<?php
/*
+--------------------------------------------------------------------------
|   CubeCart 4
|   ========================================
|	CubeCart is a registered trade mark of Devellion Limited
|   Copyright Devellion Limited 2006. All rights reserved.
|   Devellion Limited,
|   5 Bridge Street,
|   Bishops Stortford,
|   HERTFORDSHIRE.
|   CM23 2JU
|   UNITED KINGDOM
|   http://www.devellion.com
|	UK Private Limited Company No. 5323904
|   ========================================
|   Web: http://www.cubecart.com
|   Email: info (at) cubecart (dot) com
|	License Type: CubeCart is NOT Open Source Software and Limitations Apply 
|   Licence Info: http://www.cubecart.com/site/faq/license.php
+--------------------------------------------------------------------------
|	viewProduct.inc.php
|   ========================================
|	Displays the Product in Detail
+--------------------------------------------------------------------------
*/

if(!defined('CC_INI_SET')){ die("Access Denied"); }

// include lang file
$lang = getLang("includes".CC_DS."content".CC_DS."viewProd.inc.php");

// query database
$_GET['productId'] = sanitizeVar($_GET['productId']);

if($config['seftags']){
	$query = "SELECT prod_metatitle, prod_metadesc, prod_metakeywords, productId, productCode, quantity, name, disabled, description, image, noImages, price, popularity, sale_price, stock_level, useStockLevel, digital, digitalDir, cat_name, ".$glob['dbprefix']."CubeCart_inventory.cat_id, cat_father_id, cat_image, per_ship, item_ship, item_int_ship, per_int_ship, noProducts FROM ".$glob['dbprefix']."CubeCart_inventory INNER JOIN ".$glob['dbprefix']."CubeCart_category ON ".$glob['dbprefix']."CubeCart_inventory.cat_id = ".$glob['dbprefix']."CubeCart_category.cat_id WHERE productId = ".$db->mySQLSafe($_GET['productId']);
} else {
	$query = "SELECT productId, productCode, quantity, name, disabled, description, image, noImages, price, popularity, sale_price, stock_level, useStockLevel, digital, digitalDir, cat_name, ".$glob['dbprefix']."CubeCart_inventory.cat_id, cat_father_id, cat_image, per_ship, item_ship, item_int_ship, per_int_ship, noProducts FROM ".$glob['dbprefix']."CubeCart_inventory INNER JOIN ".$glob['dbprefix']."CubeCart_category ON ".$glob['dbprefix']."CubeCart_inventory.cat_id = ".$glob['dbprefix']."CubeCart_category.cat_id WHERE productId = ".$db->mySQLSafe($_GET['productId']);
}

$prodArray = $db->select($query);

$view_prod = new XTemplate ("content".CC_DS."viewProd.tpl");

if ($prodArray) {
	
	$meta['metaDescription'] = substr(strip_tags($prodArray[0]['description']),0,35);
	
	if($config['seftags']){
	
		// get the native language for the category name
		$resultForeign = $db->select("SELECT cat_master_id as cat_id, cat_name FROM ".$glob['dbprefix']."CubeCart_cats_lang WHERE cat_lang = '".LANG_FOLDER."' AND cat_master_id = ".$db->mySQLSafe($prodArray[0]['cat_id']));		
		
		if($resultForeign == TRUE){			
			$prodArray[0]['cat_name'] = $resultForeign[0]['cat_name'];		
		}
	
		// get alternate language title for this product
		$sefval = "";
		$sefLangProdTitle = $prodArray[0]['name'];
		if(($sefval = prodAltLang($prodArray[0]['productId'])) == TRUE){			
			// change the titles as they make more sense to the user if they are in their native languages
			// however to the search engine they will always be in the default language regardless as they can't change languages
			$sefLangProdTitle = $sefval['name'];	
			// don't worry about description it will always be in the default language regardless as search 
			// engines can't change languages	
		}
	
		// create title and metas
		$prevDirSymbol = $config['dirSymbol'];
		$config['dirSymbol'] = ' - ';
		
		if($config['sefprodnamefirst']){
			$meta['siteTitle'] = $sefLangProdTitle.$config['dirSymbol'].getCatDir($prodArray[0]['cat_name'],$prodArray[0]['cat_father_id'], $prodArray[0]['cat_id'], FALSE, TRUE, FALSE);
		} else {
			$meta['siteTitle'] = getCatDir($prodArray[0]['cat_name'],$prodArray[0]['cat_father_id'], $prodArray[0]['cat_id'], false, true).$config['dirSymbol'].$sefLangProdTitle;		
		}
		$config['dirSymbol'] = $prevDirSymbol;
		$meta['sefSiteTitle'] = $prodArray[0]['prod_metatitle']; 
		$meta['sefSiteDesc'] = $prodArray[0]['prod_metadesc'];
		$meta['sefSiteKeywords'] = $prodArray[0]['prod_metakeywords'];
	} else {
		$meta['siteTitle'] = $config['siteTitle']." - ".$prodArray[0]['name'];
	}
	
	$val = "";
	
	if(($val = prodAltLang($prodArray[0]['productId'])) == TRUE) {
				
		$prodArray[0]['name'] = $val['name'];
		$prodArray[0]['description'] = $val['description'];
			
	}

	// update amount of views
	$upPop['popularity'] = "popularity+1"; 
	$db->update($glob['dbprefix']."CubeCart_inventory",$upPop,"productId = ".$db->mySQLSafe($_GET['productId']));
	
	if($_GET['notice']==1) {
		$view_prod->assign("LANG_OPTS_NOTICE",$lang['viewProd']['opts_notice']);
		$view_prod->parse("view_prod.prod_true.opts_notice");
	}
	
	$view_prod->assign("LANG_PRODTITLE", $lang['viewProd']['product']);
	$view_prod->assign("LANG_PRODINFO",$lang['viewProd']['product_info']);
	$view_prod->assign("LANG_FIRST_TO_REVIEW",$lang['viewProd']['first_to_review']);
	$view_prod->assign("LANG_PRICE",$lang['viewProd']['price']);
	$view_prod->assign("LANG_PRODCODE",$lang['viewProd']['product_code']);
	$view_prod->assign("LANG_TELLFRIEND",$lang['viewProd']['tellafriend']);
	$view_prod->assign("LANG_READ_REVIEWS",$lang['viewProd']['read_reviews']);
	$view_prod->assign("LANG_WRITE_REVIEWS",$lang['viewProd']['write_reviews']);
	$view_prod->assign("TXT_PRODTITLE",validHTML($prodArray[0]['name']));
	$view_prod->assign("TXT_DESCRIPTION",$prodArray[0]['description']);
	
	if (isset($_GET['add']) && isset($_GET['quan'])) {
		$view_prod->assign("CURRENT_URL", str_replace(array("&amp;add=".$_GET['add'], "&amp;quan=".$_GET['quan']), '', currentPage()));
	} else {
		$view_prod->assign("CURRENT_URL", currentPage());
	}

	if (!salePrice($prodArray[0]['price'], $prodArray[0]['sale_price']) || $config['saleMode'] == false) {
		$view_prod->assign("TXT_PRICE_VIEW", priceFormat($prodArray[0]['price'],true));
	} else {
		$view_prod->assign("TXT_PRICE_VIEW","<span class='txtOldPrice'>".priceFormat($prodArray[0]['price'],true)."</span>");
	}
	$salePrice = salePrice($prodArray[0]['price'], $prodArray[0]['sale_price']);
	$view_prod->assign("TXT_SALE_PRICE_VIEW", priceFormat($salePrice,true));
	$view_prod->assign("TXT_PRODCODE", $prodArray[0]['productCode']);
	$view_prod->assign("LANG_HOME", $lang['viewProd']['home']);
	$view_prod->assign("CURRENT_DIR",getCatDir($prodArray[0]['cat_name'],$prodArray[0]['cat_father_id'], $prodArray[0]['cat_id'],$link=TRUE).$config['dirSymbol'].$prodArray[0]['name']);

	$view_prod->assign("LANG_QUAN",$lang['viewProd']['quantity']);

	$view_prod->assign("PRODUCT_ID",$prodArray[0]['productId']);

	if (!empty($prodArray[0]['image'])) {

		$imgRelPath = imgPath($prodArray[0]['image'],$thumb=0,$path="rel");
		
		$view_prod->assign("IMG_SRC",$imgRelPath);
	} else {
		$view_prod->assign("IMG_SRC","skins/". SKIN_FOLDER . "/styleImages/nophoto.gif");
	}
	
	if ($prodArray[0]['noImages']>0) {
	
		if (!isset($config['imgGalleryType']) || !$config['imgGalleryType']) {

			$view_prod->assign("LANG_MORE_IMAGES",$lang['viewProd']['popup_more_images']);
			$view_prod->parse("view_prod.prod_true.popup_gallery");
		
		} else if ($config['imgGalleryType']) {
		
			$imgs = $db->select("SELECT img FROM ".$glob['dbprefix']."CubeCart_img_idx WHERE productId = ".$db->mySQLsafe($prodArray[0]['productId']));
			for ($i=0; $i<count($imgs); $i++){
				$thumbRootPath = imgPath($imgs[$i]['img'],$thumb=1,$path="root");
				$thumbRelPath = imgPath($imgs[$i]['img'],$thumb=1,$path="rel");
				
				if (file_exists($thumbRootPath)) {
					
					$view_prod->assign("VALUE_THUMB_SRC",$thumbRelPath);
					$sizeThumb = getimagesize($thumbRootPath);
					$view_prod->assign("VALUE_THUMB_WIDTH",$sizeThumb[0]);
					
				} else {
					$view_prod->assign("VALUE_THUMB_SRC",imgPath($imgs[$i]['img'], 0, 'rel'));
					$view_prod->assign("VALUE_THUMB_WIDTH",$config['gdthumbSize']);
				}
				
				$view_prod->assign("VALUE_IMG_SRC", imgPath($imgs[$i]['img'], 0, 'rel'));
				$view_prod->assign("ALT_THUMB",$lang['viewProd']['thumb_alt']);
				$view_prod->parse("view_prod.prod_true.image_gallery.img_repeat");
			}
			$view_prod->assign("IMAGE_GALLERY",$lang['viewProd']['image_gallery']);
			$view_prod->parse("view_prod.prod_true.image_gallery");
		}
	}
	
	## Review stars
	$commentQuery = sprintf("SELECT COUNT(id) as noComments FROM %sCubeCart_reviews WHERE approved = 1 AND productId = %d", $glob['dbprefix'], $prodArray[0]['productId']);
	$comments = $db->select($commentQuery);
	
	if ($comments[0]['noComments'] >= 1) {
		$reviewQuery = "SELECT COUNT(id) AS noReviews, AVG(rating) as aveRating FROM `".$glob['dbprefix']."CubeCart_reviews` WHERE `type` = 0 AND approved = 1 AND productId =".$db->mySQLsafe($prodArray[0]['productId']);
		$review = $db->select($reviewQuery);
		
		if ($review[0]['noReviews'] >= 1) {
			
			for ($i=0; $i<5; $i++) {
				$view_prod->assign("VAL_STAR", starImg($i,$review[0]['aveRating']));
				$view_prod->parse("view_prod.prod_true.reviews_true.review_stars");	
			}
			$view_prod->assign("LANG_BASED_ON_X_REVIEWS", sprintf($lang['viewProd']['based_on_x_reviews'], $review[0]['noReviews']));
		}
		$view_prod->parse("view_prod.prod_true.reviews_true");
		$view_prod->parse("view_prod.prod_true.read_reviews");
	} else {
		
		$view_prod->parse("view_prod.prod_true.reviews_false");
	}
	
	if (!$prodArray[0]['disabled']) {
		if ($config['outofstockPurchase']) {
		
			$view_prod->assign("BTN_ADDBASKET",$lang['viewProd']['add_to_basket']);
			$view_prod->parse("view_prod.prod_true.buy_btn");
			
		} else if ($prodArray[0]['useStockLevel'] && $prodArray[0]['stock_level']>0) {
		
			$view_prod->assign("BTN_ADDBASKET", $lang['viewProd']['add_to_basket']);
			$view_prod->parse("view_prod.prod_true.buy_btn");	
			
		} else if (!$prodArray[0]['useStockLevel']) {
	
			$view_prod->assign("BTN_ADDBASKET", $lang['viewProd']['add_to_basket']);
			$view_prod->parse("view_prod.prod_true.buy_btn");
		}
	}

	$view_prod->assign('LANG_DIR_LOC', $lang['viewProd']['location']);

	## See if any have been reserved for them
	/* maybe for a future version
	if ($config['stock_change_time'] == 1) {
		// see if this item has been added to the basket for them already and make sure the quantity reflect for them
		$basket = unserialize($cc_session->ccUserData['basket']);
		if (is_array($basket) && isset($basket['conts'])){
			foreach($basket['conts'] as $key => $value){
				$idQuan = explode(":",$key);
				if($idQuan[0] == $prodArray[0]['productId']){
					$prodArray[0]['stock_level'] = $prodArray[0]['stock_level'] + $value['quantity'];	
				}
			}
		}
	}
	*/

	if ($config['stockLevel'] && $prodArray[0]['useStockLevel'] && $prodArray[0]['stock_level']>0) {
		$view_prod->assign('TXT_INSTOCK', $lang['viewProd']['no_instock'].' '.$prodArray[0]['stock_level']);
		
	} else if ($prodArray[0]['useStockLevel'] && $prodArray[0]['stock_level']>0) {
		$view_prod->assign("TXT_INSTOCK",$lang['viewProd']['instock']);
	} 


	if ($prodArray[0]['stock_level']<1 && $prodArray[0]['useStockLevel'] && !$prodArray[0]['digital']) {
		$view_prod->assign('TXT_OUTOFSTOCK', $lang['viewProd']['out_of_stock']);
	}

	## Build SQL for product options
	$query = "SELECT ".$glob['dbprefix']."CubeCart_options_bot.option_id, ".$glob['dbprefix']."CubeCart_options_bot.value_id, option_price, option_symbol, value_name, option_name, assign_id FROM `".$glob['dbprefix']."CubeCart_options_bot` INNER JOIN `".$glob['dbprefix']."CubeCart_options_mid` ON ".$glob['dbprefix']."CubeCart_options_mid.value_id = ".$glob['dbprefix']."CubeCart_options_bot.value_id INNER JOIN `".$glob['dbprefix']."CubeCart_options_top` ON ".$glob['dbprefix']."CubeCart_options_bot.option_id = ".$glob['dbprefix']."CubeCart_options_top.option_id WHERE product =".$db->mySQLSafe($_GET['productId'])." ORDER BY option_name, value_id, value_name ASC";
	$options = $db->select($query); 

	if ($options) {
		$view_prod->assign('TXT_PROD_OPTIONS', $lang['viewProd']['prod_opts']);
		$i = 0;
		foreach ($options as $option) {
			$view_prod->assign('VAL_ASSIGN_ID', $option['assign_id']);
			$view_prod->assign('VAL_VALUE_NAME', htmlentities(stripslashes($option['value_name'])));
			
			if ($options[$i]['option_price']>0) {
				$view_prod->assign('VAL_OPT_SIGN', $option['option_symbol']);
				$view_prod->assign('VAL_OPT_PRICE', priceFormat($option['option_price'], true));
				$view_prod->parse('view_prod.prod_true.prod_opts.repeat_options.repeat_values.repeat_price');
			}
			$view_prod->parse('view_prod.prod_true.prod_opts.repeat_options.repeat_values');	
			
			if ($options[$i]['option_id'] !== $options[$i+1]['option_id']) {
				$view_prod->assign('VAL_OPTS_NAME', $options[$i]['option_name']);
				$view_prod->parse('view_prod.prod_true.prod_opts.repeat_options');
			} 
			$i++;
		}
		$view_prod->parse('view_prod.prod_true.prod_opts');
		unset($i);
	}

	// start product reviews/comment
	if ($_GET['review']=='write' && $prodArray) {
		
		if (isset($_POST['review'])) {
			if ($config['floodControl']) {
				$spamCode = fetchSpamCode($_POST['ESC'], true);
			}
			
			// start validation
			if ($config['floodControl'] && !isset($_POST['review']['spambot']) || ($config['floodControl'] && $spamCode['SpamCode']!==strtoupper($_POST['review']['spambot'])) || ($config['floodControl']==1 && get_ip_address()!==$spamCode['userIp'])) {
				$view_prod->assign("VAL_ERROR",$lang['viewProd']['code_error']);
				$view_prod->parse("view_prod.prod_true.write_review.error");
				
			} else if (empty($_POST['review']['name']) || empty($_POST['review']['email']) || empty($_POST['review']['title']) || empty($_POST['review']['review'])) {
				$view_prod->assign("VAL_ERROR",$lang['viewProd']['empty_fields']);
				$view_prod->parse("view_prod.prod_true.write_review.error");
				
			} else if (!validateEmail($_POST['review']['email'])) {
				$view_prod->assign("VAL_ERROR",$lang['viewProd']['invalid_email']);
				$view_prod->parse("view_prod.prod_true.write_review.error");
				
			} else {
				$data['productId'] = $db->MySQLSafe($_GET['productId']);
				$data['type'] = $db->MySQLSafe($_POST['review']['type']);
				$data['rating'] = $db->MySQLSafe($_POST['review']['rating']);
				$data['name'] = $db->MySQLSafe($_POST['review']['name']);
				$data['email'] = $db->MySQLSafe($_POST['review']['email']);
				$data['title'] = $db->MySQLSafe(strip_tags(get_magic_quotes_gpc () ? stripslashes($_POST['review']['title']) : $_POST['review']['title']));
				$data['review'] = $db->MySQLSafe(strip_tags(get_magic_quotes_gpc () ? stripslashes($_POST['review']['review']) : $_POST['review']['review']));
				$data['ip'] = $db->MySQLSafe(get_ip_address());
				$data['time'] = time();
				
				$reviewResult = $db->insert($glob['dbprefix']."CubeCart_reviews", $data);
				$reviewId = $db->insertid();
				
				$view_prod->assign("VAL_SUCCESS",$lang['viewProd']['submit_success']);
				$view_prod->parse("view_prod.prod_true.write_review.success");
				
				
				// notify store owner
				require("classes".CC_DS."htmlMimeMail".CC_DS."htmlMimeMail.php");
				
				$mail = new htmlMimeMail();
				
				$lang = getLang("email.inc.php");
		
				$macroArray = array(
			
					"AUTHOR_NAME" => sanitizeVar($_POST['review']['name']),
					"AUTHOR_EMAIL" => sanitizeVar($_POST['review']['email']),
					"SENDER_ID" => sanitizeVar(get_ip_address()),
					"PRODUCT_NAME" => sanitizeVar($prodArray[0]['name']),
					"RATING" => sanitizeVar($_POST['review']['rating']),
					"REVIEW_TITLE" => sanitizeVar($_POST['review']['title']),
					"REVIEW_COPY" => sanitizeVar(strip_tags($_POST['review']['review'])),
					"APPROVE_URL" => $glob['storeURL']."/".$glob['adminFile']."?_g=reviews/index&approved=1&id=".$reviewId,
					"DECLINE_URL" => $glob['storeURL']."/".$glob['adminFile']."?_g=reviews/index&approved=0&id=".$reviewId
			
				);
		
				$text = macroSub($lang['email']['new_review_body'],$macroArray);
				unset($macroArray);
				
				$mail->setText($text);
				$mail->setReturnPath($config['masterEmail']);
				$mail->setFrom(sanitizeVar($_POST['review']['name']).' <'.sanitizeVar($_POST['review']['email']).'>');
				$mail->setSubject($lang['email']['new_review_subject']);
				$mail->setHeader('X-Mailer', 'CubeCart Mailer');
				$send = $mail->send(array($config['masterEmail']), $config['mailMethod']);
				
			}
				
		}
		
		$view_prod->assign("LANG_SUBMIT_REVIEW",$lang['viewProd']['submit_review']);
		
		if(!$reviewResult) {
		
			$view_prod->assign("LANG_SUBMIT_REVIEW_COMPLETE",$lang['viewProd']['submit_review_complete']);
			$view_prod->assign("LANG_REVIEW_TYPE",$lang['viewProd']['contrib_type']);
			$view_prod->assign("LANG_REVIEW",$lang['viewProd']['review']);
			$view_prod->assign("LANG_COMMENT",$lang['viewProd']['comment']);
			$view_prod->assign("LANG_RATING",$lang['viewProd']['rating']);
			$view_prod->assign("LANG_SPAMBOT",$lang['viewProd']['spambot']);
			$view_prod->assign("LANG_NAME",$lang['viewProd']['review_name']);
			$view_prod->assign("LANG_EMAIL",$lang['viewProd']['email']);
			$view_prod->assign("LANG_NOT_DISPLAYED",$lang['viewProd']['not_displayed']);
			$view_prod->assign("LANG_TITLE",$lang['viewProd']['title']);
			$view_prod->assign("LANG_DETAILS",$lang['viewProd']['review_details']);
			
			if(isset($_POST['review']['name']) && isset($_POST['review']['email'])) {
				$view_prod->assign("VAL_REV_NAME",sanitizeVar($_POST['review']['name']));
				$view_prod->assign("VAL_REV_EMAIL",sanitizeVar($_POST['review']['email']));
			} elseif($cc_session->ccUserData['customer_id']>0) {
				$view_prod->assign("VAL_REV_NAME",$cc_session->ccUserData['firstName']." ".$cc_session->ccUserData['lastName']);
				$view_prod->assign("VAL_REV_EMAIL",$cc_session->ccUserData['email']);
			} else {
				$view_prod->assign("VAL_REV_NAME",$lang['viewProd']['anon']);
			}
			
			if($_POST['review']['type']==1) {
				$view_prod->assign("VAL_REV_TYPE_C_SELECTED","selected='selected'");
			} else {
				$view_prod->assign("VAL_REV_TYPE_R_SELECTED","selected='selected'");
			}
			
			$view_prod->assign("VAL_REV_TITLE",sanitizeVar($_POST['review']['title']));
			$view_prod->assign("VAL_REVIEW",sanitizeVar(strip_tags($_POST['review']['review'])));
			
			$view_prod->assign("VAL_ROOT_REL", $GLOBALS['rootRel']);
			
			if(isset($_POST['review']['rating']) && $_POST['review']['rating']>0) {
				
				for($i=0;$i<5;$i++){
					$view_prod->assign("VAL_STAR",starImg($i,$_POST['review']['rating']));
					$view_prod->assign("VAL_STAR_I",$i+1);
					$view_prod->parse("view_prod.prod_true.write_review.form.review_stars");	
				}
				
				$view_prod->assign("VAL_RATING",sanitizeVar($_POST['review']['rating']));
			} else {
				
				for($i=0;$i<5;$i++){
					$view_prod->assign("VAL_STAR",starImg($i,0));
					$view_prod->assign("VAL_STAR_I",$i+1);
					$view_prod->parse("view_prod.prod_true.write_review.form.review_stars");	
				}
				$view_prod->assign("VAL_RATING",0);
			}
			
			// Start Spam Bot Control
			if($config['floodControl']==1) {
				
				$spamCode = strtoupper(randomPass(5));
				$ESC = createSpamCode($spamCode);
				
				$imgSpambot = imgSpambot($ESC);
				
				$view_prod->assign("VAL_ESC",$ESC);
				$view_prod->assign("TXT_SPAMBOT","Spambot:");
				$view_prod->assign("IMG_SPAMBOT",$imgSpambot);
				$view_prod->parse("view_prod.prod_true.write_review.form.spambot");
			}
			
			$view_prod->parse("view_prod.prod_true.write_review.form");
		}
		
		$view_prod->parse("view_prod.prod_true.write_review");
	}
	
	if ($_GET['review']=="read" && $prodArray) {
		
		$page = (isset($_GET['page'])) ? sanitizeVar($_GET['page']) : 0;
		
		$reviews_query = "SELECT * FROM `".$glob['dbprefix']."CubeCart_reviews` WHERE approved=1 AND productId=".$db->mySQLsafe($prodArray[0]['productId'])." ORDER BY time DESC";
		$reviews = $db->select($reviews_query, 10, $page);
		$totalNoReviews = $db->numrows($reviews_query);
			
		$reviewsPagination = paginate($totalNoReviews, 10, $page, "page");
		
		if ($reviews) {
			$view_prod->assign("VAL_REVIEW_PAGINATION",$reviewsPagination);
			
			$view_prod->assign("LANG_REVIEWS_AND_COMMENTS",$lang['viewProd']['reviews_and_comments']);
			$view_prod->assign("LANG_BY",$lang['viewProd']['by']);
			
			for($i=0;$i<count($reviews);$i++) {
				
				if($reviews[$i]['type']==1){
					$view_prod->assign("LANG_TYPE",$lang['viewProd']['comment_colon']);
				} else{
					$view_prod->assign("LANG_TYPE","");
				}
				$view_prod->assign("VAL_REVIEW_TITLE", $reviews[$i]['title']);
				$view_prod->assign("VAL_REVIEW_NAME", $reviews[$i]['name']);
				$view_prod->assign("VAL_REVIEW_DATE", formatTime($reviews[$i]['time']));
				$view_prod->assign("VAL_REVIEW",$reviews[$i]['review']);
	
				if($reviews[$i]['type']==0) {
					for($j=0;$j<5;$j++) {
						$view_prod->assign("VAL_REVIEW_STAR",starImg($j,$reviews[$i]['rating']));
						$view_prod->assign("VAL_REVIEW_STAR_I",$j);
						$view_prod->parse("view_prod.prod_true.read_review.reviews_true.review_stars");	
					}
				}
				
				$view_prod->parse("view_prod.prod_true.read_review.reviews_true");
			}
			
		} else {
			$view_prod->assign("LANG_NO_REVIEWS_MADE",$reviews[$i]['no_reviews_made']);
			$view_prod->parse("view_prod.prod_true.read_review.reviews_false");
		}
		
		$view_prod->parse("view_prod.prod_true.read_review");
	}
	
	## start customers who bought this also bought...
	
	if (version_compare('4.1', $db->serverVersion(), '<=')) {

		$query = sprintf("SELECT DISTINCT O.productId, I.name, I.image, I.price, I.sale_price FROM %1\$sCubeCart_order_inv AS O INNER JOIN %1\$sCubeCart_inventory AS I ON I.productId = O.productId WHERE O.cart_order_id IN (SELECT DISTINCT cart_order_id FROM %1\$sCubeCart_order_inv WHERE productId = %2\$d) AND O.productId <> %2\$d LIMIT 3;", $glob['dbprefix'], $db->MySQLSafe($_GET['productId'], ''));
		
		$pastOrders = $db->select($query);
		
		if ($pastOrders == true && !isset($_GET['review'])) {
			for ($i=0; $i<count($pastOrders); $i++) {
				if (($val = prodAltLang($pastOrders[$i]['productId'])) == TRUE) {
					$pastOrders[$i]['name'] = $val['name'];
				}
				$thumbRootPath = imgPath($pastOrders[$i]['image'], $thumb=1, $path="root");
				$thumbRelPath = imgPath($pastOrders[$i]['image'], $thumb=1, $path="rel");
			
				if (file_exists($thumbRootPath) && !empty($pastOrders[$i]['image'])) {
					$view_prod->assign("VAL_IMG_SRC",$thumbRelPath);
				} else {
					$view_prod->assign("VAL_IMG_SRC",$GLOBALS['rootRel']."skins/". SKIN_FOLDER . "/styleImages/thumb_nophoto.gif");
				}
			
				if (!salePrice($pastOrders[$i]['price'], $pastOrders[$i]['sale_price'])) {
					$view_prod->assign("TXT_PRICE", priceFormat($pastOrders[$i]['price'],true));
				} else {
					$view_prod->assign("TXT_PRICE","<span class='txtOldPrice'>".priceFormat($pastOrders[$i]['price'],true)."</span>");
				}
				
				$salePrice = salePrice($pastOrders[$i]['price'], $pastOrders[$i]['sale_price']);
				$view_prod->assign("TXT_SALE_PRICE", priceFormat($salePrice,false));
				$view_prod->assign("VAL_PRODUCT_ID", $pastOrders[$i]['productId']);
				$view_prod->assign("VAL_PRODUCT_NAME",validHTML($pastOrders[$i]['name']));
				$view_prod->parse("view_prod.prod_true.related_products.repeat_prods");			
			}
			$view_prod->assign("LANG_RELATED_PRODUCTS",$lang['viewProd']['related_products']);
			$view_prod->parse("view_prod.prod_true.related_products");
		}
	}
	$view_prod->parse("view_prod.prod_true");

} else {// end if product array is true
	$view_prod->assign("LANG_PRODUCT_EXPIRED",$lang['viewProd']['prod_not_found']);
	$view_prod->parse("view_prod.prod_false");
}

$view_prod->parse("view_prod");
$page_content = $view_prod->text("view_prod");
?>