##
## Changes made to Web Store 2.0 by Wale Oki (June/July 1999)
##
## * Integration of auth libriaries to enable pre-registration,
##   saving user details for future shopping, and automatically filling 
##   out order form (auto-click).
##   (Also changes to web_store_order_lib.pl, new autoclick.pl, web_store.cgi,
##    outlet*.html, ...)
## * The usual patches from various people - Credit Card validation,
##   Next 25 button, Empty Cart fix, Secure Order Work around.
## * Amendments to CC validation & order form payment details - to enable
##   telephone, check/cheque, choice of saving payment details
## * Cart Id as Order ID, and separate log per order.
## * Comparison price in product listing (by adding extra column
##   in products file)
## * Cosmetic changes to Store - Buttons at Top/Bottom of Store Front,
##   Consistent header/footers via ini files.
##

Implementation of the first change is not very generic/clean, but it is 
as follows:

1***. The necessary auth lib changes to web_store.cgi:

        *in=*form_data;

        require "$auth_lib/auth-lib.pl";

        $session = $in{"session"};
        $is_this_a_new_session = "yes" if ($session eq "");

         ($session, $session_username, $session_group,
                $session_firstname, $session_lastname, 
                $session_street, $session_area, $session_city, $session_state,
                $session_zip, $session_country, $session_email,
                $session_phone, $session_phone_nig, $session_phone_mob,
                $session_ctype, $session_cname,
                $session_cnumb, $session_ex_date) =
        &GetSessionInfo($session, "$sc_main_script_url", *in);

......

        &display_order_form ($session_firstname, $session_lastname,
                $session_street, $session_area, $session_city, $session_state, 
                $session_zip, $session_country, $session_email, 
                $session_phone, $session_phone_nig, $session_phone_mob,
                $session_ctype, $session_cname,
                $session_cnumb, $session_ex_date);
......

        &process_order_form ($session_firstname, $session_lastname,
$session_email);

2***. Similar treatment for %%session%% as done for cart_id & page in all *.pl
and *.cgi files so that session is always passed around.
 (web_store_order_lib.pl, web_store_html_lib.pl, web_store.cgi, ...)

3***. auth_* variables added to ini file (similar to BBS implementation ones).

4***. Make sure all lines in outlet_order_form.html with a variable end with
    a return line (and nothing else) to make parsing of file easier.
    (e.g. <INPUT TYPE="text" NAME="14-e-mail" MAXLENGTH="30">
    only a return line character after the last >)
5***. Changes to web_store_order_lib.pl (display/process_order_form).
      See diffs with original below.

############################
54c54
< 
---
>   
61d60
<   require "$auth_lib/Rot13.pm";
67a67
> 
100,101d99
<       <INPUT TYPE = "hidden" NAME = "session"
<              VALUE = "$form_data{'session'}">
159,296c157,158
<     if ($line =~ /01-name/)
<     {
<      chop $line;
<      chop $line;
<      $fullname = $session_firstname . " " . $session_lastname . " " .
$session_team_name;
<      print $line . " " . "VALUE=\"$fullname\">" . "\n";
<     }
<     elsif ($line =~ /02-b_street_address/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_street\">" . "\n";
<     }
<     elsif ($line =~ /03-b_city/)
<     {
<      chop $line;
<      chop $line;
<      $session_full_area = $session_area . " " . $session_city;
<      print $line . " " . "VALUE=\"$session_full_area\">" . "\n";
<     }
<     elsif ($line =~ /04-b_state/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_state\">" . "\n";
<     }
<     elsif ($line =~ /05-b_zip/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_zip\">" . "\n";
<     }
<     elsif ($line =~ /06-b_country/)
<     {
<      print $line . "<OPTION VALUE=\"$session_country\"><\/OPTION>" . "\n"
<       . "<OPTION SELECTED>$session_country<\/OPTION>" . "\n";
<     }
<     elsif ($line =~ /12-phone/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_phone\">" . "\n";
<     }
<     elsif ($line =~ /13-fax/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_fax\">" . "\n";
<     }
<     elsif ($line =~ /14-e-mail/)
<     {
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"$session_email\">" . "\n";
<     }
<     elsif ($line =~ /17-type_of_card/)
<     {
<      my $crpfld = new Crypt::Rot13;
<      $crpfld->charge($session_ctype);
<      @zzz = $crpfld->rot13(13);
<      print $line . "<OPTION VALUE=\"@zzz\"><\/OPTION>" . "\n"
<       . "<OPTION SELECTED>@zzz<\/OPTION>" . "\n";
<     }
<     elsif ($line =~ /19-cardname/)
<     {
<      my $crpfld = new Crypt::Rot13;
<      $crpfld->charge($session_cname);
<      @zzz = $crpfld->rot13(13);
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"@zzz\">" . "\n";
<     }
<     elsif ($line =~ /20-card_number/)
<     {
<      my $crpfld = new Crypt::Rot13;
<      $crpfld->charge($session_cnumb);
<      @zzz = $crpfld->rot13(13);
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"@zzz\">" . "\n";
<     }
<     elsif ($line =~ /21-ex_date/)
<     {
<      my $crpfld = new Crypt::Rot13;
<      $crpfld->charge($session_ex_date);
<      @zzz = $crpfld->rot13(13);
<      chop $line;
<      chop $line;
<      print $line . " " . "VALUE=\"@zzz\">" . "\n";
<     }
<     elsif ($line =~ /<h2>back.*button.*h2>/i)
<     {
<       print qq!
<       <FORM METHOD = "post" ACTION = "$sc_main_script_url">
<       <INPUT TYPE = "hidden" NAME = "page"
<              VALUE = "$form_data{'page'}">
<       <INPUT TYPE = "hidden" NAME = "session"
<              VALUE = "$form_data{'session'}">
<       <INPUT TYPE = "hidden" NAME = "cart_id"
<              VALUE = "$form_data{'cart_id'}">
<       <CENTER>
<       <INPUT TYPE = "submit" NAME = "return_to_frontpage_button"
<              VALUE = "More Items before Paying?">
<       <INPUT TYPE = "submit" NAME = "modify_cart_button"
<              VALUE = "Modify Cart before Paying?">
<       </FORM>
<       </CENTER>\n!;
<     }
<     else
<     {
<      print $line;
<     }
---
> 
>     print $line;
455c317,321
< $sc_process
---
> <HTML>
> <HEAD>
> <TITLE>Processing The Order Form</TITLE>
> </HEAD>
> </BODY>
500,541d365
< }
< 
< #### CC Validation
< if ($form_data{'17-type_of_card'} =~ /$sc_cc_name_nocc/i)
< {
< }
< else
< {
<   foreach $required_field (@sc_order_form_required_fields_cc)
<   {
<    if ($form_data{$required_field} eq "") 
<    {
<     $required_fields_filled_in = "no";
<     print "<H2>You forgot to fill in " .
<       $sc_order_form_array{$required_field} . ".</H2>\n";
<    }
<   }
< 
<   ($error_code, $error_message) = &validate_credit_card_information(
<                                   $form_data{$sc_cc_name_field},
<                                   $form_data{$sc_cc_number_field},
<                                   $form_data{$sc_cc_expiration_date_field});
< 
<   if($error_code != 0)
<   {
< 
<     $required_fields_filled_in = "no";
< 
<     print qq!<H2>The credit card you submitted failed
<            validation for the following reason: !;
<   print $error_message . ".</H2>\n";
<   
<   }
< }
< #### End of CC Validation
< 
< $subtotal_nonzero = "yes"; 
< if ($subtotal < 1) 
< { 
<    $subtotal_nonzero = "no"; 
<    $required_fields_filled_in = "no"; 
<    print "<H2>Your cart is empty.</H2>\n"; 
544,562d367
< $mail_tmp = $form_data{"14-e-mail"};
< $at = '@';
< $dot = '.';
< $comma = ',';
< 
< if (index($mail_tmp, $comma) < 0 && index($mail_tmp, $at) > 0 && index(
<  $mail_tmp, $dot) > 0)
< #if ( $mail_tmp =~ /(@.*@)|(\.\.)|(@\.)|(\.@)|(^\.)/  ||
< #     $mail_tmp !~
< #       /^.+\@(\[?)[a-zA-Z0-9\-\.]+\.([a-zA-Z]{2,3}|[0-9]{1,3})(\]?)$/)
< {
< #
< }
< else 
< {
<    $required_fields_filled_in = "no"; 
<    print "<H2>Invalid email address</H2>\n";
< }
< 
604c409
<                "Order $cart_id $sc_main_script_url from $session_firstname
$session_lastname ($session_email)", $text_of_cart);
---
>                "Web Store Order", $text_of_cart);
616,620c421,422
<     $sc_order_log_file_mini = $sc_order_log_file.".".$cart_id;
<     open (ORDERLOG, ">>$sc_order_log_file_mini");
<     print ORDERLOG "-" x 40 . "\n";
<     print ORDERLOG "OrderNo = " . $cart_id . " from ". $sc_main_script_url
."\n";
<     print ORDERLOG "AcountOwner = " . $session_firstname . " " .
$session_lastname ." (" . $session_email . ")";
---
>     open (ORDERLOG, ">>$sc_order_log_file");
>     print ORDERLOG "-" x 40;
627,653c429
<   print "<H2>We have now received Your Order!</H2>\n";
<   print "<H2> Order Number is $cart_id</H2>\n";
<   if ($form_data{'17-type_of_card'} =~ /$sc_cc_name_nocc/i)
<   {
<      print "<H3> For telephone, cheque or check orders, goods will not be sent
until after confirmed or cleared funds are received.</H3>\n";
<   }
< 
<   if ($form_data{'auto_click'} eq "yes")
<   {
<     $form_data{'item_to_modify'} = $session_username;
<     print "<H3>Payment Details will be saved for future use.</H3>\n";
<     $form_data{'aclick_cc_type'} = $form_data{'17-type_of_card'};
<     $form_data{'aclick_cc_name'} = $form_data{'19-cardname'};
<     $form_data{'aclick_cc_number'} = $form_data{'20-card_number'};
<     $form_data{'aclick_cc_exp'} = $form_data{'21-ex_date'};
< 
<     &require_supporting_libraries(__FILE__, __LINE__,
<       "$sc_aclick_lib_path","$auth_lib/auth-extra-lib.pl");
<     &aclick_modification;
<   }
<   else
<   {
<     print "<H3>No \(New\) Payment Details Retained.</H3>\n";
<   }
< 
<   print "<H3>Please print or save off this page for your records.</H3>\n";
<   print "<H2>Thank You for Shopping with us!</H2>\n";
---
>   print "<H2>Your Order Has Been Sent!</H2>\n";
660d435
<   print "<H2>Press the Browser's Back Button to Correct</H2>\n";
664a440
> 
666d441
< $sc_footer
################################


6***. New file autoclick.pl based on amendment routine in DB Manager 6.0

7***. Rot13.pm for simple encryption of some fields. Alternatives can be used.

8***. Used https throughout to:
      - protect registration details of customers
      - avoid issue with Internet Explorer when switching
        from secure to non secure mode (cgi-lib.pl error)