<%@ LANGUAGE="VBSCRIPT" %>
<%  Option Explicit %>
<!-- #include file="inc/globals.asp" --><!-- #include file="inc/checkout.asp" -->
<%

checkStoreOpen()

if isCartBlank() then response.redirect "cartView.asp?rp=" & Request.QueryString("rp")


' *** Comment the following line to leave step 1 of checkout non-secure ***
' Requires "Enable SSL during customer checkout" to be enabled within Checkout Setup
setupSecurePage "", false
' ***                                                                   ***


Dim submitted
submitted = request.form("submitted")
if submitted <> "" then submitted = true

Dim enableCustomerLookup, enableVouchers, customerFound
Dim enableNewsletter, newsletter
Dim customerID, customerPassword, firstName, surname, company, street, suburb, stateID, state, stateName, other_state, postCode, countryID, countryName, phone, fax, email, website

'for go back button
Dim d_firstName, d_surname, d_company, d_street, d_suburb, d_state, d_stateFromOther, d_postCode, d_stateID, d_countryID, d_countryName, d_phone
Dim specialInstructions, updateCustomerDetails, paymentMethodID, voucherCode, dvoucherCode, eCartsessionID
Dim pmode, stateNotRequired

Dim lookupError, lookupUserFound
Dim orderinStock
Dim shippingMethodCount
Dim chargeFees, feeTotal
Dim taxID, taxrate, taxDescription, orderExTax, pricesIncTax
Dim statesExist, countriesExist
Dim countryJsCode
Dim shippingJsCode
Dim isCCOk, s_emailFromAddress, s_emailAddresses, pm_emailSent
pm_emailSent = false

Dim stateAutoLoad
stateAutoLoad = 0
d_stateID = 0
stateName = 0
customerFound = false

Dim noShippingMethods, interShipperFound
noShippingMethods = false
'check for intershipper shipping method, collect delivery location type if present
interShipperFound = isNumberValid(lookupItem("tblStore_Shipping","shippingID","shippingTypeID","8"))

Dim valid, errorMSG
valid = true

Dim orderTotal, subTotal, shippingTotal, shippingRequired
Dim countryMenuList
Dim checkOutURL
Dim enableSSL, sslDomain, minOrderLimit, maxOrderLimit


Set objConn = Server.CreateObject("ADODB.Connection")
objConn.Open dbConnectionStr

statesInDB()
countriesInDB()

stateNotRequired = returnStateNotRequired()

SQLQuery = "SELECT enableCustomerLookup, enableVouchers, enableNewsletter, enableSSL, sslDomain, minOrderLimit, maxOrderLimit FROM tblStore_Checkout;"
Set ds = objConn.Execute(SQLQuery)
If not ds.eof and not ds.bof then
  enableSSL = ds("enableSSL")
  sslDomain = ds("sslDomain")
  minOrderLimit = ds("minOrderLimit")
  maxOrderLimit = ds("maxOrderLimit")
  enableCustomerLookup = ds("enableCustomerLookup")
  enableNewsletter = ds("enableNewsletter")
  enableVouchers = ds("enableVouchers")
else
  enableSSL = false
  sslDomain = ""
  minOrderLimit = 0
  maxOrderLimit = 0
  enableCustomerLookup = true
  enableNewsletter = true
  enableVouchers = true
end if
ds.close
set ds = nothing

pmode = LCase(Trim(CStr(""&request.form("mode"))))

if pmode = "goback" then
  loadPostedDetails()
else
  if enableCustomerLookup AND (pmode = "lookup" OR isNumberValid(session("eCart_customerID"))) then lookupCustomer()
end if

if statesExist then countryJsCode = buildcountryJsCode()

objConn.close
set objConn = nothing

loadCartTotals false

if orderTotal > 0 AND orderTotal < minOrderLimit then
  errorMSG = "The minimum accepted order total is " & formatCurr(minOrderLimit, 2) & ", please adjust your order before continuing."
  valid = false
elseIf maxOrderLimit > 0 AND orderTotal > maxOrderLimit then
  errorMSG = "The maximum accepted order total is " & formatCurr(maxOrderLimit, 2) & ", please adjust your order before continuing."
  valid = false
end if

Dim paymentMethod, pmRequired
'are there more than 1 payment methods that are active?
Set ds = Server.CreateObject("ADODB.Recordset")
SQLQuery = "SELECT paymentMethodID FROM tblPaymentMethods WHERE online = " & prepBoolean("true") & ";"
ds.open SQLQuery,dbConnectionStr,3
if cLng(ds.recordCount) > 1 then
  'more than 1, show payment method table
  pmRequired = true
else
  'only one, use it
  pmRequired = false
  if not ds.EOF and not ds.BOF then
    paymentMethod = ds("paymentMethodID")
  end if
end if
ds.close
Set ds = Nothing

Sub loadPostedDetails()
  if dMode <> true then on error resume next

  firstName = request.form("firstName")
  surname = request.form("surname")
  company = request.form("company")
  street = request.form("street")
  suburb = request.form("suburb")
  state = request.form("state")
  other_state = request.form("state")
  postCode = request.form("postCode")
  countryID = request.form("countryID")
  phone = request.form("phone")
  fax = request.form("fax")
  email = request.form("email")
  website = request.form("website")
  customerPassword = request.form("customerPassword")
  newsletter = request.form("newsletter")
  d_firstName = request.form("d_firstName")
  d_surname = request.form("d_surname")
  d_company = request.form("d_company")
  d_street = request.form("d_street")
  d_suburb = request.form("d_suburb")
  d_state = request.form("d_state")
  d_stateFromOther = request.form("d_state")
  d_postCode = request.form("d_postCode")
  d_countryID = request.form("d_countryID")
  d_phone = request.form("d_phone")
  specialInstructions = request.form("specialInstructions")
  updateCustomerDetails = request.form("updateCustomerDetails")
  customerID = request.form("customerID")
  paymentMethod = request.form("paymentMethod")
  paymentMethodID = request.form("paymentMethodID")
  voucherCode = request.form("voucherCode")
  dvoucherCode = request.form("dvoucherCode")
  shippingRequired = request.form("shippingRequired")
  eCartsessionID = request.form("eCartsessionID")


End Sub


Function buildcountryJsCode()
  if dMode <> true then on error resume next
  ' build JavaScript code for country/state dropdown's
  Dim f_jsCode
  Dim f_currentCID
  f_currentCID = 0
  SQLQuery = "SELECT countryID, stateName, stateID FROM tblCountry_States ORDER BY countryID, stateName;"
  Set ds = objConn.Execute(SQLQuery)
  if not ds.EOF and not ds.BOF then
    i = 1
    do until ds.EOF
      if Not ds("countryID") = f_currentCID then
        f_currentCID = ds("countryID")
        if f_jsCode <> "" then
          f_jsCode = f_jsCode & "} else if (countryID == " & f_currentCID & ") {" & vbCr
        else
          f_jsCode = f_jsCode & "if (countryID == " & f_currentCID & ") {" & vbCr
        end if
        i = 1
      end if
      f_jsCode = f_jsCode & "  addOption(menuObject, '" & replace(ds("stateName"), "'", "\'") & "','" & ds("stateID") & "');" & vbCr

      if stateID = ds("stateID") then
        stateAutoLoad = i
      end if
      i = i + 1
      ds.MoveNext
    Loop
    f_jsCode = f_jsCode & "} else {" & vbCr
    f_jsCode = f_jsCode & "}" & vbCr
  end if
  ds.close
  Set ds = Nothing

  buildcountryJsCode = f_jsCode
End Function

Function buildRestrictionJsCode()
  if dMode <> true then on error resume next
  Dim jsCode, restrictionAllow
  Set objConn = Server.CreateObject("ADODB.Connection")
  objConn.Open dbConnectionStr

  SQLQuery = "SELECT restrictionAllow FROM tblStore_Checkout;"
  Set ds = objConn.Execute(SQLQuery)
  If not ds.eof and not ds.bof then
    restrictionAllow = ds("restrictionAllow")
  else
    restrictionAllow = false
  end if

  ds.close
  set ds = nothing

  SQlQuery = "SELECT countryID, stateID FROM tblRestrictions ORDER BY countryID, stateID ASC;"
  Set ds = objConn.Execute(SQLQuery)
  if not ds.EOF and not ds.BOF then
    if restrictionAllow = true then jsCode = "var destOK = false;" & vbcr
    do until ds.EOF and not ds.BOF
      if restrictionAllow = false then

        jsCode = jsCode & "  if (document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value == " & ds("countryID")
        if ds("stateID") > 0 then
          jsCode = jsCode & " && document.checkout.d_stateID[document.checkout.d_stateID.selectedIndex].value == " & ds("stateID")
        end if
        jsCode = jsCode & ") {"
        jsCode = jsCode & " alert('Unfortunately we are unable to deliver to that "
        if ds("stateID") > 0 then
          jsCode = jsCode & "state"
        else
          jsCode = jsCode & "country"
        end if
        jsCode = jsCode & ".'); return false;"
        jsCode = jsCode & "}" & vbCr

      else
        jsCode = jsCode & "  if (document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value == " & ds("countryID")
        if ds("stateID") > 0 then
          jsCode = jsCode & " && document.checkout.d_stateID[document.checkout.d_stateID.selectedIndex].value == " & ds("stateID")
        end if
        jsCode = jsCode & ") { destOK = true; }" & vbcr
      end if
      ds.MoveNext
    Loop
    if restrictionAllow = true then jsCode = jsCode & "  if (destOK == false) { alert('Unfortunately we are unable to deliver to that country.');return false; }" & vbcr
  end if

  ds.close
  objConn.close
  Set ds = Nothing
  Set objConn = Nothing

  buildRestrictionJsCode = jsCode
end function

Function returnDesc(thedescription)
  if dMode <> true then on error resume next
  if isNull(thedescription) then
    ReturnDesc = ""
    Exit Function
  end if

  If Cstr(thedescription) = "" then
    returnDesc = ""
  else
    returnDesc = " - " & replace(thedescription, "'", "\'")
  end if
end function

Function countryShippingCount(cID)
  if dMode <> true then on error resume next
  Dim csc_ds
  Set csc_ds = Server.CreateObject("ADODB.Recordset")
  SQLQuery = "SELECT Count(tblStore_Shipping.shippingID) AS CountOfshippingID FROM (tblStore_Shipping LEFT JOIN tblStore_ShippingCountries ON tblStore_Shipping.shippingID = tblStore_ShippingCountries.shippingID) LEFT JOIN tblCountry_States ON tblStore_ShippingCountries.stateID = tblCountry_States.stateID GROUP BY tblStore_ShippingCountries.countryID HAVING (((tblStore_ShippingCountries.countryID)=" & cID & "));"
  csc_ds.Open SQLQuery, dbConnectionStr, 3, 3
  m = csc_ds("countOfshippingID")
  csc_ds.close
  set csc_ds = nothing
  countryShippingCount = m
end function


Sub statesInDB()
  if dMode <> true then on error resume next
  if databaseType = 1 then
    SQLQuery = "SELECT TOP 1 stateID FROM tblCountry_States;"
  elseIf databaseType = 2 then
    SQLQuery = "SELECT TOP 1 stateID FROM tblCountry_States;"
  elseIf databaseType = 3 then
    SQLQuery = "SELECT stateID FROM tblCountry_States LIMIT 1;"
  end if
  Set ds = objConn.Execute(SQLQuery)
  If not ds.eof and not ds.bof then
    statesExist = true
  else
    statesExist = false
  end if
  ds.close
  set ds = nothing
end sub

Sub countriesInDB()
  if dMode <> true then on error resume next
  if databaseType = 1 then
    SQLQuery = "SELECT TOP 1 countryID FROM tblCountries;"
  elseIf databaseType = 2 then
    SQLQuery = "SELECT TOP 1 countryID FROM tblCountries;"
  elseIf databaseType = 3 then
    SQLQuery = "SELECT countryID FROM tblCountries LIMIT 1;"
  end if
  Set ds = objConn.Execute(SQLQuery)
  If not ds.eof and not ds.bof then
    countriesExist = true
  else
    countriesExist = false
  end if
  ds.close
  set ds = nothing
end sub

Sub displayPaymentMethods()
  if dMode <> true then on error resume next
  SQLQuery = "SELECT tblPaymentMethods.paymentMethodID, tblPaymentMethods.paymentMethodName, tblPaymentMethods.shortDescription, tblPaymentMethods.isDefault, tblPaymentMethods.isCC, tblPaymentMethods.acceptedCards FROM tblPaymentMethods WHERE tblPaymentMethods.online = " & prepBoolean("true") & ";"
  Set objConn = Server.CreateObject("ADODB.Connection")
  objConn.Open dbConnectionStr
  Set ds = objConn.Execute(SQLQuery)
End Sub

Sub loadStaffEmail()
  Dim ls_objConn,ls_ds,ls_SQLQuery
  ls_SQLQuery = "SELECT emailCustomerReceipt, receiptSubject, receiptFormat, receiptEmail, emailFromAddress, staffEmail1, staffEmail2, staffEmail3, ccStaff FROM tblStore_Email;"
  Set ls_objConn = Server.CreateObject("ADODB.Connection")
  ls_objConn.Open dbConnectionStr
  Set ls_ds = ls_objConn.Execute(ls_SQLQuery)
  If not ls_ds.eof and not ls_ds.bof then
    staffEmail1 = ls_ds("staffEmail1")
    staffEmail2 = ls_ds("staffEmail2")
    staffEmail3 = ls_ds("staffEmail3")
    s_emailFromAddress = ls_ds("emailFromAddress")
  end if
  ls_ds.close
  ls_objConn.close
  Set ls_ds = Nothing
  Set ls_objConn = Nothing
  s_emailAddresses = ""
  if isTextValid(staffEmail1) then s_emailAddresses = staffEmail1 & ";"
  if isTextValid(staffEmail2) then s_emailAddresses = s_emailAddresses & staffEmail2 & ";"
  if isTextValid(staffEmail3) then s_emailAddresses = s_emailAddresses & staffEmail3 & ";"
  if len(s_emailAddresses) > 0 then s_emailAddresses = left(s_emailAddresses, len(s_emailAddresses)-1)
End Sub

Function voucherInCart()
  'checks if a voucher exists in the customers cart
  if dMode <> true then on error resume next
  Dim vic_objConn, vic_ds, vic_SQLQuery

  voucherInCart = false

  Set vic_objConn = Server.CreateObject("ADODB.Connection")
  vic_objConn.Open dbConnectionStr
  vic_SQLQuery = "SELECT ID FROM tblCartSessions_Products WHERE sessionID='" & session("eCartsessionID") & "' AND productID = -50;"
  Set vic_ds = vic_objConn.Execute(vic_SQLQuery)

  if not vic_ds.EOF and not vic_ds.BOF then voucherInCart = true

  vic_ds.Close
  vic_objConn.Close
  Set vic_ds = Nothing
  Set vic_objConn = Nothing

End Function

Function getAcceptedCardsImages(ci_paymentMethodAcceptedCards)
  if dMode <> true then on error resume next

  Dim gaci_s
  gaci_s = ""

  if isTextValid(ci_paymentMethodAcceptedCards) = false then exit function

  Dim ci_accCards
  ci_accCards = split(ci_paymentMethodAcceptedCards,"||")

  c_SQLQuery = "SELECT cardName, cardLogo, cardID FROM tblStore_AcceptedCards WHERE cardOnline=" & prepBoolean("true") & ";"
  Set c_ds = objConn.Execute(c_SQLQuery)
  If not c_ds.eof and not c_ds.bof then
    do until c_ds.eof
      for i = 0 to ubound(ci_accCards)
        if lcase(cstr(""&ci_accCards(i))) = lcase(cstr(""&c_ds("cardID"))) then
          if isTextValid(c_ds("cardLogo")) then
            gaci_s = gaci_s & "<img src=""img/cardLogos/" & c_ds("cardLogo") & """ alt=""" & c_ds("cardName") & """ border=""0"">"
          else
            gaci_s = gaci_s & "<img src=""img/cardLogos/blank.gif"" alt=""" & c_ds("cardName") & """ border=""0"">"
          end if
          gaci_s = gaci_s & "&nbsp;"
        end if
      next

      c_ds.moveNext
    loop
  end if
  c_ds.close
  set c_ds = nothing

  getAcceptedCardsImages = left(gaci_s, len(gaci_s)-6)

end Function

%><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
        "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<html>
<head>
<title><% =session("storePageTitle") %></title>
<!-- eCart Professional shopping cart V2.0.14 - http://www.uniwinSoftware.com/ -->
<meta http-equiv="Expires" CONTENT="0">
<meta http-equiv="Cache-Control" CONTENT="no-cache">
<meta http-equiv="Pragma" CONTENT="no-cache">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<!-- #include file="inc/meta.asp" -->
<link rel="stylesheet" href="inc/<%=getStylesheet()%>" type="text/css">
<script language="JavaScript">
<!--

function checkBlank() {
  for (var i = 0; i < arguments.length; i += 2) {
    if (!arguments[i].value) {
      alert("Please enter " + arguments[i+1] + ".");
      arguments[i].focus();
      return false;
    }
  }
  return true;
}

function checkRestrictions() {
<% =buildRestrictionJsCode() %>
  return true;
}

function checkSubmit() {
  var checkResult = true;
  var validChar = "1234567890 -+()";

  checkResult = checkBlank(document.checkout.firstName, 'your name', document.checkout.surname, 'your surname', document.checkout.street, 'your street and number', document.checkout.suburb, 'your town or suburb');
  if (checkResult == false) { return false; }

<% if countriesExist = True then %>
  if (document.checkout.countryID[document.checkout.countryID.selectedIndex].value == "0") {
    alert("Please select your country.");
    document.checkout.countryID.focus();
    return false;
  }
<% else %>
  checkResult = checkBlank(document.checkout.countryID, 'your country');
  if (checkResult == false) { return false; }
<% end if %>

<% if statesExist = True and stateNotRequired = False then %>
  if (document.checkout.stateID[document.checkout.stateID.selectedIndex].value == "0" && document.checkout.other_state.value == "") {
    alert("Please select or enter your state.");
    document.checkout.stateID.focus();
    return false;
  }
<% elseIf statesExist = False and stateNotRequired = False then %>
  checkResult = checkBlank(document.checkout.countryID, 'your country');
  if (checkResult == false) { return false; }
<% end if %>

  checkResult = checkBlank(document.checkout.postCode, 'your post code', document.checkout.phone, 'your phone number', document.checkout.email, 'your email address'<% if enableCustomerLookup = true then %>,document.checkout.customerPassword, 'a password'<% end if %>)
  if (checkResult == false) { return false; }
<% if enableCustomerLookup = true then %>
  if (document.checkout.customerPassword.value.length<4 && document.checkout.customerPassword.value!='*!*^*$') {
    alert("Your password must be at least 4 characters in length.");
    return false;
  }
<% end if %>
  if (isValid(document.checkout.phone.value, validChar)==false) {
    alert("Please enter a valid contact phone number.");
    document.checkout.phone.focus();
    return false;
  }

  // email ADDRESS
  var atFound = -1;
  var dotFound = -1;
  var charFound = false;
  var checkStr;
  var splitString

  checkStr = document.checkout.email.value;

  splitString = checkStr.split("");
  for (var i = 0; i < checkStr.length+1; i++) {
    if (splitString[i] == "\"" | splitString[i] == "'") {
      alert("Your email address appears invalid.");
      document.checkout.email.focus();
      return false;
    }
    if (splitString[i] < " " | splitString[i] > " ") { charFound = true; }
    if (splitString[i] == "@") { atFound = i; }
    if (splitString[i] == ".") { dotFound = i; }
  }
  if (charFound == true) {
    if (atFound > -1) {
      if (dotFound > -1) {
        if (dotFound < atFound) {
          alert("Your email address appears invalid.");
          document.checkout.email.focus();
          return false;
        } else {
		  if ((dotFound-atFound) == 1 | dotFound == (checkStr.length-1) | atFound == 0) {
            alert("Your email address appears invalid.");
            document.checkout.email.focus();
            return false;
          }
        }
      } else {
        alert("Your email address appears invalid.");
        document.checkout.email.focus();
        return false;
      }
    } else {
      alert("Your email address appears invalid.");
      document.checkout.email.focus();
      return false;
    }
  }


<% if shippingRequired = true AND noShippingMethods = false then %>
  checkResult = checkBlank(document.checkout.d_firstName, 'the shipping recipient\'s name', document.checkout.d_surname, 'the shipping recipient\'s surname', document.checkout.d_street, 'the shipping recipient\'s street', document.checkout.d_suburb, 'the shipping recipient\'s suburb');
	if (checkResult == false) { return false; }

<% if countriesExist = True then %>
  if (document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value == "0")	{
    alert("Please select the shipping recipient\'s country.");
    document.checkout.d_countryID.focus();
    return false;
  }
<% else %>
  checkResult = checkBlank(document.checkout.d_countryID, 'the shipping country');
  if (checkResult == false) { return false; }
<% end if %>

<% if statesExist = True and stateNotRequired = False then %>
  if (document.checkout.d_stateID[document.checkout.d_stateID.selectedIndex].value == "0" && document.checkout.d_other_state.value == "")	{
    alert("Please select or enter the shipping recipient\'s state.");
    document.checkout.d_stateID.focus();
    return false;
  }
<% elseIf statesExist = False and stateNotRequired = False then %>
  checkResult = checkBlank(document.checkout.countryID, 'your country');
  if (checkResult == false) { return false; }
<% end if %>


  checkResult = checkBlank(document.checkout.d_postCode, 'the shipping recipient\'s postCode', document.checkout.d_phone, 'a valid delivery contact phone number');
  if (checkResult == false) { return false; }

  var isOK = checkRestrictions();
  if (!isOK) { return false; };

<% end if
if pmRequired = true then %>
  return checkMultipleRadio(document.checkout.paymentMethodID);
<% end if %>
  return true;
}

function isValid(string,allowed) {
  for (var i=0; i< string.length; i++) {
    if (allowed.indexOf(string.charAt(i)) == -1)
      return false;
    }
  return true;
}

function clearCP() {
  if (document.checkout.customerPassword.value == '*!*^*$') {
    document.checkout.customerPassword.value = '';
  }
}

function addOption(formElement, optiontext, optionValue) {
  var optionName = new Option(optiontext, optionValue, false, false)
  var length = formElement.length;
  formElement.options[length] = optionName;
}

<% if shippingRequired = true and noShippingMethods = false then %>
function copyContactDetails() {
  document.checkout.d_firstName.value = document.checkout.firstName.value;
  document.checkout.d_surname.value = document.checkout.surname.value;
  document.checkout.d_company.value = document.checkout.company.value;
  document.checkout.d_street.value = document.checkout.street.value;
  document.checkout.d_suburb.value = document.checkout.suburb.value;
  <% if countriesExist then %>
  document.checkout.d_countryID.selectedIndex = document.checkout.countryID.selectedIndex;<%
  else
  %>document.checkout.d_countryID.value = document.checkout.countryID.value;<%
  end if %>
  document.checkout.d_other_state.value = document.checkout.other_state.value;
  document.checkout.d_postCode.value = document.checkout.postCode.value;
  document.checkout.d_phone.value = document.checkout.phone.value;
  <% if statesExist then %>fillstates(document.checkout.d_stateID, document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value, 1);
  document.checkout.d_stateID.selectedIndex = document.checkout.stateID.selectedIndex;
  setTimeout('selstateD(' + document.checkout.d_stateID.selectedIndex + ')', 250);
  <% end if %>
}
<% end if %>

<% if statesExist then %>
function fillstates(menuObject, countryID, updateShipping) {
  var i;
  for (i = menuObject.options.length; i >= 0; i--) {
    menuObject.options[i] = null;
  }
  addOption(menuObject, '(Select a state)','0');
  <%=countryJsCode%>
  if (menuObject.options.length == 1) {
    for (i = menuObject.options.length; i >= 0; i--) {
      menuObject.options[i] = null;
    }
    addOption(menuObject, '(No states listed)','0');
    //selstate(menuObject, menuObject.selectedIndex); '180202
  }
}

function selstate() {
  document.checkout.stateID.selectedIndex=<% =stateAutoLoad %>;
}
function selstateD(sVal) {
  document.checkout.d_stateID.selectedIndex=sVal;
}
<% end if %>

function checkMultipleRadio(rb) {
  for (var i=0;i<rb.length;i++) {
    if (rb[i].checked == true) {
      return true;
    }
  }
  alert('Please select a payment method.');
  return false;
}
// -->
</script>
</head>
<body leftmargin="0" rightmargin="0" topmargin="0" marginwidth="0" marginheight="0" class="bgColour"<% if statesExist AND valid = true then %> onLoad="fillstates(document.checkout.stateID,document.checkout.countryID[document.checkout.countryID.selectedIndex].value, 0)<% if shippingRequired = true AND noShippingMethods = false AND valid = true then %>;fillstates(document.checkout.d_stateID, document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value, 1)<% end if %><% if stateAutoLoad > 0 then send ";setTimeout('selstate()', 250)" %>"<% elseIf countriesExist=true AND shippingRequired=true AND noShippingMethods=false AND valid=true then %> onLoad="fillShipping(document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value, 0);"<% end if %>>

<a name="top"></a>
<!-- Header Start -->
<!--#include file="inc/header.inc" -->
<!-- Header End -->
<table width="100%" border="0" cellspacing="0" cellpadding="5">
<tr>
<td align="left" valign="top" width="160" class="categoryBackground"><!--#include file="inc/leftColumn.inc" --></td>
<td align="left" valign=top width="95%">
<!-- Main content area -->


<span class="heading">Checkout - Step 1 of 4</span>
<br>
<% if valid <> true then %>
<br>
<span class="checkoutBodyTextError"><% =errorMSG %></span>
<% else %>
<br><span class="bodyTextError">Fields marked * are required.</span>
<% if enableCustomerLookup=true AND lookupUserFound <> true AND session("lookupCount") < 3 then %>
<form method=post name="returnVisitor" action="cartCheckout.asp" autocomplete="off">
<table width="450" border="0" cellspacing="0" cellpadding="0" class="checkoutTable">
<tr>
<td>
<table width="100%" cellpadding="5" cellspacing="1" border="0">
<tr align="left">
<td colspan="2" class="checkoutHeadingRow"><span class="checkoutBodyTextBold"><img src="img/dot_box.gif" width="9" height="9" hspace="2"> Existing Customer</span></td>
</tr>
<tr align="left">
<td class="checkoutRow1" colspan="2"><span class="checkoutBodyText">If you are an existing customer please enter your email address and password below and click 'Lookup' to automatically load your details. Lost or forgotten passwords may be <a href="account.asp">recovered here.</a></span>
<% if lookupError <> "" then %>
<br>
<span class="checkoutBodyTextError"><% =lookupError %></span>
<% end if %>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Email:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="email" value="<% =email %>" maxlength="60" class="checkoutBodyText">

</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Password:</span></td>
<td class="checkoutRow1" align="left">
<input type="password" name="customerPassword" value="" maxlength=15 class="checkoutBodyText">

</td>
</tr>
<tr align="left">
<td class="checkoutRow2" colspan="2">
<input type="submit" name="lookup" value="  Lookup  ">
<input type="hidden" name="mode" value="lookup">
</td>
</tr>
</table>
</td>
</tr>
</table>
</form>
<% end if %>
<form method="post" action="cartCheckout2.asp" name="checkout" onSubmit="return checkSubmit()" autocomplete="off">
<table width="450" border="0" cellspacing="0" cellpadding="0" class="checkoutTable">
<tr>
<td>
<table width="100%" cellpadding="5" cellspacing="1" border="0">
<tr align="left">
<td colspan="2" class="checkoutHeadingRow"><span class="checkoutBodyTextBold"><img src="img/dot_box.gif" width="9" height="9" hspace="2"> Contact Information</span></td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Name:<br>
(First/Last)</span>
</td>
<td valign="top" class="checkoutRow1" align="left">
<input type="text" name="firstName" value="<% =firstName %>" maxlength="50" size="20" class="checkoutBodyText"><span class="bodyTextError">*</span>
<input type="text" name="surname" value="<% =surname %>" maxlength="50" size="20" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Company:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="company" value="<% =company %>" maxlength=50 class="checkoutBodyText">
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Street:</span></td>
<td class="checkoutRow1" align="left">
<input type="text" name="street" value ="<% =street %>" maxlength="100" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Town/suburb:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="suburb" value ="<% =suburb %>" maxlength="50" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Country:</span></td>
<td class="checkoutRow1" align="left">
<% if countriesExist then %>
<select name="countryID" width="200" style="width: 200px" onChange="fillstates(document.checkout.stateID,document.checkout.countryID[document.checkout.countryID.selectedIndex].value, 0)">
<%=buildcountryPullDown(countryID)%>
</select><span class="bodyTextError">*</span>
<% else %>
<input type="text" name="countryID" maxlength="50" value="<% =countryID %>"><span class="bodyTextError">*</span>
<% end if %>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">State:</span></td>
<td class="checkoutRow2" align="left">
<% if statesExist = true then %>
<select name="stateID" width="200" style="width: 200px">
<option value="0">(Select a country)</option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
</select><% if stateNotRequired = False then %><span class="bodyTextError">*</span><% end if %>
<br>
<span class="checkoutBodyText">Other state:</span>
<% end if %>
<input type="text" name="other_state" maxlength="50" value="<% =other_state %>" class="checkoutBodyText">
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Postcode:</span></td>
<td class="checkoutRow1" align="left">
<input type="text" name="postCode" value ="<% =postCode %>" maxlength="15" size="10" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<% if interShipperFound = true then %>

<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Location type:</span></td>
<td class="checkoutRow2" align="left">
<select name="shipping_locationType">
<option value="RES" selected>Residential</option>
<option value="COM">Commercial</option>
</select><span class="bodyTextError">*</span>
</td>
</tr>

<% end if %>
<tr>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left"><span class="checkoutBodyText">Contact phone:</span></td>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left">
<input type="text" name="phone" value ="<% =phone %>" maxlength="50" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow<% if interShipperFound = true then %>2<% else %>1<% end if %>" align="left"><span class="checkoutBodyText">Fax:</span></td>
<td class="checkoutRow<% if interShipperFound = true then %>2<% else %>1<% end if %>" align="left"><input name="fax" type="text" class="checkoutBodyText" value ="<% =fax %>" maxlength="50"></td>
</tr>
<tr>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left"><span class="checkoutBodyText">Email:</span></td>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left">
<input type="text" name="email" value ="<% =email %>" maxlength="128" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow<% if interShipperFound = true then %>2<% else %>1<% end if %>" align="left" valign=top><span class="checkoutBodyText">Website:</span></td>
<td class="checkoutRow<% if interShipperFound = true then %>2<% else %>1<% end if %>" align="left"><input name="website" type="text" class="checkoutBodyText" value ="<% =website %>" maxlength="128"></td>
</tr>
<% if enableCustomerLookup then %>
<tr>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left" valign=top><span class="checkoutBodyText">Password:</span></td>
<td class="checkoutRow<% if interShipperFound = true then %>1<% else %>2<% end if %>" align="left"><input type="password" name="customerPassword" value ="<% =customerPassword %>" maxlength="15" class="checkoutBodyText" onFocus="clearCP()"><span class="bodyTextError">*</span>
<br>
<span class="bodyTextSmall">This password allows you to log in to the account section to track your order(s) status.</span>
</td>
</tr>
<% end if %>
<% if enableNewsletter then %>
<tr>
<td class="checkoutRow<% if (enableCustomerLookup = true and interShipperFound = true) or (enableCustomerLookup = false and interShipperFound = false) then %>2<% else %>1<% end if %>" align="left"><span class="checkoutBodyText">Newsletter:</span></td>
<td class="checkoutRow<% if (enableCustomerLookup = true and interShipperFound = true) or (enableCustomerLookup = false and interShipperFound = false) then %>2<% else %>1<% end if %>" align="left">
<input type="checkbox" name="newsletter" value="true"<% if newsletter = true then %> checked<% end if %>>
<span class="bodyTextSmall">Please send me further information in the future.</span>
</td>
</tr>
<% end if %>
</table>
</td>
</tr>
</table>

<% if shippingRequired = true AND noShippingMethods = false then %>
<br><a name="shipping"></a>
<table width="450" border="0" cellspacing="0" cellpadding="0" class="checkoutTable">
<tr>
<td>
<table width="100%" cellpadding="5" cellspacing="1" border="0">
<tr align="left">
<td colspan="2" class="checkoutHeadingRow"><span class="checkoutBodyTextBold"><img src="img/dot_box.gif" width="9" height="9" hspace="2"> Shipping Details</span>
</td>
</tr>
<tr align="left">
<td class="checkoutRow2" colspan="2"><span class="checkoutBodyText"><a href="#shipping" onClick="copyContactDetails()">Set my shipping details</a> to the same as my contact details</span>
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Recipient's  Name:<br>
(First/Last)</span>
</td>
<td valign="top" class="checkoutRow1" align="left">
<input type="text" name="d_firstName" value="<%=d_firstName%>" maxlength="50" size="20" class="checkoutBodyText">
<input type="text" name="d_surname" value="<%=d_surname%>" maxlength="50" size="20" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Company:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="d_company" value="<%=d_company%>" maxlength=50 class="checkoutBodyText">
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Street:</span></td>
<td class="checkoutRow1" align="left">
<input type="text" name="d_street" value ="<%=d_street%>" maxlength="100" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Town/suburb:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="d_suburb" value ="<%=d_suburb%>" maxlength="50" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Country:</span></td>
<td class="checkoutRow1" align="left">
<% if countriesExist then %><select name="d_countryID" width="200" size="1" onChange="fillstates(document.checkout.d_stateID, document.checkout.d_countryID[document.checkout.d_countryID.selectedIndex].value, 1);" style="width: 200px">
<% =buildcountryPullDown("") %>
</select><span class="bodyTextError">*</span><% else %>
<input type="text" name="d_countryID" maxlength="50"><span class="bodyTextError">*</span>
<% end if %>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">State:</span></td>
<td class="checkoutRow2" align="left">
<% if statesExist = true then %>
<select name="d_stateID" width="200" style="width: 200px">
<option value="0">(Select a country)</option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
<option></option>
</select><% if stateNotRequired = False then %><span class="bodyTextError">*</span><% end if %>
<br>
<span class="checkoutBodyText">Other state:</span>
<% end if %>
<input type="text" name="d_other_state" maxlength="50" class="checkoutBodyText" value="<%=d_stateFromOther%>">
</td>
</tr>
<tr>
<td class="checkoutRow1" align="left"><span class="checkoutBodyText">Postcode:</span></td>
<td class="checkoutRow1" align="left">
<input type="text" name="d_postCode" value ="<%=d_postCode%>" maxlength="15" size="10" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Contact phone:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="d_phone" value ="<%=d_phone%>" maxlength="50" class="checkoutBodyText"><span class="bodyTextError">*</span>
</td>
</tr>

<tr>
<td class="checkoutRow2" align="left" valign="top"><span class="checkoutBodyText">Special instructions:</span></td>
<td class="checkoutRow2" align="left">
<textarea name="specialInstructions" style="width: 250px; height: 100px" rows="6" cols="20"><%=specialInstructions%></textarea>
</td></tr></table>
</td></tr></table>
<% end if %>

<% if pmRequired = true then %>
<br>
<table width="450" border="0" cellspacing="0" cellpadding="0" class="checkoutTable">
<tr>
<td>
<table width="100%" cellpadding="5" cellspacing="1" border="0">
<tr align="left">
<td colspan="2" class="checkoutHeadingRow"><span class="checkoutBodyTextBold"><img src="img/dot_box.gif" width="9" height="9" hspace="2"> Payment method</span>
</td>
</tr>
<% if orderTotal > 0 then
displayPaymentMethods()
if not ds.EOF and not ds.BOF then
  isCCOk = isNumberValid(lookupItem("tblStore_AcceptedCards","cardID","cardOnline",prepBoolean("true")))

  k = 0
  do until ds.EOF
    if not isCCOk and ds("isCC") and not pm_emailSent = true then
      'notify the merchant by email
      loadStaffEmail()
      sendEmail s_emailFromAddress, s_emailAddresses, "", "", "eCart - Payment Method Error", "=======================================================" & vbCr & "AUTOMATICALLY GENERATED EMAIL" & vbCr & "=======================================================" & vbCr & "Uniwin eCart Professional" & vbCr & vbCr & "At least one Credit Card type payment method exists, however there are no accepted cards set in the eCart Administration system." & vbCr & vbCr & "Please set at least one card to ""Online"" in the Checkout setup > Cards section of the eCart administration system for the payment method(s) to become available." & vbCr & "=======================================================", 2
      pm_emailSent = true
    end if

    k = k + 1
    if k > 2 then k = 1

    %><tr align="left"><td colspan="2" class="checkoutRow<% =k %>">
    <table border="0" width="100%" cellspacing="0" cellpadding="0">
    <tr><td width="10%" valign=top align=middle><input type="radio" name="paymentMethodID" value="<% =ds("paymentMethodID") %>"<%

    if pmode = "goback" and Trim(CStr(""&paymentMethodID)) = Trim(CStr(""&ds("paymentMethodID"))) then
      %> checked<%
    else
      if ds("isDefault")=true then send " checked"
    end if
    if ds("isCC") and not isCCOk then
      %> disabled<%
    end if

    %>></td><td class="checkoutBodyText" width="90%"><% =ds("paymentMethodName") %><br><span class="checkoutBodyTextSmall"><%=ds("shortDescription")%><%
    if ds("isCC") then
      %><br><br><%
      if isCCOk then
        %><%=getAcceptedCardsImages(ds("acceptedCards"))%><%
      else
        %><span class="bodyTextError">Temporarily unavailable</span><%
      end if
     end if
     %></span></td></tr></table></td></tr><%

    ds.MoveNext
  Loop
end if
ds.close
objConn.close
Set ds = Nothing
Set objConn = Nothing
end if %>
</table>
</td>
</tr>
</table>
<% else %>
<input type="hidden" name="paymentMethodID" value="<%=paymentMethod%>">
<% end if %>
<% if enableVouchers = true AND voucherInCart() = false then 'disable vouchers if customer purchasing a voucher %>
<br>
<table width="450" border="0" cellspacing="0" cellpadding="0" class="checkoutTable">
<tr>
<td>
<table width="100%" cellpadding="5" cellspacing="1" border="0">
<tr align="left">
<td colspan="2" class="checkoutHeadingRow"><span class="checkoutBodyTextBold"><img src="img/dot_box.gif" width="9" height="9" hspace="2"> Gift Voucher / Discount Voucher</span></td>
</tr>
<tr align="left">
<td class="checkoutRow1" colspan="2"><span class="checkoutBodyText">If you have a gift or discount voucher please enter your Voucher Code in the space below.</span>
</td>
</tr>
<tr>
<td class="checkoutRow2" align="left"><span class="checkoutBodyText">Voucher Code:</span></td>
<td class="checkoutRow2" align="left">
<input type="text" name="voucherCode" value="<%=voucherCode%>" maxlength=50 class="checkoutBodyText">
</td>
</tr>
</table>
</td>
</tr>
</table>
<% end if %>
<%
SQLQuery = "SELECT feeName, amount FROM tblGenericFees;"
Set ds = Server.CreateObject("ADODB.Recordset")
ds.Open SQLQuery,dbConnectionStr,3

if not ds.EOF and not ds.BOF then
  %><span class="bodyTextSmall"><br><%
  if ds.RecordCount > 1 then
    %>Note: All orders attract the following fees:<br><%
    do until ds.EOF
      %>-&nbsp;<%=formatCurr(ds("amount"),2)%>&nbsp;-&nbsp;<%=ds("feeName")%><br><%
      ds.MoveNext
    loop
  else
    %>Note: All orders attract <%=formatCurr(ds("amount"),2)%> for <%=ds("feeName")%><br><%
  end if
  %></span><%
end if
ds.Close
Set ds = Nothing
%>
<% if customerFound = true then %>
<br><span class="checkoutBodyTextBold">Customer details</span><br>
<input type="checkbox" name="updateCustomerDetails" value="true" checked><span class="checkoutBodyText">Update my contact details if changes have been made.</span><br>
<% end if %>

<br>
<input type="submit" name="go" value="  Proceed  ">
<input type=hidden name="shippingRequired" value="<% =shippingRequired %>">
<input type=hidden name="eCartsessionID" value="<% =session("eCartsessionID") %>">
<input type=hidden name="customerID" value="<% =customerID %>">
</form>
<% end if %>
<!-- End content -->
</td></tr></table>
<!-- Footer -->
<!--#include file="inc/footer.inc" -->
<!-- Footer End -->
<% ' ERROR REPORTING - DON'T REMOVE!
if dMode <> true AND err.number <> 0 then
  reportError err.number, err.description, err.source, ""
end if %>
</body></html>