promo email add method to ensure uniqueness
was it free? - do before escape() which adds quotes
db->escape doesn't work by reference
get item price from paypal api