Add2Credit.php at eCanteen

<?
  session_start();
  session_register("UserLevel_session");
  session_register("UserName_L2_session");
  session_register("eml_session");
  session_register("customerid_session");
  session_register("TimeOut_session");
  session_register("userlevel_session");
  session_register("SiteID$_session");
  session_register("credit_session");
  session_register("siteid$_session");
  session_register("customerID_session");
  session_register("accesslevel_session");
  session_register("TAFEICQuery_session");
  session_register("RosterRole_session");
  session_register("blnIsUserGood_session");
  session_register("siteID$_session");
  session_register("CustomerID_session");
?>
<? // asp2php (vbscript) converted on Sun Aug 26 12:14:33 2007
 $CODEPAGE="1252";?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>
    <title>Add to Credit</title>
</head>
<body>
<? 

if ($_SESSION['CustomerID']!=0)
{


  $SQLStatement="SELECT Customers.CustomerID, Customers.FirstName, Customers.LastName, Customers.Address,Customers.City, Customers.State, Customers.PostalCode, Customers.PhoneNumber, Customers.MobileNumber,Customers.EmailAddress FROM Customers WHERE (((Customers.CustomerID)=".$_SESSION['CustomerID']."));";

  // $objConnection1 is of type "ADODB.Connection"
  // $objCommand is of type "ADODB.command"
  // $objRecordset1 is of type "ADODB.Recordset"
//objRecordset1.CursorLocation = adUseClient
  $Connect_String="DSN=eCanteenMySQL";
  $a2p_connstr=$Connect_String;
  $a2p_uid=strstr($a2p_connstr,'uid');
  $a2p_uid=substr($d,strpos($d,'=')+1,strpos($d,';')-strpos($d,'=')-1);
  $a2p_pwd=strstr($a2p_connstr,'pwd');
  $a2p_pwd=substr($d,strpos($d,'=')+1,strpos($d,';')-strpos($d,'=')-1);
  $a2p_database=strstr($a2p_connstr,'dsn');
  $a2p_database=substr($d,strpos($d,'=')+1,strpos($d,';')-strpos($d,'=')-1);
  $objConnection1=mysql_connect("localhost",$a2p_uid,$a2p_pwd);
  mysql_select_db($a2p_database,$objConnection1);

  $objRecordset1=$objRecordset1_query=mysql_query(($SQLStatement),$objConnection1);
  $objRecordset1_BOF=1;  
$objRecordset1=mysql_fetch_array($objRecordset1_query);
;


?>
<form action="paypal.php"" method="post" id="CreditForm">
<!---https://www.paypal.com/cgi-bin/webscr-->
Enter the amount of credit you wish to make:
<input type="text" name="amount" />
<input type="hidden" name="cmd" value="_xclick"/>
<input type="hidden" name="business" value="hide@address.com"/>
<input type="hidden" name="item_name" value="Credit"/>
<input type="hidden" name="currency_code" value="AUD"/>
<input type="hidden" name="firstname" value="<?   echo ("FirstName");?>"/>


<input type="hidden" name="lastname" value="<?   echo ("lastname");?>"/>
 <input type="hidden" name="address" value="<?   echo ("address");?>"/>
 <input type="hidden" name="city" value="<?   echo ("city");?>"/>
 <input type="hidden" name="state" value="<?   echo ("state");?>"/>
 <input type="hidden" name="zip" value="<?   echo ("PostalCode");?>"/>
 <input type="hidden" name="email" value="<?   echo ("emailaddress");?>"/>
 <input type="hidden" name="phone_1" value="<?   echo ("phonenumber");?>"/>
 <input type="hidden" name="phone_2" value="<?   echo ("MobileNumber");?>"/>

<input type="image" src="http://www.paypal.com/en_AU/i/btn/x-click-but01.gif" name="submit" alt="Make payments with PayPal - it's fast, free and secure!"/>
</form>
<? 
}
  else
{

  header("Location: "."security/login.asp");
} 

?>

</body>
</html>