Attaching Files to Order

klarsen · October 5, 2006

I get a lot of orders by fax from customers. Fortunately, my faxes are also saved as image files on my hard drive.

I'd like to add these files to oscommerce, by attaching them to the proper order as an item in the order status history.

To that end, I've added a "file_attached" field at the end of the orders_status_history table.

So that I can upload the file, in admin/orders.php, I've added the following code after the comments box:

		<td class="main"><?php echo tep_draw_file_field('file_attached', $file_attached); ?></td>

Then, to process this information, I've added the following code near the top of admin/orders.php, right after the email status code:

//Begin line added for Order Entry Attach File Mod
	if($file_attached = new upload('file_attached', DIR_HD_ATTACH)) { 
	}
//End line added for Order Entry Attach File Mod

And I modified the query that inserts the information into the table as follows:

		  tep_db_query("insert into " . TABLE_ORDERS_STATUS_HISTORY . " (orders_id, orders_status_id, date_added, customer_notified, comments, file_attached) values ('" . (int)$oID . "', '" . tep_db_input($status) . "', now(), '" . tep_db_input($customer_notified) . "', '" . tep_db_input($comments) . "', '" . $file_attached->filename . "')");

I have, of course, defined DIR_HD_ATTACH to be a new, available directory, permissions set to 777, one that is currently correctly getting files from another part of oscommerce.

I have also put proper code in to display a link to view the file.

I believe I've covered everything, and it appears to run, except that I get a warning message: "Warning: No file uploaded" regardless of what I do. I am NOT getting a "directory not writeable" error, and when I put in code to check the file name right before the upload command, it appears to be correct.

Can anyone tell me what I've done wrong?

So that you can see the issue in context, here is the entire admin/orders.php:

<?php

/*

$Id: orders.php,v 1.2 2005/11/14 15:54:47 loic Exp $

Modified by Step by Step Manual Order Entry v1.8 2006/04/13

Modified by Order Entry v2.5 2006/04/27

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

Released under the GNU General Public License

*/

require('includes/application_top.php');

require(DIR_WS_CLASSES . 'currencies.php');

$currencies = new currencies();

$orders_statuses = array();

$orders_status_array = array();

$orders_status_query = tep_db_query("select orders_status_id, orders_status_name from " . TABLE_ORDERS_STATUS . " where language_id = '" . (int)$languages_id . "'");

while ($orders_status = tep_db_fetch_array($orders_status_query)) {

$orders_statuses[] = array('id' => $orders_status['orders_status_id'],

'text' => $orders_status['orders_status_name']);

$orders_status_array[$orders_status['orders_status_id']] = $orders_status['orders_status_name'];

}

$action = (isset($HTTP_GET_VARS['action']) ? $HTTP_GET_VARS['action'] : '');

if (tep_not_null($action)) {

switch ($action) {

case 'update_order':

$oID = tep_db_prepare_input($HTTP_GET_VARS['oID']);

$status = tep_db_prepare_input($HTTP_POST_VARS['status']);

$comments = tep_db_prepare_input($HTTP_POST_VARS['comments']);

$order_updated = false;

$check_status_query = tep_db_query("select customers_name, customers_email_address, orders_status, date_purchased from " . TABLE_ORDERS . " where orders_id = '" . (int)$oID . "'");

$check_status = tep_db_fetch_array($check_status_query);

if ( ($check_status['orders_status'] != $status) || tep_not_null($comments) || tep_not_null($file_attached)) {

tep_db_query("update " . TABLE_ORDERS . " set orders_status = '" . tep_db_input($status) . "', last_modified = now() where orders_id = '" . (int)$oID . "'");

$customer_notified = '0';

if (isset($HTTP_POST_VARS['notify']) && ($HTTP_POST_VARS['notify'] == 'on')) {

$notify_comments = '';

if (isset($HTTP_POST_VARS['notify_comments']) && ($HTTP_POST_VARS['notify_comments'] == 'on')) {

$notify_comments = sprintf(EMAIL_TEXT_COMMENTS_UPDATE, $comments) . "\n\n";

}

/* commented and replaced for Email Subject contribution v1.5 2947

$email = STORE_NAME . "\n" . EMAIL_SEPARATOR . "\n" . EMAIL_TEXT_ORDER_NUMBER . ' ' . $oID . "\n" . EMAIL_TEXT_INVOICE_URL . ' ' . tep_catalog_href_link(FILENAME_CATALOG_ACCOUNT_HISTORY_INFO, 'order_id=' . $oID, 'SSL') . "\n" . EMAIL_TEXT_DATE_ORDERED . ' ' . tep_date_long($check_status['date_purchased']) . "\n\n" . $notify_comments . sprintf(EMAIL_TEXT_STATUS_UPDATE, $orders_status_array[$status]);

tep_mail($check_status['customers_name'], $check_status['customers_email_address'], EMAIL_TEXT_SUBJECT, $email, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);

$customer_notified = '1';

*/

// begin replacement section for Email Subject contribution v1.5 2947

$email = STORE_NAME . "\n" . EMAIL_SEPARATOR . "\n" . EMAIL_TEXT_ORDER_NUMBER . ' ' . $oID . "\n" . EMAIL_TEXT_INVOICE_URL . ' ' . tep_catalog_href_link(FILENAME_CATALOG_ACCOUNT_HISTORY_INFO, 'order_id=' . $oID, 'SSL') . "\n" . EMAIL_TEXT_DATE_ORDERED . ' ' . tep_date_long($check_status['date_purchased']) . "\n\n\n" . $notify_comments . sprintf(EMAIL_TEXT_STATUS_UPDATE, $orders_status_array[$status]);

tep_mail($check_status['customers_name'], $check_status['customers_email_address'], EMAIL_TEXT_SUBJECT_1. $oID . EMAIL_TEXT_SUBJECT_2 . $orders_status_array[$status], $email, STORE_OWNER, EMAIL_FROM_CUSTSVC);

$customer_notified = '1';

// end replacement section for Email Subject contribution v1.5 2947

}

$messageStack->add_session(DIR_HD_ATTACH, 'success');

$messageStack->add_session($file_attached, 'file_attached');

//Begin line added for Order Entry Attach File Mod

if($file_attached = new upload('file_attached', DIR_HD_ATTACH)) {

}

//End line added for Order Entry Attach File Mod

$messageStack->add_session($file_attached, 'file_attached');

tep_db_query("insert into " . TABLE_ORDERS_STATUS_HISTORY . " (orders_id, orders_status_id, date_added, customer_notified, comments, file_attached) values ('" . (int)$oID . "', '" . tep_db_input($status) . "', now(), '" . tep_db_input($customer_notified) . "', '" . tep_db_input($comments) . "', '" . $file_attached->filename . "')");

$order_updated = true;

}

if ($order_updated == true) {

$messageStack->add_session(SUCCESS_ORDER_UPDATED, 'success');

} else {

$messageStack->add_session(WARNING_ORDER_NOT_UPDATED, 'warning');

}

tep_redirect(tep_href_link(FILENAME_ORDERS, tep_get_all_get_params(array('action')) . 'action=edit'));

break;

case 'deleteconfirm':

$oID = tep_db_prepare_input($HTTP_GET_VARS['oID']);

tep_remove_order($oID, $HTTP_POST_VARS['restock']);

tep_redirect(tep_href_link(FILENAME_ORDERS, tep_get_all_get_params(array('oID', 'action'))));

break;

}

if (($action == 'edit') && isset($HTTP_GET_VARS['oID'])) {

$oID = tep_db_prepare_input($HTTP_GET_VARS['oID']);

$orders_query = tep_db_query("select orders_id from " . TABLE_ORDERS . " where orders_id = '" . (int)$oID . "'");

$order_exists = true;

if (!tep_db_num_rows($orders_query)) {

$order_exists = false;

$messageStack->add(sprintf(ERROR_ORDER_DOES_NOT_EXIST, $oID), 'error');

}

include(DIR_WS_CLASSES . 'order.php');

?>

<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN">

<head>

</head>

<?php

require(DIR_WS_INCLUDES . 'header.php');

?>

<tr>

<td width="<?php echo BOX_WIDTH; ?>" valign="top"><table border="0" width="<?php echo BOX_WIDTH; ?>" cellspacing="1" cellpadding="1" class="columnLeft">

<?php require(DIR_WS_INCLUDES . 'column_left.php'); ?>

</table></td>

<?php

if (($action == 'edit') && ($order_exists == true)) {

$order = new order($oID);

?>

<tr>

<tr>

<td class="pageHeading"><?php echo HEADING_TITLE . ' (' . HEADING_TITLE_NUMBER . ' ' . $oID . '<br> ' . HEADING_TITLE_DATE . ' ' . tep_datetime_short($order->info['date_purchased']) . ')'; ?></td>

<td class="pageHeading" align="right"><?php echo '<a href="' . tep_href_link(FILENAME_ORDERS_EXPORT, 'id=' . $HTTP_GET_VARS['oID']) . '" TARGET="_blank">' . tep_image_button('button_export.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_EDIT, 'oID=' . $_GET['oID']) . '">' . tep_image_button('button_edit.gif', IMAGE_EDIT) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_INVOICE, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . tep_image_button('button_invoice.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_PACKINGSLIP, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . tep_image_button('button_packingslip.gif', IMAGE_ORDERS_PACKINGSLIP) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS, tep_get_all_get_params(array('action'))) . '">' . tep_image_button('button_back.gif', IMAGE_BACK) . '</a> '; ?></td>

</tr>

</table></td>

</tr>

<tr>

<tr>

</tr>

<tr>

<tr>

<td class="main"><?php echo tep_address_format($order->customer['format_id'], $order->customer, 1, '', '<br>'); ?></td>

</tr>

<tr>

</tr>

<tr>

<td class="main"><?php echo $order->customer['telephone']; ?></td>

</tr>

<tr>

<td class="main"><?php echo '<a href="mailto:' . $order->customer['email_address'] . '"><u>' . $order->customer['email_address'] . '</u></a>'; ?></td>

</tr>

</table></td>

<tr>

<td class="main"><?php echo tep_address_format($order->delivery['format_id'], $order->delivery, 1, '', '<br>'); ?></td>

</tr>

</table></td>

<tr>

<td class="main"><?php echo tep_address_format($order->billing['format_id'], $order->billing, 1, '', '<br>'); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

</tr>

<tr>

<tr>

<td class="main"><?php echo $order->info['payment_method']; ?></td>

</tr>

<tr>

<?php

if (tep_not_null($order->info['cc_type']) || tep_not_null($order->info['cc_owner']) || tep_not_null($order->info['cc_number'])) {

?>

<tr>

</tr>

<tr>

</tr>

<tr>

<td class="main"><?php echo $order->info['cc_owner']; ?></td>

</tr>

<tr>

<td class="main"><?php echo $order->info['cc_number']; ?></td>

</tr>

<tr>

<td class="main"><?php echo $order->info['cc_expires']; ?></td>

</tr>

<?php

}

?>

</table></td><td><table>

<?php

if (tep_not_null($order->info['ip_order_no']) || tep_not_null($order->info['ip_requested_by']) || tep_not_null($order->info['ip_contact_person'])) {

?>

<tr>

</tr>

<tr>

<td class="main"><?php echo $order->info['ip_order_no']; ?></td>

</tr>

<tr>

<td class="main"><?php echo $order->info['ip_requested_by']; ?></td>

</tr>

<tr>

<td class="main"><?php echo $order->info['ip_contact_person']; ?></td>

</tr></table></td></tr>

<?php

}

?>

</table></td></tr></table></td>

</tr>

<tr>

</tr>

<tr>

</tr>

<?php

for ($i=0, $n=sizeof($order->products); $i<$n; $i++) {

echo ' <tr class="dataTableRow">' . "\n" .

' <td class="dataTableContent" valign="top" align="right">' . $order->products[$i]['qty'] . ' x</td>' . "\n" .

' <td class="dataTableContent" valign="top">' . $order->products[$i]['name'];

if (isset($order->products[$i]['attributes']) && (sizeof($order->products[$i]['attributes']) > 0)) {

for ($j = 0, $k = sizeof($order->products[$i]['attributes']); $j < $k; $j++) {

echo '<br><nobr><small> <i> - ' . $order->products[$i]['attributes'][$j]['option'] . ': ' . $order->products[$i]['attributes'][$j]['value'];

if ($order->products[$i]['attributes'][$j]['price'] != '0') echo ' (' . $order->products[$i]['attributes'][$j]['prefix'] . $currencies->format($order->products[$i]['attributes'][$j]['price'] * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']) . ')';

echo '</i></small></nobr>';

}

echo ' </td>' . "\n" .

' <td class="dataTableContent" valign="top">' . $order->products[$i]['model'] . '</td>' . "\n" .

' <td class="dataTableContent" align="right" valign="top">' . tep_display_tax_value($order->products[$i]['tax']) . '%</td>' . "\n" .

' <td class="dataTableContent" align="right" valign="top"><b>' . $currencies->format($order->products[$i]['final_price'], true, $order->info['currency'], $order->info['currency_value']) . '</b></td>' . "\n" .

' <td class="dataTableContent" align="right" valign="top"><b>' . $currencies->format(tep_add_tax($order->products[$i]['final_price'], $order->products[$i]['tax']), true, $order->info['currency'], $order->info['currency_value']) . '</b></td>' . "\n" .

' <td class="dataTableContent" align="right" valign="top"><b>' . $currencies->format($order->products[$i]['final_price'] * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']) . '</b></td>' . "\n" .

' <td class="dataTableContent" align="right" valign="top"><b>' . $currencies->format(tep_add_tax($order->products[$i]['final_price'], $order->products[$i]['tax']) * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']) . '</b></td>' . "\n";

echo ' </tr>' . "\n";

}

?>

<tr>

<?php

for ($i = 0, $n = sizeof($order->totals); $i < $n; $i++) {

echo ' <tr>' . "\n" .

' <td align="right" class="smallText">' . $order->totals[$i]['title'] . '</td>' . "\n" .

' <td align="right" class="smallText">' . $order->totals[$i]['text'] . '</td>' . "\n" .

' </tr>' . "\n";

}

?>

</table></td>

</tr>

</table></td>

</tr>

<tr>

</tr>

<tr>

<tr>

</tr>

<?php

$orders_history_query = tep_db_query("select orders_status_history_id, orders_status_id, date_added, customer_notified, comments, file_attached from " . TABLE_ORDERS_STATUS_HISTORY . " where orders_id = '" . tep_db_input($oID) . "' order by date_added");

if (tep_db_num_rows($orders_history_query)) {

while ($orders_history = tep_db_fetch_array($orders_history_query)) {

echo ' <tr>' . "\n" .

' <td class="smallText" align="center">' . tep_datetime_short($orders_history['date_added']) . '</td>' . "\n" .

' <td class="smallText" align="center">';

if ($orders_history['customer_notified'] == '1') {

echo tep_image(DIR_WS_ICONS . 'tick.gif', ICON_TICK) . "</td>\n";

} else {

echo tep_image(DIR_WS_ICONS . 'cross.gif', ICON_CROSS) . "</td>\n";

}

echo ' <td class="smallText">' . $orders_status_array[$orders_history['orders_status_id']] . '</td>' . "\n" .

' <td class="smallText">' . "\n";

if (tep_not_null($orders_history['file_attached'])) {

echo tep_href_link(DIR_WHD_ATTACH . $orders_history['file_attached']) . '">' . $orders_history['file_attached'] . '</a><br>' . "\n";

}

echo nl2br(tep_db_output($orders_history['comments'])) . ' </td>' . "\n" .

' </tr>' . "\n";

}

} else {

echo ' <tr>' . "\n" .

' <td class="smallText" colspan="5">' . TEXT_NO_ORDER_HISTORY . '</td>' . "\n" .

' </tr>' . "\n";

}

?>

</table></td>

</tr>

<tr>

</tr>

<tr>

</tr>

</tr></table></td>

</tr>

<tr>

</tr>

<tr>

<tr>

<tr>

<td class="main"><b><?php echo ENTRY_STATUS; ?></b> <?php echo tep_draw_pull_down_menu('status', $orders_statuses, $order->info['orders_status']); ?></td>

</tr>

<tr>

</tr>

</table></td>

<!-- <td valign="top"><?php echo tep_image_submit('button_update.gif', IMAGE_UPDATE); ?></td>

</tr>

</table></td>

</form></tr>

<tr>

<td colspan="2" align="right"><?php echo '<a href="' . tep_href_link(FILENAME_ORDERS_EDIT, 'oID=' . $_GET['oID']) . '">' . tep_image_button('button_edit.gif', IMAGE_EDIT) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_INVOICE, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . tep_image_button('button_invoice.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_PACKINGSLIP, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . tep_image_button('button_packingslip.gif', IMAGE_ORDERS_PACKINGSLIP) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS, tep_get_all_get_params(array('action'))) . '">' . tep_image_button('button_back.gif', IMAGE_BACK) . '</a> '; ?></td>

</tr> -->

</tr>

</table></td>

</form></tr>

<tr>

<td colspan="2" align="right"><?php echo '<a href="' . tep_href_link(FILENAME_ORDERS_EXPORT, 'id=' . $HTTP_GET_VARS['oID']) . '" TARGET="_blank">' . tep_image_button('button_export.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_INVOICE, 'oID=' . $HTTP_GET_VARS['oID']) . '" TARGET="_blank">' . tep_image_button('button_invoice.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS_PACKINGSLIP, 'oID=' . $HTTP_GET_VARS['oID']) . '" TARGET="_blank">' . tep_image_button('button_packingslip.gif', IMAGE_ORDERS_PACKINGSLIP) . '</a> <a href="' . tep_href_link(FILENAME_ORDERS, tep_get_all_get_params(array('action'))) . '">' . tep_image_button('button_back.gif', IMAGE_BACK) . '</a> <a href="' . tep_href_link(FILENAME_EDIT_ORDERS, 'oID=' . $HTTP_GET_VARS['oID']) . '">' . tep_image_button('button_modifier.gif', IMAGE_EDIT) . '</a>'; ?></td>

</tr>

<?php

} else {

?>

<tr>

<tr>

</form></tr>

<td class="smallText" align="right"><?php echo HEADING_TITLE_STATUS . ' ' . tep_draw_pull_down_menu('status', array_merge(array(array('id' => '', 'text' => TEXT_ALL_ORDERS)), $orders_statuses), '', 'onChange="this.form.submit();"'); ?></td>

</form></tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

<tr>

<?php

switch ($listing) {

case "id-asc":

$order = "o.orders_id";

break;

case "customers":

$order = "o.customers_name";

break;

case "customers-desc":

$order = "o.customers_name DESC";

break;

case "ottotal":

$order = "ot.value";

break;

case "ottotal-desc":

$order = "ot.value DESC";

break;

case "date-asc":

$order = "o.date_purchased";

break;

case "date-desc":

$order = "o.date_purchased DESC";

break;

case "status-asc":

$order = "s.orders_status_name";

break;

case "status-desc":

$order = "s.orders_status_name DESC";

break;

default:

$order = "o.orders_id DESC";

}

?>

<td class="dataTableHeadingContent"><a href="<?php echo "$PHP_SELF?listing=customers"; ?>"><?php echo tep_image_button('ic_up.gif', ' Sort ' . TABLE_HEADING_CUSTOMERS . ' --> A-B-C From

klarsen · October 5, 2006

Never mind. I left out the "multipart/form-data" indication for the form.

I get a lot of orders by fax from customers. Fortunately, my faxes are also saved as image files on my hard drive.

I'd like to add these files to oscommerce, by attaching them to the proper order as an item in the order status history.

To that end, I've added a "file_attached" field at the end of the orders_status_history table.

April 3, 2007

Never mind. I left out the "multipart/form-data" indication for the form.

KLarsen,

Thanks for assuring me that there is a way to accomplish my next OSC task. I am trying to allow the customer to attach a file (particularly .jpgs) to the Contact Us (/catalog/contact_us.php) email feature. I.E. When a customer wants to send a photo to be transferred to a t-shirt they would fill out the email and click attach file. It seems your solution might be a simple accomodation.

Thanks in advance,

Gerard

Gshock · May 28, 2007

Hi There,

Made the mods in your order.php and am getting the following messages:

1 - Success /home/user/public_html/catalog/images/proof/ (green bg)

2 - /tmp/phpZ8N9q9 (red bg?)

3 - Success Success: File upload saved successfully. (green bg)

4 - Object (red bg?)

5 - Success Success: Order has been successfully updated. (with green bg)

I am sure 1, 3 and 5 are as they should be, but having some difficulty nailing down the other two. I imagine I may have pulled over some additional code (from other mods) I didn't need while merging. If you would just verify that you don't get those, it would be appreciated.

It is uploading the image to the correct folder and updating the db, so I am light years of where I would be otherwise.

Also, should a link to the file show up in the order status comments or elsewhere?

Thanks for your work!

Attaching Files to Order

Recommended Posts

klarsen

Link to comment

Share on other sites

klarsen

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Gshock

Link to comment

Share on other sites

Join the conversation

Browse

Activity