Subversion Repositories cheapmusic

<?php

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/hosting.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/sessions_db.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/cryptor.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/vendors.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/tools.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/wishlist.php");

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/NonceUtil.php");

error_reporting(E_ALL);

$userData = [];

$userTheme = 'default';

$configFile = parse_ini_file($_SERVER['DOCUMENT_ROOT'] . FCM_CONFIGFILE, true);

$crypt = Cryptor::getInstance($configFile['cryptor']);

$tmpSessionTab = (!empty(getPGV("sessionTab")) && getPGV("sessionTab") > 0 ? getPGV("sessionTab"): null);

$handler = MySessionHandler::getInstance($tmpSessionTab, $configFile['mysqli']);

$vendors = Vendors::getInstance();

Vendors::setAllVendors($configFile, $vendors);

$systemConf = $configFile['system'];

unset($configFile);

session_set_cookie_params(604800, '/', '.' . $systemConf["domain_name"], true, true);

session_set_save_handler($handler, true);

if (!empty($_COOKIE['PHPSESSID'])) {

    session_id($_COOKIE['PHPSESSID']);

}

session_start();

initSessionVariables();

$_SESSION["htmlIndent"] = (!empty($systemConf["htmlIndent"]) ? intval($systemConf["htmlIndent"]) : 0);

$_SESSION["gtag"] = ($systemConf["g_tag"] == "1");

$_SESSION["nonce"] = NonceUtil::generate($systemConf["nonce_secret"], 1800);

include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/csp.php");

// Check whether user ID is available in cookie

if (!empty($_COOKIE['rememberUserId']) && !empty($_COOKIE['hash']) && empty($_SESSION['sessData']['loginType'])) {

    require_once 'login/includes/config.php';

    require_once 'login/includes/User.class.php';

    require_once 'login/includes/password.php';

    $user = new User();

    $conditions['where'] = array(

        'id' => $_COOKIE['rememberUserId']

    );

    $conditions['return_type'] = 'single';

    $userData = $user->getRows($conditions);

    if (!empty($userData) && password_verify($userData['password'] . $userData['id'], $_COOKIE['hash'])) {

        $_SESSION['sessData']['userLoggedIn'] = true;

        $_SESSION['sessData']['userID'] = $_COOKIE['rememberUserId'];

        $userPicture = getUserImage($userData);

        $userTheme = $userData['theme'];

        $_SESSION["currentLayout"] = ($userData['cardView'] == '1' ? 'CardView' : 'TableView');

        if (empty($_SESSION["manualFilter"])) {

            $_SESSION['buyer']['Zip'] = $userData['zip'];

            $_SESSION['buyer']['Country'] = 'United States';

            $_SESSION['buyer']['Currency'] = 'USD';

            $_SESSION["filterCondition"]["New"] = $userData['conditionNew'];

            $_SESSION["filterCondition"]["Used"] = $userData['conditionUsed'];

            $_SESSION["filterMediaType"]["CD"] = $userData['mediaCD'];

            $_SESSION["filterMediaType"]["Record"] = $userData['mediaRecord'];

            $_SESSION["filterMediaType"]["Digital"] = $userData['mediaDigital'];

            $_SESSION["filterMediaType"]["Book"] = $userData['mediaBook'];

        }

    }

    else {

        unsetSessData();

    }

    // or if the user has already logged in

}

else if (isLoggedIn()) {

    require_once 'login/includes/config.php';

    require_once 'login/includes/User.class.php';

    require_once 'login/includes/password.php';

    $user = new User();

    $conditions['where'] = array(

        'id' => $_SESSION['sessData']['userID']

    );

    $conditions['return_type'] = 'single';

    $userData = $user->getRows($conditions);

    if (!empty($userData)) {

        $userPicture = getUserImage($userData);

        $userTheme = $userData['theme'];

        $_SESSION["currentLayout"] = ($userData['cardView'] == '1' ? 'CardView' : 'TableView');

        if (empty($_SESSION["manualFilter"])) {

            $_SESSION['buyer']['Zip'] = $userData['zip'];

            $_SESSION['buyer']['Country'] = 'United States';

            $_SESSION['buyer']['Currency'] = 'USD';

            $_SESSION["filterCondition"]["New"] = $userData['conditionNew'];

            $_SESSION["filterCondition"]["Used"] = $userData['conditionUsed'];

            $_SESSION["filterMediaType"]["CD"] = $userData['mediaCD'];

            $_SESSION["filterMediaType"]["Record"] = $userData['mediaRecord'];

            $_SESSION["filterMediaType"]["Digital"] = $userData['mediaDigital'];

            $_SESSION["filterMediaType"]["Book"] = $userData['mediaBook'];

        }

    }

    else {

        unsetSessData();

    }

    // not logged in

}

else {

    unsetSessData();

}

checkPriceMonitor();

echo "<!DOCTYPE html>"; // html5

$xh = new Html;

$xh->init($_SESSION["htmlIndent"]);

$xh->add_attribute("lang", "en-US");

$xh->tag('html');

$xh->tag('head');

    $xh->insert_code(headTitle(getPGV('submit')));

    $xh->add_attribute('name', "keywords");

    $xh->add_attribute('content', "Cheap,Music,Album,Single,Promo,CD,Compact Disc,Vinyl,Record,Digital,Download,Sheet,Book");

    $xh->single_tag('meta');

    $xh->insert_code(metaDescription(getPGV('submit')));

    $xh->insert_code(htmlHeader());

    $xh->insert_code(file_get_contents('snippets/fb_tw.txt'));

    $xh->close(); // head

$xh->tag('body');

if ($_SESSION["gtag"]) {

    $xh->add_attribute('nonce', base64_encode($_SESSION["nonce"]));

    $xh->tag('noscript');

        $xh->add_attribute("src", "https://www.googletagmanager.com/ns.html?id=GTM-PCNTXZ7");

        $xh->add_attribute("height", "0");

        $xh->add_attribute("width", "0");

        $xh->add_attribute("style", "display:none;visibility:hidden");

        $xh->add_attribute("title", "Tagmanager");

        $xh->tag('iframe', "");

    $xh->close(); // noscript

}

if ($_SERVER["REQUEST_METHOD"] == "POST") {

    if ($_POST["submit"] == "Search") {

        if (empty($_SESSION['buyer']['Zip'])) {

            $zip = (empty($_POST['buyerZip']) ? "" : sanitizeInput($_POST['buyerZip']));

            if (strlen($zip) == 5 && preg_match("/^[0-9 ]*$/", $zip)) {

                if ($_SESSION["buyer"]["Zip"] != $zip) {

                    $_SESSION["manualFilter"] = true;

                    $_SESSION["buyer"]["Zip"] = $zip;

                }

            }

            else if (strlen($zip) == 0) {

                $_SESSION["buyer"]["Zip"] = "";

            }

        }

        $_SESSION["discogsTitle"] = "";

        $_SESSION["discogsArtist"] = "";

        $searchTerm = (empty($_POST['searchTerm']) ? "" : searchFriendlyString($_POST['searchTerm']));

        if (empty($searchTerm)) {

            resetSessionVars();

        }

        else {

            $_SESSION["searchTerm"] = $searchTerm;

            performSearch();

        }

    }

    else if ($_POST["submit"] == "Save") {

        $_SESSION["manualFilter"] = true;

        if (!isset($_POST["filterCondition"])) {$_POST["filterCondition"] = []; }

        if (!is_array($_POST["filterCondition"])) { $_POST["filterCondition"] = [ $_POST["filterCondition"] ];}

        $_SESSION["filterCondition"]["New"] = in_array("New", $_POST["filterCondition"]);

        $_SESSION["filterCondition"]["Used"] = in_array("Used", $_POST["filterCondition"]);

        if (!isset($_POST["filterMediaType"])) {$_POST["filterMediaType"] = []; }

        if (!is_array($_POST["filterMediaType"])) { $_POST["filterMediaType"] = [ $_POST["filterMediaType"] ];}

        $_SESSION["filterMediaType"]["CD"] = in_array("CD", $_POST["filterMediaType"]);

        $_SESSION["filterMediaType"]["Record"] = in_array("Record", $_POST["filterMediaType"]);

        $_SESSION["filterMediaType"]["Digital"] = in_array("Digital", $_POST["filterMediaType"]);

        $_SESSION["filterMediaType"]["Book"] = in_array("Book", $_POST["filterMediaType"]);

        $_SESSION["discogsTitle"] = "";

        $_SESSION["discogsArtist"] = "";

        $searchTerm = searchFriendlyString($_POST['searchTerm']);

        if (empty($searchTerm)) {

            resetSessionVars();

        }

        else {

            $_SESSION["searchTerm"] = $searchTerm;

            performSearch();

        }

    }

    else if ($_POST["submit"] == "discogsSearch") {

        $searchTerm = "";

        if (!empty($_POST['discogsBarcode'])) {

            $searchTerm = searchFriendlyString($_POST['discogsBarcode']);

        }

        else {

            if (!empty($_POST['discogsTitle'])) {

                $searchTerm = $_POST['discogsTitle'];

            }

            if (!empty($_POST['discogsArtist'])) {

                $searchTerm .= " " . $_POST['discogsArtist'];

            }

            $searchTerm = trim($searchTerm);

        }

        if (empty($searchTerm)) {

            resetSessionVars();

        }

        else {

            $_SESSION["searchTerm"] = $searchTerm;

            if (isset($_POST['discogsTitle'])) {

                $_SESSION["discogsTitle"] = searchFriendlyString($_POST['discogsTitle']);

            }

            if (isset($_POST['discogsArtist'])) {

                $_SESSION["discogsArtist"] = searchFriendlyString($_POST['discogsArtist']);

            }

            performSearch();

        }

    }

    else if ($_POST["submit"] == "unsubscribe") {

// bugbug

    }

}

else if ($_SERVER["REQUEST_METHOD"] == "GET") {

    if (isset($_GET['z'])) {

        $_SESSION["buyer"]["Zip"] = "";

        $zip = sanitizeInput($_GET['z']);

        if (strlen($zip) == 5 && preg_match("/^[0-9 ]*$/", $zip)) {

            $_SESSION["buyer"]["Zip"] = $zip;

        }

    }

    $_SESSION["searchTerm"] = "";

    if (isset($_GET['q'])) {

        $_SESSION["searchTerm"] = searchFriendlyString($_GET["q"]);

        performSearch();

    }

}

$xh->insert_code(navigationPane(isset($userPicture) ? $userPicture : null));

    $xh->add_attribute("class", "page-header bg-primary");

    $xh->tag('div');

        $xh->add_attribute("class", "container text-center py-3");

        $xh->tag('div');

if (getPGV('submit') == "terms") {

    $xh->tag('h1', "Terms of Service");

}

else if (getPGV('submit') == "privacy") {

    $xh->tag('h1', "Privacy Policy");

}

else if (getPGV('submit') == "coupons") {

    $xh->tag('h1', "Special Offers & Coupon Codes");

}

else if (getPGV('submit') == "wishlist") {

    $xh->tag('h1', "Wishlist");

    if (!empty($_SESSION['priceMonitor'])) {

        $xh->add_attribute("method", "post");

        $xh->add_attribute("action", "/index.php");

        $xh->tag('form');

            $xh->insert_code(inputSessionTab());

            $xh->insert_code(inputNonce());

            $xh->add_attribute("class", "btn btn-info rounded");

            $xh->add_attribute("id", "priceMonitor");

            $xh->add_attribute("type", "submit");

            $xh->add_attribute("name", "submit");

            $xh->add_attribute("value", "priceMonitor");

            $xh->tag('button', "Price Monitor Results");

            if (!empty($_SESSION['priceMonitor']['newFlag']) && $_SESSION['priceMonitor']['newFlag'] === true) {

                $xh->add_attribute("class", "badge badge-pill badge-dark");

                 $xh->tag('span', ">New");

            }

            $xh->close(); // button

        $xh->close(); // form

    }

}

else if (getPGV('submit') == "priceMonitor") {

    $xh->tag('h1', "Price Monitor Results");

}

else if (getPGV('submit') == "help") {

    $xh->tag('h1', "Getting Started");

}

else if (getPGV('submit') == "barcode") {

    $xh->tag('h1', "Barcode Checker");

}

else if (getPGV('submit') == "unsubscribe") {

    $xh->tag('h1', "Unsubscribe Wishlist");

}

else {

    $xh->tag('h1', "Find Cheap CDs, Records, Digital, Books and Sheets");

    $xh->add_attribute("id", "textslide");

    $xh->add_attribute("class", "d-none d-sm-block");

    $xh->tag('p', "Bookmark FindCheapMusic.com");

}

        $xh->close(); // div

    $xh->close(); // div

    $xh->insert_code(mainSearchForm());

if (getPGV('submit') == "terms") {

    $snip = file_get_contents('snippets/terms.txt');

    $snip = str_replace("<script>", "<script nonce=\"" . base64_encode($_SESSION["nonce"]) . "\">", $snip);

    $xh->insert_code($snip);

}

else if (getPGV('submit') == "privacy") {

    $snip = file_get_contents('snippets/privacy.txt');

    $snip = str_replace("<script>", "<script nonce=\"" . base64_encode($_SESSION["nonce"]) . "\">", $snip);

    $xh->insert_code($snip);

}

else if (getPGV('submit') == "help") {

    $xh->insert_code(printHelp());

}

else if (getPGV('submit') == "barcode") {

    $xh->insert_code(barcodePage());

}

else if (getPGV('submit') == "coupons") {

    //get_linkshareCoupons(); // bugbug

    $xh->insert_code(getCouponCodes());

}

else if (getPGV('submit') == "wishlist") {

    $xh->insert_code(getWishlist());

}

else if (getPGV('submit') == "priceMonitor") {

    $xh->add_attribute("class", "container");

    $xh->add_attribute("id", "productTable");

    $xh->tag('div');

    $xh->insert_code(getPriceMonitor());

    $xh->close(); // div

}

else if (getPGV('submit') == "unsubscribe") {

    $xh->insert_code(unsubscribeWishlist($_GET));

}

else if (getPGV('submit') == "random") {

    findDiscogsMaster("***RANDOM***");

    if (!empty($_SESSION["discogs"])) {

        $xh->insert_code(str_replace("xxxNONCExxx", base64_encode($_SESSION["nonce"]), $_SESSION["discogs"]));

    }

}

else {

    if ($_SESSION["lowestPrice"]["All"] > 0.00 || !empty($_SESSION["searchTerm"])) {

        $xh->insert_code(str_replace("xxxNONCExxx", base64_encode($_SESSION["nonce"]), $_SESSION["discogs"]));

        $xh->add_attribute("class", "container border py-2");

        $xh->add_attribute("id", "productTable");

        $xh->tag('div');

        $xh->insert_code(storeOfferHeader());

        if ($_SESSION["lowestPrice"]["All"] > 0.00) {

            $xh->insert_code(printResultHeader());

        }

        $xh->insert_code(printResult());

        $xh->close(); // div

        $xh->insert_code(productTableEventListeners());

    }

    else if (!empty($_SESSION["discogs"])) {

        $xh->insert_code(str_replace("xxxNONCExxx", base64_encode($_SESSION["nonce"]), $_SESSION["discogs"]));

    }

    else {

        $xh->insert_code(startscreen());

    }

    $xh->insert_code(printSearchInfoModal());

}

$xh->insert_code(printProgessbarModal());

$xh->insert_code(printSocialIconBar());

$xh->insert_code(htmlFooter());

$xh->insert_code(headerQuoteSlides());

$xh->insert_code(downloadAtOnload());

$xh->tag('form');

    $xh->add_attribute("type", "hidden");

    $xh->add_attribute("id", "nonce");

    $xh->add_attribute("name", "nonce");

    $xh->add_attribute("value", $_SESSION["nonce"]);

    $xh->single_tag('input');

$xh->close(); // form

$xh->close(); // body

$xh->close(); // html

$html = $xh->flush();

//error_log(print_r($html, 1));

echo $html;

MySessionHandler::commit(session_id());