycart.php');
		//echo '<a href="mycart.php" alt ="View My Cart" onClick="openwin(this.href,\'650\',\'400\'); return false;">View My Order</a>';
	            //include('ordermenu.php');
	}
}

echo '<br>';

</div>