<?php

   require "path.php";
   include "$basepath/php/lib_Mail.php";
   include "$basepath/php/lib_ReplaceEmail.php";
   include "$basepath/php/lib_CreditCard.php";

   checkLogin();

   if (empty($id))
   {
       Header ("Location: {$fullURL}/my.php");
       exit;
   }
   
   $DbLink = new DB;

   $sql = "select * from links where id="   . getSQL($id) ;
   $DbLink->query( $sql );
   $row = $DbLink->next_record();
   $sid = $row['sid'];
   if ($DbLink->num_rows() == 0)
   {
       $DbLink->close();
       Header ("Location: {$fullURL}/my.php");
       exit;
   }

   if ($sid==0 || $sid=='')
   {
       $sql = "update links set pay='yes' where id="   . getSQL($id) ;
       $DbLink->query( $sql );
       $DbLink->close();
       Header ("Location: {$fullURL}/my.php");
       exit;
   }
   
   $sql = "select * from subcategories where id="   . getSQL($sid) ;
   $DbLink->query( $sql );
   $row = $DbLink->next_record();
   $cost = $row['pay'];
   $sid = $row['id'];
   if ($cost==0 || $cost=='')
   {
       $sql = "update links set pay='yes' where id="   . getSQL($id) ;
       $DbLink->query( $sql );
       $DbLink->close();
       Header ("Location: {$fullURL}/my.php");
       exit;
   }

   $CMD = getVar("CMD");
   if ($CMD=="SEND")
   {
  
       $CC_AMOUNT = "{$cost}";

       $CC_HOLDER_FIRSTNAME   = getVar ("CC_HOLDER_FIRSTNAME");
       $CC_HOLDER_LASTNAME    = getVar ("CC_HOLDER_LASTNAME");
       $CC_NO                 = getVar ("CC_NO");
       $CC_VALID_MONTH        = getVar ("CC_VALID_MONTH");
       $CC_VALID_YEAR         = getVar ("CC_VALID_YEAR");
       $CC_HOLDER_COUNTRY_ID  = getVar ("CC_HOLDER_COUNTRY_ID");
       $CC_HOLDER_ADDRESS1    = getVar ("CC_HOLDER_ADDRESS1");
       $CC_HOLDER_ADDRESS2    = getVar ("CC_HOLDER_ADDRESS2");
       $CC_HOLDER_CITY        = getVar ("CC_HOLDER_CITY");
       $CC_HOLDER_STATE_ID    = getVar ("CC_HOLDER_STATE_ID");
       $CC_HOLDER_POSTALCODE  = getVar ("CC_HOLDER_POSTALCODE");
       $CC_HOLDER_EMAIL       = getVar ("CC_HOLDER_EMAIL");
       $CC_CVV                = getVar ("CC_CVV");

       $ccvars["ccname"]    = "$CC_HOLDER_FIRSTNAME $CC_HOLDER_LASTNAME";
       $ccvars["amount"]    = "$CC_AMOUNT";
       $ccvars["ccnumber"]  = "$CC_NO";
       $ccvars["ccmonth"]   = "$CC_VALID_MONTH";
       $ccvars["ccyear"]    = "$CC_VALID_YEAR";
       $ccvars["country"]   = "$CC_HOLDER_COUNTRY_ID";
       $ccvars["address"]   = "$CC_HOLDER_ADDRESS1 $CC_HOLDER_ADDRESS2";
       $ccvars["city"]      = "$CC_HOLDER_CITY";
       $ccvars["state"]     = "$CC_HOLDER_STATE_ID";
       $ccvars["zip"]       = "$CC_HOLDER_POSTALCODE";
       $ccvars["email"]     = "$CC_HOLDER_EMAIL";
       $ccvars["cvv"]       = "$CC_CVV";
       //$ccvars["test"]      = "1";
  
       $result_array = Transact ($ccvars);
       if ($result_array['Approval']=="Y")
       {
          $send = "
Hello $CC_HOLDER_FIRSTNAME $CC_HOLDER_LASTNAME,

Your credit card was successfully charged for \${$CC_AMOUNT}.
Thanks, your links will appear soon.

Thank you for using our service.
Sincerely,
xpixadoo

";
          @mail("$CC_HOLDER_EMAIL", "$prefix :: xpixadoo :: Pay For Listing In Category", "$send", "From: webmaster@xpix.com", "-fdo-not-reply@xpix.com");

          $send = "
Hello,

$CC_HOLDER_FIRSTNAME $CC_HOLDER_LASTNAME paid for listing url.
His/Her credit card was successfully charged for \${$CC_AMOUNT}.
-----------------------------------------------------------

Additional Parameters:
Country: $CC_HOLDER_COUNTRY_ID
City:    $CC_HOLDER_CITY
State:   $CC_HOLDER_STATE_ID
ZIP:     $CC_HOLDER_POSTALCODE

Email:   $CC_HOLDER_EMAIL
Link ID: {$id}
{$fullURL}/admin-edit.php?id={$id}


Thank you for using our service.
Sincerely,
xpixadoo

";
          @mail("webmaster@xpix.com", "$prefix :: xpixadoo Successfully Pay For Listing", "$send", "From: webmaster@xpix.com", "-fdo-not-reply@xpix.com");
          @mail("webmaster@onixsoft.com", "$prefix :: Successfully Pay For Listing", "$send", "From: webmaster@xpix.com", "-fdo-not-reply@xpix.com");

          $sql = "update links set pay='yes' where id='{$id}'";
          $DbLink->query( $sql );

          $tmpBody = "
<SCRIPT>
<!--
  alert ('{$lng[7]} \${$CC_AMOUNT}');
  location.href='{$fullURL}/my.php';
-->
</SCRIPT>";

      }
      else
      {
          $tmpBody = "
<SCRIPT>
<!--
  alert ('{$lng[8]}');
-->
</SCRIPT>";

      }
   }
   
   $bURL = "{$fullURL}/my.php";
   ShowHeader ();
   $subName = getSubCategoryName($sid);
   $LeftMenu = getCategories ();

   $Body  = getHTMLBody("XADOPayForListing-Logged.html");
   $Body  = fixBody ($Body);
   $Body .= $tmpBody;

   ShowBody ($Body, $navBar);
   ShowFooter ();
  
   $DbLink->close();
   exit;

?>