<?php
/*  readorder.php
    Copyright 2006, 2007, 2008 Elmar Wenners
    Support site: http://www.chaozz.nl

    This file is part of FreeWebshop.org.

    FreeWebshop.org is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    FreeWebshop.org is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with FreeWebshop.org; if not, write to the Free Software
    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

*/
?>
<?php if ($index_refer <> 1) { exit(); } ?>
<?php include ("./includes/checklogin.inc.php"); ?>
<?php
      if (!empty($_GET['orderid'])) {
	      $orderid=intval($_GET['orderid']);
      }
?>
<?php

    // lets check if the order you are trying to read is REALLY your own order
    $query = sprintf("SELECT * FROM `".$dbtablesprefix."order` WHERE ID = %s", quote_smart($orderid));
    $sql = mysql_query($query) or die(mysql_error());
    while ($row = mysql_fetch_row($sql)) { 
	       $webid = $row[7];
	       $ownerid = $row[5];
	}
    if ($ownerid != $customerid && IsAdmin() == false) {
	        PutWindow($gfx_dir, $txt['general12'] , $txt['general2'], "warning.gif", "50");
    }
    else {
	    $fp = fopen($orders_dir."/".$webid.".php", "rb") or die($txt['general6']);
	    $ordertext = fread($fp, filesize($orders_dir."/".$webid.".php"));
		list($security, $order) = split("\?>", $ordertext);
	    fclose($fp);
	
	    // if there are linebreaks, then we have a new order. if not, then it's an old one that needs nl2br
		$pos = strpos ($order, "<br />");
		if ($pos === false) { $order = nl2br($order); }
	?>
	     <table width="100%" class="datatable">
	       <caption><?php echo $webid; ?></caption>
	       <tr><td>
	           <?php echo $order; ?>
	     </td></tr></table>
	    <h4><a href="printorder.php?orderid=<?php echo $orderid ?>"><?php echo $txt['readorder1'] ?></a><br />
	    <a href="javascript:history.go(-1)"><?php echo $txt['readorder2'] ?></a></h4>
<?php } ?>