<%
' Comersus Shopping Cart
' Comersus Open Technologies
' United States
' Software License can be found at License.txt
' http://www.comersus.com
' Details: show wish list to a third-person
%>
<%
on error resume next
dim connTemp, mySql, rsTemp
' get settings
pStoreFrontDemoMode = getSettingKey("pStoreFrontDemoMode")
pCurrencySign = getSettingKey("pCurrencySign")
pDecimalSign = getSettingKey("pDecimalSign")
pCompany = getSettingKey("pCompany")
pCompanyLogo = getSettingKey("pCompanyLogo")
pStoreLocation = getSettingKey("pStoreLocation")
pMoneyDontRound = getSettingKey("pMoneyDontRound")
pAuctions = getSettingKey("pAuctions")
pListBestSellers = getSettingKey("pListBestSellers")
pNewsLetter = getSettingKey("pNewsLetter")
pPriceList = getSettingKey("pPriceList")
pStoreNews = getSettingKey("pStoreNews")
pOneStepCheckout = getSettingKey("pOneStepCheckout")
call saveCookie()
' retrieve from querystring
pIdCustomer = getUserInput(request.querystring("idCustomer"),4)
pEmail = getUserInput(request.querystring("email"),30)
' authenticate
mySql="SELECT name, lastName, idCustomerType FROM customers WHERE idCustomer="&pIdCustomer& " AND email='" &pEmail& "'"
call getFromDatabase(mySql, rsTemp, "customerWishListView")
if rstemp.eof then
response.redirect "comersus_message.asp?message="&Server.Urlencode(getMsg(206,"Cannot retrieve"))
end if
pName =rstemp("name")
pLastName =rstemp("lastName")
pIdCustomerType =rstemp("idCustomerType")
' save into session for checkout
session("wishListIdCustomer")=pIdCustomer
' retrieve wish list
mySql="SELECT products.idProduct, description, sku, smallImageUrl FROM wishList, products WHERE products.idProduct=wishList.idProduct AND idCustomer="&pIdCustomer
call getFromDatabase(mySql, rsTemp, "customerWishListView")
if rstemp.eof then
response.redirect "comersus_message.asp?message="&Server.Urlencode(getMsg(207,"There are no items in the wish list"))
end if
%>
<%=getMsg(208,"W L for")%> <%=pName&" "&pLastName%>
<%=getMsg(209,"Select from")%>
<%=getMsg(210,"Item")%>
<%=getMsg(211,"Desc")%>
<%=getMsg(212,"Price")%>
<%
pWishListTotal=Cdbl(0)
do while not rstemp.eof
pPrice = getPrice(rstemp("idProduct"), pIdCustomerType, pIdCustomer)
%>
<%end if%>