<?php include('_mod_security.php'); ?>
<?php
	//header('Content-Type: application/json');
	$code = mysqli_real_escape_string($GLOBALS['con'], $_GET['code']);
	$sku = mysqli_real_escape_string($GLOBALS['con'], $_GET['sku']);
	$price = floatval($_GET['price']);
	$sql = "SELECT * FROM promo_codes WHERE code = '".$code."' AND expires >= CURDATE() AND sku = '".$sku."' ";
	$result = mysqli_query($GLOBALS['con'], $sql);
	//echo '==='.$sql.'===';
	//var_dump($_SERVER);
	if (mysqli_num_rows($result) > 0) :
		$row = mysqli_fetch_object($result);
		if ($row->limited_use == 0 || ($row->limited_use == 1 && $row->uses_left > 0)) :
			if ($price == $row->reg_price) :
				switch ($row->type) :
					case 'pct_off' :
						$new_price = round($row->reg_price * (1 - ($row->value / 100)),2);
						break;
					case 'amt_off' :
						$new_price = round($row->reg_price - $row->value,2);
						break;
					case 'amt_sale' :
						$new_price = round($row->value,2);
						break;
				endswitch;
				echo json_encode(array('new_price' => $new_price, 'result' => 'ok'));
			endif;
		else :
			echo json_encode(array('new_price' => $_GET['price'], 'result' => 'error'));
		endif;
	else :
		echo json_encode(array('new_price' => $_GET['price'], 'result' => 'error'));
	endif;
	/*
	*/
	//echo json_encode(array('invite_count' => '1', 'rsvp_y_count' => '2', 'rsvp_n_count' => '3', 'att_count' => '4'));
?>