| Server IP : 104.21.21.239 / Your IP : 216.73.216.101 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/wwwdevplanner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
if (!isset($_SESSION['user_id'])) :
//if (isset($_REQUEST['id'])) :
//$action = "Edit";
//else :
$action = "Add New";
//endif;
else :
exit();
endif;
//var_dump($_POST);
//var_dump($_GET);
$signed_up = 0;
if ($_POST['ajax_event_submitted'] == '1') :
/* ------------------ Apply valid promotion code ---------------*/
$net_price = floatval($app_authorize_net_amt_first_event);
$promo_code = '';
if (!empty($_POST['promo_code'])) :
$code = mysqli_real_escape_string($GLOBALS['con'], $_POST['promo_code']);
$sku = mysqli_real_escape_string($GLOBALS['con'], $_GET['IX']);
$sql_promo = "SELECT * FROM promo_codes WHERE code = '".$code."' AND expires >= CURDATE() AND sku = '".$sku."' ";
$result_promo = mysqli_query($GLOBALS['con'], $sql_promo);
//echo '==='.$sql.'===';
//var_dump($_SERVER);
if (mysqli_num_rows($result_promo) > 0) :
$promo_code = $code;
$row_promo = mysqli_fetch_object($result_promo);
if ($row_promo->limited_use == 0 || ($row_promo->limited_use == 1 && $row_promo->uses_left > 0)) :
switch ($row_promo->type) :
case 'pct_off' :
$net_price = round($row_promo->reg_price * (1 - ($row_promo->value / 100)),2);
break;
case 'amt_off' :
$net_price = round($row_promo->reg_price - $row_promo->value,2);
break;
case 'amt_sale' :
$net_price = round($row_promo->value,2);
break;
endswitch;
endif;
endif;
endif;
$net_amt = strval($net_price);
/* -----------------------------------------------------------*/
$ar_err = array();
if (empty($_POST['first_name'])) :
$ar_err['first_name'] = 'First name is required!';
$err_flag = true;
endif;
if (empty($_POST['last_name'])) :
$ar_err['last_name'] = 'Last name is required!';
$err_flag = true;
endif;
if (empty($_POST['street'])) :
$ar_err['street'] = 'Street address is required!';
$err_flag = true;
endif;
if (empty($_POST['city'])) :
$ar_err['city'] = 'City is required!';
$err_flag = true;
endif;
if (empty($_POST['state'])) :
$ar_err['state'] = 'State is required!';
$err_flag = true;
endif;
if (empty($_POST['zip'])) :
$ar_err['zip'] = 'Zip code is required!';
$err_flag = true;
endif;
if (empty($_POST['phone'])) :
$ar_err['phone'] = 'Phone number is required!';
$err_flag = true;
endif;
if (empty($_POST['email'])) :
$ar_err['email'] = 'Email is required!';
$err_flag = true;
else :
$sql = "SELECT * FROM users WHERE email = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['email']))."'";
$result = mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
if (mysqli_num_rows($result) > 0) :
$ar_err['email'] = 'Email on file - account already exists!';
$err_flag = true;
endif;
endif;
if (empty($_POST['pwd_new'])) :
$ar_err['pwd_new'] = 'New password required!';
$err_flag = true;
endif;
if (empty($_POST['pwd_new2']) || $_POST['pwd_new2'] != $_POST['pwd_new']) :
$ar_err['pwd_new2'] = 'New password confirmation must match!';
$err_flag = true;
endif;
if (empty($_POST['security_question'])) :
$ar_err['security_question'] = 'Security Question is required!';
$err_flag = true;
endif;
if (empty($_POST['security_answer'])) :
$ar_err['security_answer'] = 'Security Answer is required!';
$err_flag = true;
endif;
$ar_search = array(' ', '-', '.');
$_POST['cc_number'] = str_replace($ar_search, '', $_POST['cc_number']);
if (empty($_POST['cc_number']) && $net_price > 0.00) :
$ar_err['cc_number'] = 'Credit card required!';
$err_flag = true;
endif;
if ((empty($_POST['cc_exp_month']) || empty($_POST['cc_exp_year'])) && $net_price > 0.00) :
$ar_err['cc_exp_date'] = 'Credit card required!';
$err_flag = true;
endif;
if (empty($_POST['cc_name']) && $net_price > 0.00) :
$ar_err['cc_name'] = 'Credit card holder required!';
$err_flag = true;
endif;
if (empty($_POST['captcha']) || $_SESSION['captcha_key'] != md5($_POST['captcha'])) :
$ar_err['captcha'] = 'Invalid verification!';
$err_flag = true;
endif;
if (empty($_POST['agree_terms']) || $_POST['agree_terms'] != '1') :
$ar_err['agree_terms'] = 'You must agree to terms of use!';
$err_flag = true;
endif;
if (!$err_flag) :
if ($net_price > 0.00) :
/* ----------------- Authorize.net processing ------------------*/
require_once 'anet_php_sdk/AuthorizeNet.php'; // Make sure this path is correct.
$transaction = new AuthorizeNetAIM($app_authorize_net_login_id, $app_authorize_net_transaction_key);
$transaction->VERIFY_PEER = false;
//$transaction->test_request = $app_authorize_net_test_request;
//$transaction->amount = $app_authorize_net_amt_first_event;
$transaction->amount = $net_amt;
//$transaction->card_num = '4007000000027';
$transaction->card_num = $_POST['cc_number'];
$transaction->exp_date = $_POST['cc_exp_month'].'/'.$_POST['cc_exp_year'];
$transaction->invoice_num = strval(next_id('payments'));
$transaction->description = 'First Bar/Bat Mitzvah';
$transaction->cust_id = strval(next_id('users'));
$transaction->first_name = $_POST['first_name'];
$transaction->last_name = $_POST['last_name'];
$transaction->address = $_POST['street'].' '.$_POST['street2'];
$transaction->city = $_POST['city'];
$transaction->state = $_POST['state'];
$transaction->zip = $_POST['zip'];
$transaction->phone = $_POST['phone'];
$transaction->email = $_POST['email'];
$transaction->customer_ip = get_client_ip();
//var_dump($transaction);
$response = $transaction->authorizeAndCapture();
if ($response->approved) :
else :
//$ar_err['cc_number'] = 'Credit card transaction failed! <br />'.$response->error_message;
/*
*/
$ar_err['cc_number'] = 'Credit card transaction failed!';
write_log('E', 0, 'Credit card transaction failed (signup_form) - '.$_POST['first_name'].' '.$_POST['last_name'].' '.substr($_POST['cc_number'], 0, 4).str_repeat('*', strlen($_POST['cc_number']) - 8).substr($_POST['cc_number'], -4).' - '.$response->error_message);
$err_flag = true;
endif;
/* -------------------------------------------------------------*/
else :
$response = new stdClass();
$response->authorization_code = 'N/A';
$response->transaction_id = 'N/A';
endif;
endif;
if (!$err_flag) :
if ($action == 'Add New') :
if ($_POST['ref_source'] == 'Other') :
$ref_source = $_POST['ref_source'].' - '.$_POST['ref_source_other'];
else :
$ref_source = $_POST['ref_source'];
endif;
$sql = "INSERT INTO users set ".
"first_name = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['first_name']))."', ".
"last_name = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['last_name']))."', ".
"street = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['street']))."', ".
"street2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['street2']))."', ".
"city = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['city']))."', ".
"state = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['state']))."', ".
"zip = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['zip']))."', ".
"phone = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['phone']))."', ".
"mobile = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['mobile']))."', ".
"email = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['email']))."', ".
"salt = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['salt']))."', ".
"password2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['pwd_new']))."', ".
"security_question = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['security_question']))."', ".
"security_answer = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['security_answer']))."', ".
"ref_source = '".mysqli_real_escape_string($GLOBALS['con'], trim($ref_source))."', ".
"signup_ip = '".get_client_ip()."' ";
mysqli_query($GLOBALS['con'], $sql) or die('Database error! Please contact the web site administrator.');
$last_id = last_id();
$sql = "INSERT INTO payments set ".
"user_id = ".$last_id.", ".
"auth_code = '".$response->authorization_code."', ".
"trans_id = '".$response->transaction_id."', ".
"pmt_type = 'First Bar/Bat Mitzvah', ".
"promo_code = '".$promo_code."', ".
"pmt_cred_deb = 1, ".
"pmt_date = ".nzdate(date('m/d/Y')).", ".
"pmt_cc = '".str_pad(substr(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['cc_number'])), strlen(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['cc_number']))) -4), 12, '*', STR_PAD_LEFT)."', ".
"pmt_amt = ".$net_amt." ";
//"pmt_amt = ".$app_authorize_net_amt_first_event." ";
mysqli_query($GLOBALS['con'], $sql) or die('Database error! Please contact the web site administrator.');
if ($row_promo->limited_use == 1) :
$sql = "UPDATE promo_codes SET uses_left = uses_left - 1 WHERE id = ".$row_promo->id;
mysqli_query($GLOBALS['con'], $sql) or die('Database error! Please contact the web site administrator.');
endif;
//***************** update MailChimp ****************
require_once('mailchimp/mailchimp.php');
$mailchimp = new \Drewm\MailChimp($app_mailchimp_key);
$result = $mailchimp->call('lists/subscribe', array(
'id' => $app_mailchimp_list_id,
'email' => array('email'=>$_POST['email']),
'merge_vars' => array(
'FNAME'=>$_POST['first_name'],
'LNAME'=>$_POST['last_name'],
'MMERGE6'=>$_POST['zip'],
'MMERGE10'=>trim($_POST['street'].' '.$_POST['street2']),
'MMERGE11'=>$_POST['city'],
'MMERGE12'=>$_POST['state'],
'MMERGE13'=>$_POST['phone'],
'MMERGE9'=>'MO_SIGNUP',
),
'double_optin' => false,
'update_existing' => true,
'replace_interests' => false,
'send_welcome' => false,
));
//***************** mail using PEAR *****************
require_once "Mail.php";
$mail_body = '<html>'.
'<style>body {font-family:Arial, Helvetica, sans-serif; font-size:14px;} table {font-size:14px;}</style>'.
'Dear '.$_POST['first_name'].' '.$_POST['last_name'].', <br><br>'.
'Thank you for your order with MitzvahOrganizer.com. Following are the details of your transaction: <br><br>'.
'<table>'.
'<tr><td><b>Purchase Type:</b> </td><td>First Bar/Bat Mitzvah </td></tr>'.
'<tr><td><b>Date:</b> </td><td>'.date('m/d/Y').'</td></tr>'.
'<tr><td><b>Amount:</b> </td><td>'.$net_amt.'</td></tr>'.
'<tr><td><b>Credit Card:</b> </td><td>'.str_pad(substr(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['cc_number'])), strlen(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['cc_number']))) -4), 12, '*', STR_PAD_LEFT).'</td></tr>'.
'<tr><td><b>Authorization Code:</b> </td><td>'.$response->authorization_code.'</td></tr>'.
'<tr><td><b>Transaction ID:</b> </td><td>'.$response->transaction_id.'</td></tr>'.
'<tr><td><b>Promotion Code:</b> </td><td>'.$promo_code.'</td></tr>'.
'<tr><td><b>Payment submitted from IP address:</b> </td><td>'.get_client_ip().'</td></tr>'.
'</table><br>'.
'We strive to ensure that your experience with MitzvahOrganizer.com will be exceptional. Please don\'t hesitate to contact us if you have questions or encounter any issues. <br><br>'.
'Thank You, <br>'.
'The MitzvahOrganizer Team <br>'.
'<a href="'.$app_base.'">'.$app_base.'</a> <br>'.
'<a href="mailto:[email protected]">[email protected]</a> <br>'.
'</html>' ;
$pmail_from = '[email protected]';
$pmail_to["To"] = $_POST['email'];
$pmail_to["Bcc"] = $app_mail_bcc;
$pmail_subject = 'MitzvahOrganizer.com Purchase Receipt / Order Confirmation';
$pmail_body = $mail_body;
$pmail_host = get_cfg_var('SMTP');
$pmail_username = "";
$pmail_password = "";
$pmail_headers = array ('From' => $pmail_from,
'To' => $pmail_to["To"],
'Subject' => $pmail_subject,
'MIME-Version' => '1.0',
'Content-type' => 'text/html; charset=iso-8859-1');
$smtp = Mail::factory('smtp',
array ('host' => $pmail_host,
//'auth' => true,
'auth' => false,
'username' => $pmail_username,
'password' => $pmail_password
));
$pmail = $smtp->send($pmail_to, $pmail_headers, $pmail_body);
/*
if (PEAR::isError($pmail)) :
echo("<h3>Message delivery failed...</h3>");
echo $pmail->getMessage();
else :
echo '<h3>Thank you! Your message has been sent. We will respond soon.</h3>';
endif;
*/
//**** ************************** *****
$_SESSION['user_id'] = $last_id;
$_SESSION['logged_in'] = true;
$_SESSION['username'] = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['email']));
$_SESSION['user_first_name'] = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['first_name']));
$_SESSION['user_last_name'] = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['last_name']));
//$_SESSION['active_event'] = $row->active_event;
$_SESSION['rand_key'] = generate_random_string(32);
$_SESSION['delegate'] = $row->delegate;
write_log('I', $last_id, 'User '.$_SESSION['user_first_name'].' '.$_SESSION['user_last_name'].' logged on');
endif;
$form_message = "Congratulations - sign up successful! Click <b>Continue</b> to create your first Bar/Bat Mitzvah.";
unset($_POST['pwd_new']);
unset($_POST['pwd_new2']);
$signed_up = 1;
else :
$form_message = "Errors found!";
unset($_POST['pwd_new']);
unset($_POST['pwd_new2']);
endif;
else :
$_POST['email'] = $_SESSION['email'];
if (!empty($_GET['first_name'])) :
$_POST['first_name'] = trim($_GET['first_name']);
endif;
if (!empty($_GET['last_name'])) :
$_POST['last_name'] = trim($_GET['last_name']);
endif;
if (!empty($_GET['email'])) :
$_POST['email'] = trim($_GET['email']);
endif;
if (!empty($_GET['promo_code'])) :
$_POST['promo_code'] = trim($_GET['promo_code']);
endif;
endif;
$_POST['salt'] = hash('sha512', random_bytes(64));
?>
<script>
var active_tab = '';
promo_load = function()
{
$.ajax({
url: "ajax.php?call=promo_load&code=" + $("#promo_code").val() + "&sku=<?php echo $_GET['IX']; ?>&price=<?php echo $app_authorize_net_amt_first_event; ?>" ,
//url: "ajax.php?call=promo_load&code=" + "test",
cache: false,
dataType: "json",
success: function(json) {
$('#net_price').text(json.new_price);
if (json.new_price > 0)
{
$('#row_credit_1').show();
$('#row_credit_2').show();
$('#row_credit_3').show();
}
else
{
$('#row_credit_1').hide();
$('#row_credit_2').hide();
$('#row_credit_3').hide();
}
if ($("#promo_code").val() > ' ' && json.result == 'error')
{
alert('Promotion code is invalid for this purchase!');
}
}
,error: function (request, status, error)
{
$('#net_price').text('<?php echo $app_authorize_net_amt_first_event; ?>');
$("#promo_code").val('');
alert('Promotion code is invalid for this purchase!');
/* alert(status + ", " + error); */
}
})
}
encode_pwd = function()
{
if (document.getElementById('pwd_new').value)
{
document.getElementById('pwd_new').value = CryptoJS.SHA512(document.getElementById('salt').value + document.getElementById('pwd_new').value);
}
if (document.getElementById('pwd_new2').value)
{
document.getElementById('pwd_new2').value = CryptoJS.SHA512(document.getElementById('salt').value + document.getElementById('pwd_new2').value);
}
return true;
}
toggle_ref_source_other = function()
{
//alert('toggle ' + $("#ref_source").val());
if ($("#ref_source").val() == 'Other')
{
$('#ref_source_other').show();
}
else
{
$('#ref_source_other').hide();
$("#ref_source_other").val('');
}
}
$(document).ready(function()
{
//switch_tab('<?php echo $active_tab; ?>');
$("#tab_content_general").show();
toggle_ref_source_other();
promo_load();
}
)
</script>
<h1>Mitzvah Organizer Sign Up</h1>
<?php
if ($signed_up != 1) :
?>
<form style="" name="frm_signup" id="frm_signup" method="post" action="" onsubmit="encode_pwd();">
<input name="ajax_event_submitted" type="hidden" value="1" />
<input name="active_tab" id="active_tab" type="hidden" value="general" />
<div class="cleardiv">
</div>
<div class="tab_content" id="tab_content_general" style="position:relative;">
<!-- (c) 2005, 2014. Authorize.Net is a registered trademark of CyberSource Corporation --> <div class="AuthorizeNetSeal"> <script type="text/javascript" language="javascript">var ANS_customer_id="b7ff26a6-e014-4b15-835b-2b6cab8b74d3";</script> <script type="text/javascript" language="javascript" src="//verify.authorize.net/anetseal/seal.js" ></script> <a href="http://www.authorize.net/" id="AuthorizeNetText" target="_blank">Online Payments</a> </div>
<div class="form_header">
Sign Up Information
</div>
<table class="input_block">
<tr>
<td>
First Name
</td>
<td>
<input name="first_name" id="first_name" type="text" maxlength="50" value="<?php echo $_POST['first_name']; ?>" />
<?php show_form_error($ar_err['first_name']); ?>
</td>
</tr>
<tr>
<td>
Last Name
</td>
<td>
<input name="last_name" id="last_name" type="text" maxlength="50" value="<?php echo $_POST['last_name']; ?>" />
<?php show_form_error($ar_err['last_name']); ?>
</td>
</tr>
<tr>
<td>
Billing Street Address
</td>
<td>
<input name="street" id="street" type="text" maxlength="150" value="<?php echo $_POST['street']; ?>" />
<?php show_form_error($ar_err['street']); ?>
</td>
</tr>
<tr>
<td>
</td>
<td>
<input name="street2" id="street2" type="text" maxlength="150" value="<?php echo $_POST['street2']; ?>" />
<?php show_form_error($ar_err['street2']); ?>
</td>
</tr>
<tr>
<td>
Billing City
</td>
<td>
<input name="city" id="city" type="text" maxlength="50" value="<?php echo $_POST['city']; ?>" />
<?php show_form_error($ar_err['city']); ?>
</td>
</tr>
<tr>
<td>
Billing State
</td>
<td>
<?php
$sql_str = "SELECT DISTINCT country_sort_code, country FROM states order by country_sort_code";
$result_country = mysqli_query($GLOBALS['con'], $sql_str) or die('Database Error!');
$sql_union = '';
$str_union = '';
while ($row_country = mysqli_fetch_object($result_country)) :
$sql_union .= $str_union." (SELECT '__', '- - - - - - ".$row_country->country." - - - - - -') ".
"UNION (SELECT state, state_name FROM states WHERE country_sort_code = ".$row_country->country_sort_code." ORDER BY state_name) ";
$str_union = ' UNION ';
endwhile;
//echo $sql_union;
auto_complete('state', $_POST['state'], $_POST['state'], $sql_union, null, null, null, null);
?>
<?php /* ?>
<select name="state" id="state" >
<option value="">State...</option>
<?php
$sql_str = 'SELECT state, state_name FROM states ORDER BY state_name';
$result = mysqli_query($GLOBALS['con'], $sql_str) or die('Database Error!');
while ($row = mysqli_fetch_object($result)) :
$selected = '';
if ($_POST['state'] == $row->state) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$row->state.'" '.$selected.'>'.$row->state_name.'</option>';
endwhile;
?>
</select>
<?php */ ?>
<?php show_form_error($ar_err['state']); ?>
</td>
</tr>
<tr>
<td>
Billing Zip Code
</td>
<td>
<input name="zip" id="zip" type="text" maxlength="100" value="<?php echo $_POST['zip']; ?>" />
<?php show_form_error($ar_err['zip']); ?>
</td>
</tr>
<tr>
<td>
Phone
</td>
<td>
<input name="phone" id="phone" type="text" maxlength="20" value="<?php echo $_POST['phone']; ?>" />
<?php show_form_error($ar_err['phone']); ?>
</td>
</tr>
<tr>
<td>
Mobile
</td>
<td>
<input name="mobile" id="mobile" type="text" maxlength="20" value="<?php echo $_POST['mobile']; ?>" />
<?php show_form_error($ar_err['mobile']); ?>
</td>
</tr>
<tr>
<td>
Email
</td>
<td>
<input name="email" id="email" type="text" class="mail_field" maxlength="100" value="<?php echo $_POST['email']; ?>" /><a id="linkout_email" href="mailto:<?php echo $_POST['email']; ?>"><img class="link_out" src="img/link_out_icon.png" /></a>
<?php show_form_error($ar_err['email']); ?>
</td>
</tr>
<tr>
<td>
Create Password
</td>
<td>
<input name="salt" id="salt" type="hidden" value="<?php echo $_POST['salt']; ?>" />
<input name="pwd_new" id="pwd_new" type="password" maxlength="150" value="<?php echo $_POST['pwd_new']; ?>" />
<?php show_form_error($ar_err['pwd_new']); ?>
</td>
</tr>
<tr>
<td>
Confirm Password
</td>
<td>
<input name="pwd_new2" id="pwd_new2" type="password" maxlength="150" value="<?php echo $_POST['pwd_new2']; ?>" />
<?php show_form_error($ar_err['pwd_new2']); ?>
</td>
</tr>
<tr>
<td>
Security Question
</td>
<td>
<select name="security_question" id="security_question" >
<option value="">Select one...</option>
<?php
$sql_str = 'SELECT id, question FROM security_questions ORDER BY id';
$result = mysqli_query($GLOBALS['con'], $sql_str) or die('Database Error!');
while ($row = mysqli_fetch_object($result)) :
$selected = '';
if ($_POST['security_question'] == $row->question) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$row->question.'" '.$selected.'>'.$row->question.'</option>';
endwhile;
?>
</select>
<?php show_form_error($ar_err['security_question']); ?>
</td>
</tr>
<tr>
<td>
Security Answer
</td>
<td>
<input name="security_answer" id="security_answer" type="text" maxlength="100" value="<?php echo $_POST['security_answer']; ?>" />
<?php show_form_error($ar_err['security_answer']); ?>
</td>
</tr>
<tr>
<td>
Promotion Code
</td>
<td>
<input name="promo_code" id="promo_code" type="text" maxlength="30" value="<?php echo $_POST['promo_code']; ?>" style="width:195px;" />
<input type="button" name="btn_promo_code" value="Apply" onclick="promo_load();" />
<?php show_form_error($ar_err['promo_code']); ?>
</td>
</tr>
<tr>
<td colspan="2">
Your credit card will be charged <span style="font-size:16px; font-weight:bold;">$<span id="net_price"><?php echo $app_authorize_net_amt_first_event; ?></span></span>
</td>
</tr>
<tr id="row_credit_1">
<td>
Credit Card Number
</td>
<td>
<input name="cc_number" id="cc_number" type="text" maxlength="30" value="<?php echo $_POST['cc_number']; ?>" />
<?php show_form_error($ar_err['cc_number']); ?>
</td>
</tr>
<tr id="row_credit_2">
<td>
Expiration Date
</td>
<td>
<select name="cc_exp_month" id="cc_exp_month" style="width:150px;">
<option value="">Month</option>
<?php
for ($mo = 1; $mo <= 12; $mo++) :
$selected = '';
if ($_POST['cc_exp_month'] == $mo) :
$selected = 'selected="selected"';
endif;
$time = mktime(0, 0, 0, $mo, 1);
//$name = strftime("%b", $time);
echo '<option value="'.str_pad($mo, 2, '0', STR_PAD_LEFT).'" '.$selected.'>'.strftime('%B', $time).'</option>';
endfor;
?>
</select>
<select name="cc_exp_year" id="cc_exp_year" style="width:150px;">
<option value="">Year</option>
<?php
$curr_year = date('Y');
for ($yr = $curr_year; $yr <= $curr_year + 10; $yr++) :
$selected = '';
if ($_POST['cc_exp_year'] == $yr) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$yr.'" '.$selected.'>'.$yr.'</option>';
endfor;
?>
</select>
<?php show_form_error($ar_err['cc_exp_date']); ?>
</td>
</tr>
<tr id="row_credit_3">
<td>
Name on Card
</td>
<td>
<input name="cc_name" id="cc_name" type="text" maxlength="30" value="<?php echo $_POST['cc_name']; ?>" />
<?php show_form_error($ar_err['cc_name']); ?>
</td>
</tr>
<tr valign="top">
<td class="label">
Verification image:
</td>
<td>
<div style="float:left; width:130px; height:22px; overflow:hidden;">
<img id="signup_captcha" style="vertical-align:top; margin-left:5px;" src="mod/_captcha.php" />
<img style="vertical-align:middle; cursor:pointer;" src="img/reload.png" onclick="reload_captcha('signup_captcha');" />
</div>
</td>
</tr>
<tr valign="top">
<td class="label">
Verification text:
</td>
<td>
<input type="text" id="captcha" name="captcha" class="input-box" maxlength="10" />
<?php show_form_error($ar_err['captcha']); ?>
</td>
</tr>
<tr valign="top">
<td class="label">
How did you hear about us:
</td>
<td>
<select name="ref_source" id="ref_source" onchange="toggle_ref_source_other();" style="width:150px;">
<option value="">Please select...</option>
<?php
$ref_source_list = 'MitzvahMarket.com,Facebook,Print Ad,Flyer,Celebrate Showcase,Friend,Email,Temple Ad,Google,Bing,Yahoo,Other';
$ref_source_array = explode(',', $ref_source_list);
foreach($ref_source_array as $ref_source_value) :
$selected = '';
if ($_POST['ref_source'] == $ref_source_value) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$ref_source_value.'" '.$selected.'>'.$ref_source_value.'</option>';
endforeach;
?>
</select>
<input type="text" id="ref_source_other" name="ref_source_other" value="<?php echo $_POST['ref_source_other']; ?>" maxlength="30" style="display:none; width:150px;" />
</td>
</tr>
<tr>
<td>
</td>
<td>
<input name="agree_terms" id="agree_terms" type="checkbox" maxlength="30" value="1" <?php if ($_POST['agree_terms'] == '1') echo 'checked="checked"'; ?> />
I have read and agree with MitzvahOrganizer.com <a href="javascript:window_popup('terms_window','terms_of_use');">Terms of Use</a>.
<?php show_form_error($ar_err['agree_terms']); ?>
</td>
</tr>
</table>
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<div class="form_strip">
<span class="form_message">
<?php echo $form_message; ?>
</span>
<input type="button" name="xsubmit" value="Submit" onclick="encode_pwd(); this.form.submit();" />
<input type="button" value="Cancel" onclick="window.location.href = 'index.php?IX=home'" />
</div>
</form>
<?php
else :
echo "<SCRIPT>setCookie('MitzvahPlanner_UserEmail','".$_SESSION['username']."',180);</SCRIPT>";
echo "<SCRIPT>setCookie('MitzvahPlanner_Customer','true',9999);</SCRIPT>";
?>
<div class="form_strip" style="border:none; height:75px;">
<?php echo form_message($form_message); ?><br />
<form>
<input type="button" value="Continue" onclick="window.location.href = 'index.php?IX=event_form'" />
</form>
</div>
<div class="tab_content" id="tab_content_general">
<?php echo get_text('welcome_signup'); ?>
</div>
<div class="form_strip" style="border:none;">
<form>
<input type="button" value="Continue" onclick="window.location.href = 'index.php?IX=event_form'" />
</form>
</div>
<?php
if (strtolower($_SERVER['SERVER_NAME']) == 'mitzvahorganizer.com' || strtolower($_SERVER['SERVER_NAME']) == 'www.mitzvahorganizer.com') :
?>
<script>
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-642804-14', 'mitzvahorganizer.com');
ga('send', 'event', 'Conversion', 'Purchase', '', {
nonInteraction: true
});
</script>
<?php
endif;
?>
<?php
endif;
?>