Most of the info on the CS-Cart website and forums about where certain files are located is wrong, because they have been changing the directory structure in every version.

This information is for version 4.1.2.

Themes repository. Originals are kept here. (I think.) When an addon is installed, its template files are copied from the repository area into the design area.

• var
  • themes_reopository
    • basic

Design directory. These are the templates that are actually used.

• design
  • themes
    • basic

Clear the cache in v4 by appending ?ctpl&cc to the admin.php URI.

Occasionally the templates contain hooks where one can prepend, append, or replace templates.

The hooks are generally only found where the developers needed to put them to develop their built-in addons. More often, you'll find you need to replace an entire template. You won't easily discover this method by looking at the built-in addons, because the developers have added hooks so that they don't need to override template files.

table cscart_payment_processors

  processor_id        int
  processor           string
  processor_script    string
  processor_template  string
  admin_template      string
  callback            char default 'N' -- not used
  type                char default 'P'

Areas:
  'C' client
  'A' admin

notifications:
  'C' customer
  'A' department
  'V' vendor

var/themes_repository/basic/templates/common/scripts.tpl
  includes the core javascript libraries
  executes $.runCart('C'), defined in js/tygh/core.js

js/tygh/core.js
  defines the Tygh object
  Tygh is generally passed as _
  assigns document to _.doc
  extends jquery
  $.runCart():
    attaches click, mousedown, keyup, keydown, and change events to $(_.doc)

For each parameter in the callback url, verify that it is correct for the stored order.

// paypal.php
$account_type = fn_validate_email($processor_data['processor_params']['account']) ? 'receiver_email' : 'receiver_id';
if ($_REQUEST[$account_type] != $processor_data['processor_params']['account']) {
    $pp_response['order_status'] = $paypal_statuses['denied'];
    $pp_response['reason_text'] = __('paypal_security_error');
    fn_finish_payment($_REQUEST['order_id'], $pp_response);
    exit;
}

payment_processors table is queried from functions (incomplete list):

  app/functions/fn.cart.php fn_get_payment_methods
  app/functions/fn.cart.php fn_get_checkout_payment_buttons
    creates empty array $checkout_buttons
    "include"s each payment processor's processor_script
    returns $checkout_buttons
    amazon and google payment methods populate $checkout_buttons

BOOTSTRAP

PAYMENT_NOTIFICATION

$_payment_id

$processor_data['processor_params']

$cart

$checkout_buttons[$_payment_id]

fn_cart_is_empty(cart)

fn_finish_payment(order_id, pp_response)

pp_response - dictionary pp_response['order_status'] - 'P' for placed, 'F' for failed (?) pp_response['reason_text'] - reason for failure

fn_order_placement_routines

fn_check_payment_script

fn_change_order_status

'N' canceled?
'O' open
'I' canceled?
'F'

fn_get_order_info

fn_get_processor_data

fn_get_payment_method_data

fn_flush()

fn_set_notification()

fn_url()

fn_format_price()

http://www.hungryweb.net/cs-cart-tutorials/how-to-modify-cs-cart-checkout-step-1-for-a-better-user-experience.html

http://forum.cs-cart.com/topic/34038-trying-to-override-a-tpl-file-using-my-changes-add-on/page__view__findpost__p__173233