'; if ($userCustID > 0) { $query = $db->prepare('SELECT custID, fname, lname, email, street, city, state, zip FROM bookCustomers WHERE custID = ?;'); $query->execute(array($userCustID)); $fname = ''; $lname = ''; $email = ''; $street = ''; $city = ''; $state = ''; $zip = ''; $custID = ''; $existing = ''; if ($query->rowCount() > 0) { $result = $query->fetch(); $fname = htmlspecialchars($result['fname']); $lname = htmlspecialchars($result['lname']); $email = htmlspecialchars($result['email']); $street = htmlspecialchars($result['street']); $city = htmlspecialchars($result['city']); $state = htmlspecialchars($result['state']); $zip = htmlspecialchars($result['zip']); $email = htmlspecialchars($result['email']); $existing = "

Welcome back $fname! Please confirm your mailing and email address.

"; } else { header('location: account.php?checkout=true'); exit(); } $email = htmlspecialchars($result['email']); $content .= <<

Shipping Information

$existing

Email:

First Name:

Last Name:

Street Address:

City:

State:

Zip:

$custID EOF; } else { header('location: account.php?checkout=true'); exit(); } $cartItems = count($bookArray); $sql = "SELECT ISBN, title, price, pages from bookdescriptions WHERE ISBN = ?"; for ($i = 1; $i < count($bookArray); $i++) { $sql .= " OR ISBN = ?"; } $isbnArray = array_map('strval', array_keys($bookArray)); // PHP please stop casting things that look like integers to integers $sql .= " ORDER BY title;"; $query = $db->prepare($sql); $query->execute($isbnArray); $total = 0; $shipping = 0; foreach ($query->fetchall() as $row) { $qty = $bookArray[$row['ISBN']]; $total += $row['price'] * $qty; $shipping += $row['pages'] * $qty; } $totalf = sprintf("$%.2f", $total); $shippingf = sprintf("$%.2f", pow($shipping, .25)); $grandTotalf = sprintf("$%.2f", pow($shipping, .25) + $total); $content .= "

Cart

$cartItems items in cart.

Sub-Total: $totalf

Shipping: $shippingf

Grand total: $grandTotalf

"; $content .= '