1. <?
  2. include_once("configure.php");
  3. include_once("check_msg_function.php");
  4. include_once "language.php";
  5. function RTESafe($strText) {
  6. //returns safe code for preloading in the RTE
  7. $tmpString = trim($strText);
  9. //convert all types of single quotes
  10. $tmpString = str_replace(chr(145), chr(39), $tmpString);
  11. $tmpString = str_replace(chr(146), chr(39), $tmpString);
  12. $tmpString = str_replace("'", "&#39;", $tmpString);
  14. //convert all types of double quotes
  15. $tmpString = str_replace(chr(147), chr(34), $tmpString);
  16. $tmpString = str_replace(chr(148), chr(34), $tmpString);
  17. // $tmpString = str_replace("\"", "\"", $tmpString);
  19. //replace carriage returns & line feeds
  20. $tmpString = str_replace(chr(10), " ", $tmpString);
  21. $tmpString = str_replace(chr(13), " ", $tmpString);
  23. return $tmpString;
  24. }
  27. $errcnt=0;
  28. if(count($_POST)<>0) //IF SOME FORM WAS POSTED DO VALIDATION
  29. {
  30. /////////---getting config---------
  31. $esq_con='select * from esb2b_config where es_id=1';
  32. $esrow_con=mysql_fetch_array(mysql_query($esq_con));
  34. $esq_gro='select * from esb2b_groups where es_memtype='.$_SESSION["esb2b_memtype"];
  35. $esrow_gro=mysql_fetch_array(mysql_query($esq_gro));
  37. /////////--------------getting information bout user's privious postings
  38. $esq_off="select * from esb2b_offers_buy where es_uid=".$_SESSION["esb2b_userid"];
  39. $esbuy_count=mysql_num_rows(mysql_query($esq_off));
  40. //////////////////////////////////---------------------------
  42. if( $esbuy_count >= $esrow_gro["es_buy_cnt"] )
  43. {
  44. echo "dhdhhdhhdhd";
  45. ?><script language="javascript" type="text/javascript">
  46. location.href="<?=$domain_url?>/gen_confirm_mem.html?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=<?=urlencode(" $Sorry_some_error_occurred_and_unable_to_post_buy_offer;")?>">
  47. </script>
  48. <?
  49. // header("Location: gen_confirm_mem.php?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=".urlencode("<? echo $Sorry_some_error_occurred_and_unable_to_post_buy_offer;"));
  50. //die();
  51. }
  52. ////////////////////--------------------
  54. $es_cat_list=str_replace(";",",",$_REQUEST["category"]);
  55. $cid_list=str_replace(";",",",$_REQUEST["cid"]);
  57. $cat=explode(",",$cid_list);
  58. // $cat_name=explode(",",$_REQUEST["category"]);
  60. $es_title=$_REQUEST["es_title"];
  61. $es_description=$_REQUEST["es_description"];
  62. $es_quantity=$_REQUEST["es_quantity"];
  63. $es_keywords=$_REQUEST["es_keywords"];
  64. $key=explode(",",$es_keywords);
  66. $es_price_cur_id=$_REQUEST["es_price_cur_id"];
  67. $es_price=$_REQUEST["es_price"];
  69. if( $cid_list == '' )
  70. {
  71. $errs[$errcnt]="$Atleast_one_Category_must_be_provided";
  72. $errcnt++;
  73. }
  74. elseif(count($cat) > $esrow_gro["es_cat_cnt"])
  75. {
  76. $errs[$errcnt]="$Too_many_Categories_provided";
  77. $errcnt++;
  78. }
  81. if ( strlen(trim($es_title)) == 0 )
  82. {
  83. $errs[$errcnt]="$Title_must_be_provided";
  84. $errcnt++;
  85. }
  86. elseif(preg_match ("/[<>&]/", $es_title))
  87. {
  88. $errs[$errcnt]="$Title_can_not_have_any_special_character";
  89. $errcnt++;
  90. }
  92. if ( strlen(trim($es_description)) == 0 )
  93. {
  94. $errs[$errcnt]="$Description_Must_be_provided";
  95. $errcnt++;
  96. }
  97. elseif ( strlen(strip_tags($es_description)) > $esrow_con['es_description_length'] )
  98. {
  99. $errs[$errcnt]="$Description_length_must_not_exceed ".$esrow_con['es_description_length']." $characters";
  100. $errcnt++;
  101. }
  102. elseif( $esrow_con["es_approval_type_offer"] == 'auto')
  103. {
  104. if ( check_msg($es_description,0) == 'yes' )
  105. {
  106. $errs[$errcnt]="$Description_must_not_contain_bad_words";
  107. $errcnt++;
  108. }
  109. }
  111. if ( !is_numeric($es_quantity) || ($es_quantity <= 0) )
  112. {
  113. $errs[$errcnt]="$Quantity_must_be_non_zero_positive_integer";
  114. $errcnt++;
  115. }
  117. if ( strlen(trim($es_keywords)) == 0 )
  118. {
  119. $errs[$errcnt]="$Keywords_must_be_provided";
  120. $errcnt++;
  121. }
  122. elseif(preg_match ("/[<>&]/", $es_keywords))
  123. {
  124. $errs[$errcnt]="$Keywords_can_not_have_any_special_character";
  125. $errcnt++;
  126. }
  127. elseif(count($key) > $esrow_gro["es_keyword_cnt"])
  128. {
  129. $errs[$errcnt]="$Too_many_keywords_provided";
  130. $errcnt++;
  131. }
  133. if ( !is_numeric($es_price_cur_id) || ($es_price_cur_id == 0) )
  134. {
  135. $errs[$errcnt]="$Price_currency_must_be_selected";
  136. $errcnt++;
  137. }
  139. if ( !is_numeric($es_price) || ($es_price <= 0) )
  140. {
  141. $errs[$errcnt]="$Price_must_be_non_zero_positive_number";
  142. $errcnt++;
  143. }
  146. if($errcnt==0)
  147. {
  148. if(!get_magic_quotes_gpc())
  149. {
  150. $es_title=str_replace("$","\$",addslashes($es_title));
  151. $es_description=str_replace("$","\$",addslashes($es_description));
  152. $es_quantity=str_replace("$","\$",addslashes($es_quantity));
  153. $es_keywords=str_replace("$","\$",addslashes($es_keywords));
  154. $logo=str_replace("$","\$",addslashes($logo));
  155. }
  156. else
  157. {
  158. $es_offer_type=str_replace("$","\$",$es_offer_type);
  159. $es_title=str_replace("$","\$",$es_title);
  160. $es_description=str_replace("$","\$",$es_description);
  161. $es_quantity=str_replace("$","\$",$es_quantity);
  162. $es_keywords=str_replace("$","\$",$es_keywords);
  163. $logo=str_replace("$","\$",$logo);
  164. }
  165. $es_price_cur_id=(int)$es_price_cur_id;
  166. $es_price=$es_price;
  168. $es_postedon=date("YmdHis",time());
  169. $es_approved='yes';
  170. $es_uid=$_SESSION["esb2b_userid"];
  171. // $es_expireson=;
  172. // $esq_con='select * from esb2b_config where es_id=1';
  173. // $esrow_con=mysql_fetch_array(mysql_query($esq_con));
  174. if($esrow_con['es_approval_type_offer']=='auto')
  175. {
  176. $es_new='no';
  177. $es_approved='yes';
  178. $es_msg="$Your_buy_offer_has_been_posted_successfully";
  179. }
  180. else
  181. {
  182. $es_new='yes';
  183. $es_approved='no';
  184. $es_msg="$Your_buy_offer_has_been_sent_for_admin_approval";
  185. }
  187. $esqi_off="Insert into `esb2b_offers_buy` (es_uid, es_title, es_description, es_quantity, es_postedon, es_keywords, es_price_cur_id, es_price, es_approved, es_new) values ($es_uid, '$es_title', '$es_description', $es_quantity, $es_postedon, '$es_keywords', $es_price_cur_id, $es_price, '$es_approved', '$es_new')";
  188. // die($esqi_off);
  189. mysql_query($esqi_off);
  191. if(!$logo=="")
  192. {
  193. $img_url=(string)$logo;
  194. $esqi_off_img="Insert into `esb2b_offer_buy_images`(es_offer_id, es_img_url) values ($es_offer_id, '$img_url')";
  195. mysql_query($esqi_off_img);
  197. }
  198. if(mysql_affected_rows()>0)
  199. {
  200. ///-adding to categories
  201. $esq_off="select max(es_id) as max_id from esb2b_offers_buy where 1";
  202. $esrow_off=mysql_fetch_array(mysql_query($esq_off));
  203. $es_offer_id=$esrow_off["max_id"];
  204. foreach($cat as $es_value)
  205. {
  206. $esq_off_cat="select * from esb2b_offer_cats_buy where es_offer_id=$es_offer_id and es_cid=$es_value";
  207. //echo $esq_off_cat;
  208. // $esrs_off_cat=
  209. if( mysql_num_rows(mysql_query($esq_off_cat)) > 0 )
  210. continue; //skips if record already exists
  211. $esqi_off_cat="insert into esb2b_offer_cats_buy (es_offer_id, es_cid) values ($es_offer_id, $es_value)";
  212. mysql_query($esqi_off_cat);
  213. ///////////////////////////////////////////////////--------------------------
  214. ////////////////////////////////////-----------------------------------------
  216. ////--------mail to member/admin if approval is not auto
  217. if($esrow_con['es_approval_type_offer']<>'auto')
  218. {
  219. //SENDING MAIL TO MEMBER////////////////////////
  220. // $esq_res="select * from esrrs_resources where esres_id=$esres_id";
  221. // $esrow_res=mysql_fetch_array(mysql_query($esq_res));
  223. $esq_mem="select * from esb2b_members where es_id=".$_SESSION["esb2b_userid"];
  224. $esrow_mem=mysql_fetch_array(mysql_query($esq_mem));
  226. $rs_con=mysql_fetch_array(mysql_query("select * from esb2b_config where es_id=1"));
  227. $es_null_char=$rs_con["es_null_char"];
  228. $login_url=$rs_con["es_site_root"]."/signin.php";
  229. // $esresource_url=$rs_con["essite_addr"]."/details_res.php?esres_id=$esres_id";
  232. //Reads email to be sebt
  233. $esq_mail="SELECT * FROM esb2b_mails where es_mailid=6";
  234. $esrs_mail=mysql_query($esq_mail);
  235. if ( $esrow_mail=mysql_fetch_array($esrs_mail) )
  236. {
  237. $from =$esrow_mail["es_fromid"];
  238. $to = $esrow_mem["es_email"];
  239. $subject =$esrow_mail["es_subject"];
  240. $header="From:" . $from . "\r\n" ."Reply-To:". $from ;
  242. $body=str_replace("%email%", $esrow_mem["es_email"],str_replace("%password%",$esrow_mem["es_password"],str_replace("%lname%", $esrow_mem["es_lastname"],str_replace("%fname%",$esrow_mem["es_firstname"],str_replace("%username%",$esrow_mem["es_username"], $esrow_mail["es_mail"]) ))));
  244. $body=str_replace("%signup_url%",$es_null_char,str_replace("%login_url%",$login_url,$body));
  246. $body=str_replace("%message_text%",$es_null_char,str_replace("%message_title%",$es_null_char,str_replace("%sender_username%",$es_null_char,str_replace("%message_date%",$es_null_char,$body))));
  248. $body=str_replace("%visitor_name%",$es_null_char,$body);
  250. $body=str_replace("%offer_title%",$es_title,str_replace("%offer_url%",$es_null_char,str_replace("%offer_id%",$es_null_char,$body)));
  252. if(isset($esrow_mail["es_html_format"])&&($esrow_mail["es_html_format"]=="yes"))
  253. {
  254. $header .= "MIME-Version: 1.0\r\n";
  255. $header .= "Content-type: text/html; charset=iso-8859-1\r\n";
  256. // $body=str_replace("\n","%br%",$body);
  257. }
  259. // echo "--from:-$from----to:-$to---sub:-$subject----head:-$header----";
  260. // echo "<pre>$body</pre>";
  261. // die();
  262. if( $esrow_mail["es_status"]=='yes')
  263. mail($to,$subject,$body,$header);
  264. }
  266. //////////////////////////////////////////////////////////
  267. ///// Sending mail to admin
  269. $rs0=mysql_fetch_array(mysql_query("select * from esb2b_config where es_id=1"));
  270. //$login_url=$site_root[0]."/signinform.php";
  272. //Reads email to be sebt
  273. $esq_mail="SELECT * FROM esb2b_mails where es_mailid=7";
  274. $esrs_mail=mysql_query($esq_mail);
  276. if ( $esrow_mail=mysql_fetch_array($esrs_mail) )
  277. {
  278. $from =$esrow_mail["es_fromid"];
  279. $to = $rs0["es_admin_email"];
  280. $subject =$esrow_mail["es_subject"];
  281. $header="From:" . $from . "\r\n" ."Reply-To:". $from ;
  283. // $body=$rs["mail"];
  285. $body=str_replace("%email%", $esrow_mem["es_email"],str_replace("%password%",$es_null_char,str_replace("%lname%", $esrow_mem["es_lastname"],str_replace("%fname%",$esrow_mem["es_firstname"],str_replace("%username%",$esrow_mem["es_username"], $esrow_mail["es_mail"]) ))));
  287. $body=str_replace("%signup_url%",$es_null_char,str_replace("%login_url%",$login_url,$body));
  289. $body=str_replace("%message_text%",$es_null_char,str_replace("%message_title%",$es_null_char,str_replace("%sender_username%",$es_null_char,str_replace("%message_date%",$es_null_char,$body))));
  291. $body=str_replace("%visitor_name%",$es_null_char,$body);
  293. $body=str_replace("%offer_title%",$es_title,str_replace("%offer_url%",$es_null_char,str_replace("%offer_id%",$es_null_char,$body)));
  295. if(isset($esrow_mail["es_html_format"])&&($esrow_mail["es_html_format"]=="yes"))
  296. {
  297. $header .= "MIME-Version: 1.0\r\n";
  298. $header .= "Content-type: text/html; charset=iso-8859-1\r\n";
  299. // $body=str_replace("\n","%br%",$body);
  300. }
  302. // echo "--from:-$from----to:-$to---sub:-$subject----head:-$header----";
  303. // echo "<pre>$body</pre>";
  304. // die();
  305. if( $esrow_mail["es_status"]=='yes')
  306. mail($to,$subject,$body,$header);
  307. }
  308. } //end if approval <> 'auto'
  309. elseif($esrow_con['es_approval_type_offer']=='auto')
  310. { //////-------mail to fav cats but if approval is auto 'coz otherwise it would be unapproved
  311. // echo "----------hello----------";
  312. $esq_mail="SELECT * FROM esb2b_mails where es_mailid=24";
  313. $esrs_mail=mysql_query($esq_mail);
  314. if ( ($esrow_mail=mysql_fetch_array($esrs_mail)) && ($esrow_mail['es_status']=='yes'))
  315. {
  316. ////////----------getting full path ids
  318. $cat_query=mysql_query("Select * from esb2b_categories where es_id in ($cid_list)");
  319. $temp_cid_list=-1;
  320. while ($rs=mysql_fetch_array($cat_query))
  321. {
  323. $temp_cid_list .=",".$rs["es_id"];
  324. $cid=$rs["es_id"];
  326. $cat_query1=mysql_query("Select * from esb2b_categories where es_id=" . $cid );
  327. while ($rs1=mysql_fetch_array($cat_query1))
  328. {
  329. $temp_cid_list.="," .$rs1["es_id"];
  330. $cat_query1=mysql_query("Select * from esb2b_categories where es_id=" . $rs1["es_pid"] );
  331. }
  332. }
  334. $cid_list=$temp_cid_list;
  335. //echo "<br>cats----".$temp_cid_list."----<br>";
  336. //die();
  338. //////-----------------------------------------
  339. $rs_con=mysql_fetch_array(mysql_query("select * from esb2b_config where es_id=1"));
  340. $es_null_char=$rs_con["es_null_char"];
  341. $login_url=$rs_con["es_site_root"]."/signin.php";
  342. $es_offer_url=$rs_con["es_site_root"]."/offers_buy.php?id=$es_offer_id&prod=buy";
  344. // foreach($cat as $es_value)
  345. // {
  346. $esq3_cat="select * from esb2b_categories where es_id=$es_value";
  347. $esrow3_cat=mysql_fetch_array(mysql_query($esq3_cat));
  348. $es_cat_name=$esrow3_cat["es_cat_name"];
  350. $esuser_id_list="-1";
  352. $esq_fav_cat="select * from esb2b_fav_cats where es_type='buy' and cid in ($cid_list)";
  353. //echo $esq_off_cat;
  354. $esrs_fav_cat=mysql_query($esq_fav_cat);
  355. while($esrow_fav_cat=mysql_fetch_array($esrs_fav_cat))
  356. {
  357. $esuser_id_list.=",".$esrow_fav_cat["mid"];
  358. }
  360. $esq3_mem="select * from esb2b_members where es_id in ($esuser_id_list)";
  361. $esrs3_mem=mysql_query($esq3_mem);
  362. while($esrow3_mem=mysql_fetch_array($esrs3_mem))
  363. { //send mail
  364. //////---getting category name only first matching cat for a user
  365. $esq1_fav_cat="select * from esb2b_fav_cats where cid in ($cid_list) and mid=".$esrow3_mem["es_id"];
  366. //echo $esq_off_cat;
  367. $esrs1_fav_cat=mysql_query($esq1_fav_cat);
  368. $esrow_fav_cat=mysql_fetch_array($esrs1_fav_cat);
  370. $esq4_cat="select * from esb2b_categories where es_id=".$esrow_fav_cat["cid"];
  371. //echo $esq_off_cat;
  372. $esrow4_cat=mysql_fetch_array(mysql_query($esq4_cat));
  373. $es_cat_name=$esrow4_cat["es_cat_name"];
  374. ///////----------------------
  375. $from =$esrow_mail["es_fromid"];
  376. $to = $esrow3_mem["es_email"];
  377. $subject =$esrow_mail["es_subject"];
  378. $header="From:" . $from . "\r\n" ."Reply-To:". $from ;
  380. $body=str_replace("%email%", $es_null_char,str_replace("%password%",$es_null_char,str_replace("%lname%", $esrow3_mem["es_lastname"],str_replace("%fname%",$esrow3_mem["es_firstname"],str_replace("%username%",$esrow3_mem["es_username"], $esrow_mail["es_mail"]) ))));
  382. $body=str_replace("%signup_url%",$es_null_char,str_replace("%login_url%",$login_url,$body));
  384. $body=str_replace("%message_text%",$es_null_char,str_replace("%message_title%",$es_null_char,str_replace("%sender_username%",$es_null_char,str_replace("%message_date%",$es_null_char,$body))));
  386. $body=str_replace("%visitor_name%",$es_null_char,$body);
  388. $body=str_replace("%offer_title%",$es_title,str_replace("%offer_url%",$es_offer_url,str_replace("%offer_id%",$es_offer_id,$body)));
  390. $body=str_replace("%category%",$es_cat_name,$body);
  392. if(isset($esrow_mail["es_html_format"])&&($esrow_mail["es_html_format"]=="yes"))
  393. {
  394. $header .= "MIME-Version: 1.0\r\n";
  395. $header .= "Content-type: text/html; charset=iso-8859-1\r\n";
  396. // $body=str_replace("\n","<br>",$body);
  397. }
  399. // echo "--from:-$from----to:-$to---sub:-$subject----head:-$header----";
  400. // echo "<pre>$body</pre>";
  401. // die();
  402. if( $esrow_mail["es_status"]=='yes')
  403. mail($to,$subject,$body,$header);
  404. } //end while esrow3_mem
  405. //////////////////////////////////////////////////////////
  406. } // end if
  407. //die();
  408. } //end if approval == auto
  409. ///////////-----------------
  411. //////////////////////////////////////////////-------------------------------
  412. /////////////////////////////////////----------------------------------------
  414. }
  415. if($es_approved=="yes")
  416. {
  417. ?><script language="javascript" type="text/javascript">
  418. location.href="<?=$domain_url?>/gen_confirm_mem.html?file=buy_offers&es_type=2&id=<?=$es_offer_id?>&subfile=post_buy&errmsg=<?=urlencode($es_msg)?>";
  419. </script>
  420. <?
  421. //header ("Location: gen_confirm_mem.html?file=buy_offers&subfile=post_buy&es_type=2&id=$es_offer_id&errmsg=".urlencode($es_msg));
  422. }
  423. else
  424. {
  425. ?><script language="javascript" type="text/javascript">
  426. location.href="<?=$domain_url?>/gen_confirm_mem.html?file=buy_offers&subfile=post_buy&errmsg=<?=urlencode($es_msg)?>";
  427. </script>
  428. <?
  429. // header ("Location: gen_confirm_mem.html?file=buy_offers&subfile=post_buy&errmsg=".urlencode($es_msg));
  430. }
  431. //die();
  432. }// if inserted
  433. else
  434. {
  435. ?><script language="javascript" type="text/javascript">
  436. location.href="<?=$domain_url?>/gen_confirm_mem.html?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=<?=urlencode("$Sorry_some_error_occurred_and_unable_to_post_buy_offer")?>";
  437. </script>
  438. <?
  439. // header("Location: gen_confirm_mem.html?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=".urlencode(" echo $Sorry_some_error_occurred_and_unable_to_post_buy_offer;"));
  440. //die();
  441. }
  442. }// if no errors
  444. }// if form posted
  445. else
  446. {
  447. /////////---getting config---------
  448. $esq_con='select * from esb2b_config where es_id=1';
  449. $esrow_con=mysql_fetch_array(mysql_query($esq_con));
  451. $esq_gro='select * from esb2b_groups where es_memtype='.$_SESSION["esb2b_memtype"];
  452. $esrow_gro=mysql_fetch_array(mysql_query($esq_gro));
  454. /////////--------------getting information bout user's privious postings
  455. $esq_off="select * from esb2b_offers_buy where es_uid=".$_SESSION["esb2b_userid"];
  456. $esbuy_count=mysql_num_rows(mysql_query($esq_off));
  457. //////////////////////////////////---------------------------
  459. if( $esbuy_count >= $esrow_gro["es_buy_cnt"] )
  460. {
  461. ?><script language="javascript" type="text/javascript">
  462. location.href="<?=$domain_url?>/gen_confirm_mem.html?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=<?=urlencode("$You_have_already_posted_maximum_allowed_buy_offers")?>";
  463. </script>
  464. <?
  465. //header("Location: gen_confirm_mem.html?file=buy_offers&subfile=post_buy&err=post_offer_buy&errmsg=".urlencode("$You_have_already_posted_maximum_allowed_buy_offers"));
  467. }
  469. $cid_list='';
  470. $es_cat_list='';
  471. $es_title='';
  472. $es_description='';
  473. $es_quantity='';
  474. $es_keywords='';
  475. $es_price_cur_id='';
  476. $es_price='';
  477. }
  479. function main ()
  480. {
  483. ?>
  484. <table width="100%" border="0" cellspacing="0" cellpadding="0">
  485. <tr>
  486. <td valign="top" bgcolor="#F1F1F1" style="width:180px;">
  487. <? include($_SESSION['lang'].".php");
  489. global $domain_url,$domain_url,$esbuy_count, $esrow_con, $esrow_gro, $errs, $errcnt, $cid_list, $es_cat_list, $es_title, $es_description, $es_quantity, $es_keywords, $es_price_cur_id, $es_price;
  491. $showform="";
  492. include "buy_left.php";
  493. ?>
  495. </td>
  496. <td>
  498. <table width="100%" border="0" cellspacing="0" cellpadding="0">
  499. <tr>
  500. <td width="89%" valign="top" style="padding-left:10px; padding-right:10px;">
  501. <table align="right" border="0" cellpadding="0" cellspacing="0" width="98%">
  502. <tr><td>&nbsp;</td></tr>
  504. <tr>
  505. <td align="center">
  507. <? ShowAdvertisement('468x60')?>
  508. </td>
  509. </tr>
  510. <tr>
  511. <td align="center"><br />
  512. <table dwcopytype="CopyTableCell" border="0" cellpadding="0" cellspacing="0" width="100%">
  514. <tr align="center">
  515. <td align="right" valign="top"><?
  516. if (count($_POST)>0)
  517. {
  518. $cid_list=$_POST["cid"];
  519. $es_cat_list=$_POST["category"];
  521. if ( $errcnt <> 0 )
  522. {
  523. ?>
  524. <table width="100%" border="0" align="center" cellpadding="2" cellspacing="0" class="errorstyle">
  525. <tr>
  526. <td colspan="2"><strong>&nbsp;<? echo "$Your_Request_cannot_be_processed_due_to_following_Reasons" ?></strong></td>
  527. </tr>
  528. <tr height="10">
  529. <td colspan="2"></td>
  530. </tr>
  531. <?
  533. for ($i=0;$i<$errcnt;$i++)
  534. {
  535. ?>
  536. <tr valign="top">
  537. <td width="6%">&nbsp;<?php echo $i+1;?></td>
  538. <td width="94%"><?php echo $errs[$i]; ?></td>
  539. </tr>
  540. <?
  541. }
  542. ?>
  543. </table>
  545. <?
  547. }
  549. }
  551. if ($showform<>"No")
  552. {
  553. ?>
  555. <script language=JavaScript src='wysiwyg/scripts/innovaeditor.js'></script>
  556. <script language="JavaScript">
  558. function add_category()
  559. {
  561. if(document.form123.cats.value!=0)
  562. {
  563. var id=document.form123.cats.selectedIndex;
  564. //////-------checking duplicate category
  565. var cid_list=form123.cid.value.split(";");
  566. var cnt=0;
  567. var posted="no";
  568. while(cnt<cid_list.length)
  569. {
  570. if(cid_list[cnt]==document.form123.cats.value)
  571. { posted="yes";}
  572. cnt++;
  573. }
  574. if(posted=="yes")
  575. {
  576. alert('This category is already in the list');
  577. return false;
  578. }
  579. //////-------end checking duplicate category
  580. //////-------checking max no. of categories
  581. var eslength;
  582. if(document.form123.category.value == "")
  583. eslength=0;
  584. else
  585. eslength=cid_list.length
  586. if( eslength >= <?php echo $esrow_gro["es_cat_cnt"]; ?> )
  587. {
  588. alert("You can't choose more than <?php echo ($esrow_gro["es_cat_cnt"]==1)?$esrow_gro["es_cat_cnt"].' category':$esrow_gro["es_cat_cnt"].' categories'; ?>");
  589. return false;
  590. }
  591. //////-------checking max no. of categories
  593. if(document.form123.category.value=="")
  594. {
  595. document.form123.cid.value=document.form123.cats.value;
  596. document.form123.category.value=document.form123.cats.options[id].text;
  597. document.form123.category.focus();
  598. document.form123.cats.selectedIndex=0;
  599. }
  600. else
  601. {
  602. document.form123.cid.value=document.form123.cid.value+";"+document.form123.cats.value;
  603. document.form123.category.value=document.form123.category.value+";"+document.form123.cats.options[id].text;
  604. document.form123.category.focus();
  605. document.form123.cats.selectedIndex=0;
  606. }
  607. }
  608. else
  609. {
  610. alert('Choose a Category to add');
  611. }
  612. }
  615. function remove_category()
  616. {
  617. var s1=window.document.form123.category.value;
  618. var s2=s1.split(";");
  619. var i=0;
  620. var id=document.form123.cats.selectedIndex;
  621. var s3=document.form123.cats.options[id].text;
  623. var id_list=document.form123.cid.value;
  624. var id_split=id_list.split(";");
  625. var rem_id=document.form123.cats.value;
  627. window.document.form123.category.value="";
  628. window.document.form123.cid.value="";
  630. while(i<s2.length)
  631. {
  632. //alert('Checking '+s2[i]+' nnn with'+s3+' mm');
  633. if(s3==s2[i])
  634. {
  635. //continue;
  636. // alert('Removing'+s3);
  637. }
  638. else
  639. {
  640. if(document.form123.category.value=="")
  641. {
  642. document.form123.category.value=s2[i];
  643. }
  644. else
  645. {
  646. document.form123.category.value=document.form123.category.value+";"+s2[i];
  647. }
  649. }
  650. if(rem_id==id_split[i])
  651. {
  652. //continue;
  653. // alert('Removing'+s3);
  654. }
  655. else
  656. {
  657. if(document.form123.cid.value=="")
  658. {
  659. document.form123.cid.value=id_split[i];
  660. }
  661. else
  662. {
  663. document.form123.cid.value=document.form123.cid.value+";"+id_split[i];
  664. }
  666. }
  667. i++;
  668. }
  669. //window.document.form123.related.value="";
  670. //window.document.form123.rel_id.value="";
  671. }
  673. function validate_form(frm)
  674. {
  675. updateRTEs();
  677. if(frm.cid.value=='')
  678. {
  679. alert('Please choose atleast one category');
  680. frm.cats.focus();
  681. return(false);
  682. }
  684. if(frm.es_title.value=='')
  685. {
  686. alert('Please specify Title');
  687. frm.es_title.focus();
  688. return(false);
  689. }
  690. else if(frm.es_title.value.match(/[&<>]+/))
  691. {
  692. alert("Please remove special characters from Title i.e. & < >");
  693. frm.es_title.focus();
  694. frm.es_title.select();
  695. return(false);
  696. }
  698. if(frm.es_description.value=='')
  699. {
  700. alert('Please specify Description');
  701. return(false);
  702. }
  704. if( isNaN(frm.es_quantity.value) || frm.es_quantity.value<=0)
  705. {
  706. alert('Please specify Quantity as a non-zero positive integer');
  707. frm.es_quantity.focus();
  708. frm.es_quantity.select();
  709. return(false);
  710. }
  712. if(frm.es_keywords.value=='')
  713. {
  714. alert('Please specify Keywords');
  715. frm.es_keywords.focus();
  716. return(false);
  717. }
  718. else if(frm.es_keywords.value.match(/[&<>]+/))
  719. {
  720. alert("Please remove special characters from Keywords i.e. & < >");
  721. frm.es_keywords.focus();
  722. frm.es_keywords.select();
  723. return(false);
  724. }
  725. else
  726. {
  727. var list=frm.es_keywords.value.split(",");
  728. if( list.length > <?php echo $esrow_gro["es_keyword_cnt"]; ?> )
  729. {
  730. alert("You can't choose more than <?php echo ($esrow_gro["es_keyword_cnt"]==1)?$esrow_gro["es_keyword_cnt"].' keyword':$esrow_gro["es_keyword_cnt"].' keywords'; ?>");
  731. frm.es_keywords.focus();
  732. frm.es_keywords.select();
  733. return(false);
  734. }
  735. }
  737. if( frm.es_price_cur_id.value == 0)
  738. {
  739. alert('Please choose currency for Price');
  740. frm.es_price_cur_id.focus();
  741. return(false);
  742. }
  744. if( isNaN(frm.es_price.value) || frm.es_price.value<=0)
  745. {
  746. alert('Please specify Price as a non-zero positive number');
  747. frm.es_price.focus();
  748. frm.es_price.select();
  749. return(false);
  750. }
  752. return(true);
  753. }
  755. function attachment(box,es_id)
  756. {
  757. //str="view_images.php?es_id="+es_id;
  758. str="fileupload1.html?box="+ box+"&es_id="+es_id;
  759. window.open(str,"Attachment","top=5,left=30,toolbars=no,maximize=yes,resize=yes,width=450,height=450,location=no,directories=no,scrollbars=yes");
  760. }
  761. function removeattachment(box)
  762. {
  763. window.document.form123.list1.value=""
  764. }
  766. </script>
  767. <form name="form123" method="post" action="buy_offers_post_buy_offers.html" onSubmit="return validate_form(this);">
  768. <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" class="onepxtable">
  769. <tr>
  770. <td class="titlestyle">&nbsp;<? echo "$Post_Buy_Offer" ?></td>
  771. </tr>
  772. <tr>
  773. <td><table border="0" align="center" cellpadding="2" cellspacing="5">
  774. <tr>
  775. <td colspan="3" class="innertablestyle"> <div align="center"><font class="normal">
  776. <? echo "$Buy_Offers" ?> : <? echo "$Posted" ?> - <strong><font class="red"><?php echo $esbuy_count; ?></font></strong>
  777. <? echo "$Maximum_Allowed_" ?>- <strong><font class="red"><?php echo $esrow_gro["es_buy_cnt"]; ?></font></strong></font></div></td>
  778. </tr>
  779. <tr valign="top">
  780. <td width="25%" align="right" class="innertablestyle"><font class="normal"><strong><? echo "$Categories" ?><br>
  781. </strong></font><font class="smalltext">(<font class="smalltext"><? echo "$Max" ?></font><strong><?php echo $esrow_gro["es_cat_cnt"]; ?></strong><?php echo ($esrow_gro["es_cat_cnt"]>1)?' categories':' category'; ?>)</font></td>
  782. <td><font class="red">*</font></td>
  783. <td> <font class="smalltext">
  784. <textarea name="category" cols="37" rows="5" readonly="readonly" id="category"><? echo $es_cat_list;?></textarea>
  785. <br>
  786. <select name="cats" id="select2" >
  787. <option value="0">Choose a category</option>
  788. <?
  789. $rs_query=mysql_query("select * from esb2b_categories order by es_pid");
  791. while($rst=mysql_fetch_array($rs_query))
  792. {
  793. $cat_path="";
  794. $child=mysql_fetch_array(mysql_query("select * from esb2b_categories where es_pid=".$rst["es_id"]));
  795. if($child)
  796. {
  797. continue;
  798. }
  799. $cat_path.=$rst["es_cat_name"];
  800. $par=mysql_query("select * from esb2b_categories where es_id=".$rst["es_pid"]);
  801. while($parent=mysql_fetch_array($par))
  802. {
  803. $cat_path=$parent["es_cat_name"].">".$cat_path;
  804. $par=mysql_query("select * from esb2b_categories where es_id=".$parent["es_pid"]);
  805. }
  806. ?>
  807. <option value="<? echo $rst["es_id"];?>" ><? echo $cat_path;?></option>
  808. <?
  809. }
  810. ?>
  811. </select>
  812. <input name="cid" type="hidden" id="cid" value="<? echo $cid_list;?>">
  813. <input class="btn btn-grey" name="add" type="button" id="add" value="<? echo "$Add" ?>" onClick="add_category()">
  814. <input class="btn btn-grey" name="Remove" type="button" id="Remove" value="<? echo "$Remove" ?>" onClick="remove_category()">
  815. </font></td>
  816. </tr>
  817. <tr valign="top">
  818. <td align="right" class="innertablestyle"><font class="normal"><strong><? echo "$Title" ?></strong></font></td>
  819. <td><font class="red">*</font></td>
  820. <td><font face="Arial, Helvetica, sans-serif" size="2">
  821. <input name="es_title" type="text" class=select id="es_title" value="<?php echo $es_title; ?>" size="30" maxlength="40">
  822. </font></td>
  823. </tr>
  824. </table>
  825. <div style="width:100%" class="titlestyle"><font class="normal"><strong><? echo "$Description" ?></strong></font></div>
  826. <table width="100%" border="0" align="center" cellpadding="2" cellspacing="5">
  827. <tr valign="top">
  828. <td align="left" colspan='3' style="padding:0; margin:0;"></td>
  829. </tr>
  830. <tr valign="top">
  831. <td valign="top" colspan="3" align="center"> <div align="center"><font class='normal'>
  833. <textarea name="es_description" cols=30 rows=4 wrap="physical" id="es_description">
  834. <?
  835. function encodeHTML($sHTML)
  836. {
  837. $sHTML=ereg_replace("&","&amp;",$sHTML);
  838. $sHTML=ereg_replace("<","&lt;",$sHTML);
  839. $sHTML=ereg_replace(">","&gt;",$sHTML);
  840. return $sHTML;
  841. }
  843. if(isset($es_description))
  844. {
  845. $sContent=stripslashes($es_description); /*** remove (/) slashes ***/
  846. echo encodeHTML($sContent);
  847. }
  848. ?>
  849. </textarea>
  851. <script> //STEP 2: Replace the textarea (txtContent)
  852. var oEdit1 = new InnovaEditor("oEdit1");
  853. oEdit1.REPLACE("es_description");//Specify the id of the textarea here
  854. </script>
  855. </font>
  856. </div></td>
  857. </tr>
  858. <tr valign="top">
  859. <td width="22%" align="right" class="innertablestyle"><font class="normal"><strong><? echo "$Quantity" ?></strong></font></td>
  860. <td><font class="red">*</font></td>
  861. <td><font face="Arial, Helvetica, sans-serif" size="2">
  862. <input name="es_quantity" type="text" class=select id="es_quantity" value="<?php echo $es_quantity; ?>" size="30" maxlength="40">
  863. </font><font face="Arial, Helvetica, sans-serif" size="2">&nbsp;
  864. </font></td>
  865. </tr>
  866. <tr valign="top">
  867. <td align="right" class="innertablestyle"><font class="normal"><strong><? echo "$Keywords" ?><br>
  868. </strong></font><font class="smalltext">(<? echo "$Max" ?> <strong><?php echo $esrow_gro["es_keyword_cnt"]; ?></strong><?php echo ($esrow_gro["es_keyword_cnt"]>1)?' keywords':' keyword'; ?>)</font><font class="normal"><strong>
  869. </strong></font></td>
  870. <td><font class="red">*</font></td>
  871. <td><input name="es_keywords" type="text" class=select id="es_keywords" value="<?php echo $es_keywords; ?>" size="30" maxlength="40">
  872. <br> <font class="smalltext"><? echo "$Please_specify_a_comma_seperated_list_of_keywords_related_to_your_product_Appropriate_keywords_will_lead_more_buyers_to_find_your_products" ?>.</font></td>
  873. </tr>
  874. <tr valign="top">
  875. <td class="innertablestyle"> <div align="right"><strong><font class="normal"><? echo "$Price" ?></font></strong></div></td>
  876. <td><font class="red">*</font></td>
  877. <td><font face="Arial, Helvetica, sans-serif" size="2">
  878. <select name="es_price_cur_id">
  879. <option value="0"><? echo "$Select_Currency" ?></option>
  880. <?
  881. $rs_query=mysql_query("Select * from esb2b_currencies where 1" );
  882. while ($rs=mysql_fetch_array($rs_query))
  883. {
  884. ?>
  885. <option value="<?php echo $rs["escur_id"]; ?>"
  886. <?php
  887. if ( $rs["escur_id"]==$es_price_cur_id)
  888. {
  889. echo " selected ";
  890. }
  891. ?>
  893. ><?php echo $rs["escur_name"]; ?></option>
  894. <?
  895. }
  896. ?>
  897. </select>
  898. &nbsp;&nbsp;
  899. <input name="es_price" type="text" id="es_price" value="<?php echo $es_price; ?>" size="5" maxlength="30">
  900. </font></td>
  901. </tr>
  902. <tr valign="top">
  903. <td align="right" class="innertablestyle">&nbsp;</td>
  904. <td>&nbsp;</td>
  905. <td><input class="btn btn-grey" name="submit" type="submit" value="<? echo "$Post_Now" ?>"></td>
  906. </tr>
  907. </table></td>
  908. </tr>
  909. </table>
  910. </form>
  911. <?
  912. } ?>
  913. <br />
  914. </td>
  915. </tr>
  917. </table></td>
  918. </tr>
  920. </table></td>
  921. <td width="21%" style="padding-top:4px" valign="top"></td>
  922. </tr>
  923. </table>
  925. </td>
  926. </tr>
  927. </table>
  930. <table width="100%" border="0" cellspacing="0" cellpadding="0">
  931. <tr>
  932. <td style="padding-top:4px"; ></td>
  933. </tr>
  934. </table>
  939. <!-- right -->
  940. <!--===================== SCREEN END ========================-=====================================-->
  941. <!-- lefte menu -->
  943. <div style="clear: both;"></div>
  945. <!--us_myalibaba_web7 -->
  946. <?
  947. // end main
  948. }
  949. include_once("template1.php");
  951. ?>

Remove field validation for "quantity"