Files
2017-03-02 20:30:40 -06:00

101 lines
3.7 KiB
PHP

<?php
/*
+--------------------------------------------------------------------------
| CubeCart 4
| ========================================
| CubeCart is a Trade Mark of Devellion Limited
| Copyright Devellion Limited 2006. All rights reserved.
| Devellion Limited,
| 5 Bridge Street,
| Bishops Stortford,
| HERTFORDSHIRE.
| CM23 2JU
| UNITED KINGDOM
| http://www.devellion.com
| UK Private Limited Company No. 5323904
| ========================================
| Web: http://www.cubecart.com
| Email: info (at) cubecart (dot) com
| License Type: CubeCart is NOT Open Source Software and Limitations Apply
| Licence Info: http://www.cubecart.com/site/faq/license.php
+--------------------------------------------------------------------------
| xml.php
| ========================================
| XML OUT
+--------------------------------------------------------------------------
*/
if (!isset($skipload)) {
require "ini.inc.php";
require "includes".CC_DS."global.inc.php";
require "classes".CC_DS."db".CC_DS."db.php";
$db = new db();
require "includes".CC_DS."functions.inc.php";
require "classes".CC_DS."cache".CC_DS."cache.php";
//require($glob['adminFolder'].CC_DS."includes".CC_DS."functions.inc.php");
$config = fetchDbConfig("config");
}
## Login check
if (!empty($_REQUEST['username']) && !empty($_REQUEST['password'])) {
$sql = sprintf("SELECT * FROM %sCubeCart_admin_users WHERE username = %s AND password = MD5(%s) AND isSuper = '1'", $glob['dbprefix'], $db->mySQLsafe($_REQUEST['username']), $db->mySQLsafe($_REQUEST['password']));
if ($db->numrows($sql) == 1) {
## Authorised
## Generate XML data
header('content-type: text/xml');
$xml[] = '<?xml version="1.0" encoding="utf-8"?>';
$xml[] = '<cubecart>';
$xml[] = '<apiversion>1</apiversion>';
## Get all recent/pending orders
$ordersql = sprintf("SELECT cart_order_id, prod_total, time FROM %sCubeCart_order_sum WHERE status = 1 ORDER BY time DESC", $glob['dbprefix']);
$xml[] = '<orders>';
$xml[] = sprintf('<ordercount>%d</ordercount>', $db->numrows($ordersql));
if ($db->numrows($ordersql) >= 1) {
$orders = $db->select($ordersql);
$xml[] = '<recentorders>';
foreach ($orders as $order) {
$xml[] = sprintf('<order><orderid>%s</orderid><value>%s</value></order>', $order['cart_order_id'], $order['prod_total']);
}
$xml[] = '</recentorders>';
}
$xml[] = '</orders>';
## Get all review alerts
$reviewsql = sprintf("SELECT time FROM %sCubeCart_reviews WHERE approved = '0'", $glob['dbprefix']);
$xml[] = '<reviews>';
$xml[] = sprintf('<reviewcount>%d</reviewcount>', $db->numrows($reviewsql));
$xml[] = '</reviews>';
## Get all stock warnings
if ($config['stock_warn_type'] == 1) {
$stocksql = sprintf("SELECT productId, stock_level FROM %sCubeCart_inventory WHERE useStockLevel = '1' AND stock_level < stockWarn ORDER BY stock_level ASC", $glob['dbprefix']);
} else {
if (!isset($config['stock_warn_level'])) $config['stock_warn_level'] = 5;
$stocksql = sprintf("SELECT productId, stock_level FROM %sCubeCart_inventory WHERE useStockLevel = 1 AND stock_level <= %d ORDER BY stock_level ASC", $glob['dbprefix'], $config['stock_warn_level']);
}
$xml[] = '<stockwarning>';
$xml[] = sprintf('<warningcount>%d</warningcount>', $db->numrows($stocksql));
if ($db->numrows($stocksql) >= 1) {
$stock = $db->select($stocksql);
foreach ($stock as $warning) {
//$xml[] = sprintf('<warning><product>%d</product><stocklevel>%d</stocklevel></warning>', $warning['productId'], $warning['stock_level']);
}
}
$xml[] = '</stockwarning>';
$xml[] = '</cubecart>';
echo implode("\n", $xml);
## All done :)
} else {
die('Access Denied');
}
} else {
die('Access Denied');
}
?>