<?php
require_once '_cspid_setup.php';

$base_url = "https://{$_SERVER['HTTP_HOST']}/";

$cspid = isset($_GET['cspid']) && validCSPID($_GET['cspid']) ? $_GET['cspid'] : SHOPSITE;
$cspname = '';
$affiliate_sid = '';
if(!preg_match('/^[0-9]{4}$/',$cspid)){header('HTTP/1.0 403 Forbidden', true, 403);exit();}
if(!isset($_COOKIE['ss_cspid']))
{
  setcookie('ss_cspid', $cspid, time() + (86400 * 60), '/', 'shopsite.com');
  if(($cspid == SS_REFER || $cspid == SS_CREFER) && isset($_GET['cspname']) && !isset($_COOKIE['ss_cspname']))
  {
    $cspname = $_GET['cspname'];
    if(!validCSPName($cspname)){header('HTTP/1.0 403 Forbidden', true, 403);exit();}
    setcookie('ss_cspname', $cspname, time() + (86400 * 60), '/', 'shopsite.com');
  }
  if(isset($_GET['aff_sid']) && !isset($_COOKIE['ss_aff_sid']))
  {
    $affiliate_sid = $_GET['aff_sid'];
    if(!validCSPName($affiliate_sid)){header('HTTP/1.0 403 Forbidden', true, 403);exit();}
    setcookie('ss_aff_sid', $affiliate_sid, time() + (86400 * 60), '/', 'shopsite.com');
  }
}


/*
destination: usually will be saas.shopsite.com. If there is the parameter d= then look up where to end up.
*/

$dest = $base_url;
if(isset($_GET['d'])){
  switch($_GET['d']) {
    case 'exp':
      $dest .= 'express';
      break;
    case 'prc':
      $dest .= 'pricing.php';
      break;
  }
}

/* Write out to the log */
$dt = new DateTime("now", new DateTimeZone('America/Denver'));
$date = $dt->format('Y-m-d H:i:s');
if(isset($_SERVER['HTTP_REFERER']))
  $log = "$date\t$cspid\t$cspname\t{$_SERVER['REMOTE_ADDR']}\t$affiliate_sid\t{$_SERVER['HTTP_REFERER']}\n";
else
  $log = "$date\t$cspid\t$cspname\t{$_SERVER['REMOTE_ADDR']}\t$affiliate_sid\t\n";

file_put_contents('/var/www/logs/saastrack.log', $log, FILE_APPEND);

header("location: $dest");

?>