<?php
/* --------------------------------------------------------------
   $Id: new_attributes_change.php 899 2017-05-22 02:40:57Z hhgag $

   XT-Commerce - community made shopping
   http://www.xt-commerce.com

   Copyright (c) 2003 XT-Commerce
   --------------------------------------------------------------
   based on: 
   (c) 2000-2001 The Exchange Project  (earlier name of osCommerce)
   (c) 2002-2003 osCommerce(new_attributes_change); www.oscommerce.com 
   (c) 2003	 nextcommerce (new_attributes_change.php,v 1.8 2003/08/14); www.nextcommerce.org

   Released under the GNU General Public License 
   --------------------------------------------------------------
   Third Party contributions:
   New Attribute Manager v4b				Autor: Mike G | mp3man@internetwork.net | http://downloads.ephing.com

   Released under the GNU General Public License 
   --------------------------------------------------------------*/ 
defined('_VALID_XTC') or die('Direct Access to this location is not allowed.');
require_once(DIR_FS_INC .'xtc_get_tax_rate.inc.php');
require_once(DIR_FS_INC .'xtc_get_tax_class_id.inc.php');
// require_once(DIR_FS_INC .'xtc_format_price.inc.php');
// I found the easiest way to do this is just delete the current attributes & start over =)

// download function start
$delete_sql = xtc_db_query("SELECT products_attributes_id FROM ".TABLE_PRODUCTS_ATTRIBUTES." WHERE products_id = '" . $_POST['current_product_id'] . "'");
while($delete_res = xtc_db_fetch_array($delete_sql)) {
	$delete_download_sql = xtc_db_query("SELECT products_attributes_filename FROM ".TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD." WHERE products_attributes_id = '" . $delete_res['prducts_attributes_id'] . "'");
	$delete_download_file = xtc_db_fetch_array($delete_download_sql);
	xtc_db_query("DELETE FROM ".TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD." WHERE products_attributes_id = '" . $delete_res['products_attributes_id'] . "'");
}
// download function end

xtc_db_query("DELETE FROM ".TABLE_PRODUCTS_ATTRIBUTES." WHERE products_id = '" . $_POST['current_product_id'] . "'" );

// Simple, yet effective.. loop through the selected Option Values.. find the proper price & prefix.. insert.. yadda yadda yadda.
$postOptionValues = isset($_POST['optionValues']) ? $_POST['optionValues'] : [];
$stockLogger = MainFactory::create('StockLogger');
for ($i = 0; $i < sizeof($postOptionValues); $i++) {
	$query = "SELECT * FROM ".TABLE_PRODUCTS_OPTIONS_VALUES_TO_PRODUCTS_OPTIONS." where products_options_values_id = '" . $_POST['optionValues'][$i] . "'";
	$result = xtc_db_query($query);
	$matches = xtc_db_num_rows($result);
	while ($line = xtc_db_fetch_array($result)) {
		$optionsID = $line['products_options_id'];
	}
	
	$cv_id = $_POST['optionValues'][$i];
	$value_price =  $_POST[$cv_id . '_price'];
	
	if (PRICE_IS_BRUTTO=='true'){
		$value_price= ((double)$value_price/((xtc_get_tax_rate(xtc_get_tax_class_id($_POST['current_product_id'])))+100)*100);
	}
	$value_price=xtc_round($value_price,PRICE_PRECISION);
	
	$value_prefix = $_POST[$cv_id . '_prefix'];
	$value_sortorder = $_POST[$cv_id . '_sortorder'];
	$value_weight_prefix = $_POST[$cv_id . '_weight_prefix'];
	$value_model =  $_POST[$cv_id . '_model'];
	$value_stock =  $_POST[$cv_id . '_stock'];
	$value_weight =  $_POST[$cv_id . '_weight'];
	
	$gm_vpe_id = $_POST[$cv_id . '_vpe_id'];
	$gm_vpe_value = $_POST[$cv_id . '_vpe_value'];
	$gm_ean = $_POST[$cv_id . '_gm_ean'];
	
	xtc_db_query("INSERT INTO ".TABLE_PRODUCTS_ATTRIBUTES." (products_id, options_id, options_values_id, options_values_price, price_prefix ,attributes_model, attributes_stock, options_values_weight, weight_prefix, sortorder, products_vpe_id, gm_vpe_value, gm_ean) VALUES ('" . $_POST['current_product_id'] . "', '" . $optionsID . "', '" . $_POST['optionValues'][$i] . "', '" . $value_price . "', '" . $value_prefix . "', '" . $value_model . "', '" . $value_stock . "', '" . $value_weight . "', '" . $value_weight_prefix . "', '".$value_sortorder."', '".$gm_vpe_id."', '".$gm_vpe_value."', '".$gm_ean."')") or die(((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)));
	$products_attributes_id = xtc_db_insert_id();
	
	if ($_POST[$cv_id . '_download_file'] != '') {
		$value_download_file = $_POST[$cv_id . '_download_file'];
		$value_download_expire = $_POST[$cv_id . '_download_expire'];
		$value_download_count = $_POST[$cv_id . '_download_count'];
		
		xtc_db_query("INSERT INTO ".TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD." (products_attributes_id, products_attributes_filename, products_attributes_maxdays, products_attributes_maxcount) VALUES ('" . $products_attributes_id . "', '" . $value_download_file . "', '" . $value_download_expire . "', '" . $value_download_count . "')") or die(((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)));
	}
	
	$stockLogger->addLogEntry(
	    new IdType((int)$_POST['current_product_id']),
        new DecimalType((float)$value_stock),
        new NonEmptyStringType('Attribut bearbeitet'),
        new StringType(sprintf('options_id %d; values_id %d', $optionsID, $_POST['optionValues'][$i]))
    );
}