<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 11/14/2003 *
 * ===============                              Last change: 11/13/2004 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : mailid_top.php                                   *
 * -------------------------------------------------------------------- *
 * Short description : Confirmation file for emails                     *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Bestaetigung von Mails                           *
 * -------------------------------------------------------------------- *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
require("inc/libs/security_functions.php");

// Init "action" and "what"
$GLOBALS['what'] = "";
$GLOBALS['action'] = "";

// Tell everyone we are in this module
$GLOBALS['module'] = "mailid"; 
$GLOBALS['output_mode'] = 0;

// Load the required file(s)
require("inc/config.php");

if (isBooleanConstantAndTrue('mxchange_installed')) {
	// Is the extension active
	if (!EXT_IS_ACTIVE("mailid", true)) {
		// Is not activated/installed yet!
		addFatalMessage(getMessage('EXTENSION_PROBLEM_EXT_INACTIVE'), "mailid");
	} // END - if

	// Secure all data
	$url_uid = 0; $url_bid = 0; $url_mid = 0; $code = 0; $mode = "";
	if (REQUEST_ISSET_GET(('uid')))     $url_uid = bigintval(REQUEST_GET('uid'));
	if (REQUEST_ISSET_GET(('mailid')))  $url_mid = bigintval(REQUEST_GET('mailid'));
	if (REQUEST_ISSET_GET(('bonusid'))) $url_bid = bigintval(REQUEST_GET('bonusid'));
	if (REQUEST_ISSET_GET(('code')))    $code    = bigintval(REQUEST_GET('code'));
	if (REQUEST_ISSET_GET(('mode')))    $mode    = REQUEST_GET('mode');

	// 01        1        12            2    2            21    1                   22     10
	if (($url_uid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (getTotalFatalErrors() == 0)) {
		// No image? Then output header
		if ($mode != "img") LOAD_INC_ONCE("inc/header.php");

		// Maybe he wants to confirm an email?
		if ($url_mid > 0) {
			$result = SQL_QUERY_ESC("SELECT id, link_type FROM `{!_MYSQL_PREFIX!}_user_links` WHERE stats_id=%s AND userid=%s LIMIT 1",
			 array($url_mid, $url_uid), __FILE__, __LINE__);
			$type = "mailid"; $DATA = $url_mid;
		} elseif ($url_bid > 0) 	{
			$result = SQL_QUERY_ESC("SELECT id, link_type FROM `{!_MYSQL_PREFIX!}_user_links` WHERE bonus_id=%s AND userid=%s LIMIT 1",
			 array($url_bid, $url_uid), __FILE__, __LINE__);
			$type = "bonusid"; $DATA = $url_bid;
		}

		if (SQL_NUMROWS($result) == 1) {
			// Is the stats ID valid?
			list($lid, $ltype) = SQL_FETCHROW($result);
			SQL_FREERESULT($result);
			switch ($ltype)
			{
			case "NORMAL":
				$result_mailid = SQL_QUERY_ESC("SELECT pool_id, userid, id FROM `{!_MYSQL_PREFIX!}_user_stats` WHERE id=%s LIMIT 1",
					array($url_mid), __FILE__, __LINE__);
				break;

			case "BONUS":
				$result_mailid = SQL_QUERY_ESC("SELECT id, id, is_notify FROM `{!_MYSQL_PREFIX!}_bonus` WHERE id=%s LIMIT 1",
					array($url_bid), __FILE__, __LINE__);
				break;
			}

			// Entry found?
			if (SQL_NUMROWS($result_mailid) == 1) {
				// Load data
				list($pool, $sender, $notify) = SQL_FETCHROW($result_mailid);

				// Correct notification switch in non-bonus mails
				if (($notify != "Y") && ($notify != "N")) $notify = "N";

				// Free some memory
				SQL_FREERESULT($result_mailid);

				// Set sender to 0 when we have a bonus mail
				if ($ltype == "BONUS") $sender = 0;

				// Is the user's ID unlocked?
				$result = SQL_QUERY_ESC("SELECT status, gender, surname, family, ref_payout FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
					array($url_uid), __FILE__, __LINE__);
				if (SQL_NUMROWS($result) == 1) {
					// Load data
					list($status, $gender, $sname, $fname, $ref_pay) = SQL_FETCHROW($result);

					// Free some memory
					SQL_FREERESULT($result);

					if ($status == "CONFIRMED") {
						// Update last activity
						SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET last_online=UNIX_TIMESTAMP(), last_module='mailid_top' WHERE userid=%s LIMIT 1",
							array($url_uid), __FILE__, __LINE__);

						// User has confirmed his account so we can procede...
						switch ($ltype)
						{
						case "NORMAL":
							$result = SQL_QUERY_ESC("SELECT payment_id FROM `{!_MYSQL_PREFIX!}_user_stats` WHERE pool_id=%s LIMIT 1",
								array(bigintval($pool)), __FILE__, __LINE__);

							// Entry found?
							if (SQL_NUMROWS($result) == 1) {
								list($pay) = SQL_FETCHROW($result);
								$time      = GET_PAY_POINTS($pay, "time");
								$payment   = GET_PAY_POINTS($pay, "payment");
								$VALID     = true;
							} // END - if

							// Free memory...
							SQL_FREERESULT($result);
							break;

						case "BONUS":
							$result = SQL_QUERY_ESC("SELECT time, points FROM `{!_MYSQL_PREFIX!}_bonus` WHERE id=%s LIMIT 1",
								array(bigintval($pool)), __FILE__, __LINE__);

							// Entry found?
							if (SQL_NUMROWS($result) == 1) {
								list($time, $payment) = SQL_FETCHROW($result);
								$VALID = true;
							}

							// Free memory...
							SQL_FREERESULT($result);
							break;
						}

						// Is this entry valid?
						if ($VALID) {
							if (($time == "0") && ($payment > 0)) $time = "1";
							if (($time > 0) && ($payment > 0)) {
								if (!empty($code)) {
									// Generate code
									$img_code = GEN_RANDOM_CODE(getConfig('code_length'), $code, $url_uid, $DATA);
								} // END - if

								switch ($mode) {
								case "add":
									// Init stats data
									$stats_data = 0;

									// Count clicks
									switch ($ltype)
									{
									case "NORMAL":
										SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_stats` SET clicks=clicks + 1 WHERE id=%s LIMIT 1",
											array($url_mid), __FILE__, __LINE__);

										// Update mediadata as well
										if (GET_EXT_VERSION("mediadata") >= "0.0.4") {
											// Update database
											MEDIA_UPDATE_ENTRY(array("total_clicks", "normal_clicks"), "add", 1);
										}
										$stats_data = $url_mid;
										break;

									case "BONUS":
										SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_bonus` SET clicks=clicks + 1 WHERE id=%s LIMIT 1",
											array($url_bid), __FILE__, __LINE__);

										// Update mediadata as well
										if (GET_EXT_VERSION("mediadata") >= "0.0.4") {
											// Update database
											MEDIA_UPDATE_ENTRY(array("total_clicks", "bonus_clicks"), "add", 1);
										}
										$stats_data = $url_bid;
										break;
									}

									// Export data into constants for the template
									define('_POINTS_VALUE'   , TRANSLATE_COMMA($payment));
									define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));

									// Only when user extension = v0.1.2: Update mails-confirmed counter
									// @TODO Rewrite these blocks to filter
									if (GET_EXT_VERSION("user") >= "0.1.2") {
										// Update counter
										SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET mails_confirmed=mails_confirmed + 1 WHERE userid=%s LIMIT 1",
											array($url_uid), __FILE__, __LINE__);

										// Update random confirmed as well?
										if (GET_EXT_VERSION("user") >= "0.3.4") {
											// Update second counter
											SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET rand_confirmed=rand_confirmed + 1 WHERE userid=%s LIMIT 1",
												array($url_uid), __FILE__, __LINE__);
										} // END - if
									} // END - if

									// Insert stats record
									USER_STATS_INSERT_RECORD($url_uid, $type, $stats_data);

									// Right code entered?
									if (bigintval(REQUEST_POST('gfx_check')) == $img_code) {
										// Add points over referal system is the default
										$locked = false;
										$template = "mailid_points_done";

										// Right code entered add points and remove entry
										if (($ref_pay > 0) && (getConfig('allow_direct_pay') != "Y")) {
											// Don't add points over the referal system
											$locked = true;
											$template = "mailid_points_locked";
										} // END - if

										// Count down ref_payout value
										SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET ref_payout=ref_payout-1 WHERE userid=%s AND ref_payout > 0 LIMIT 1",
											array($url_uid), __FILE__, __LINE__);

										// Add points
										unset($GLOBALS['ref_level']);
										ADD_POINTS_REFSYSTEM("mailid_okay", $url_uid, $payment, false, "0", $locked);

										// Shall I add bonus points for "turbo clickers" ?
										if (GET_EXT_VERSION("bonus") >= "0.2.2") {
											// Is an active-rallye running and this is not a notification mail?
											if ((getConfig('bonus_active') == "Y") && ($notify == "N")) {
												// Shall I exclude the webmaster's own userid from the active-rallye?
												if ((((getConfig('bonus_uid') == $url_uid) && (getConfig('bonus_include_own') == "Y")) || (getConfig('bonus_uid') != $url_uid)) && (getConfig('def_refid') != $url_uid)) {
													// Add points and remember ranking are done in this function....
													BONUS_ADD_TURBO_POINTS($DATA, $url_uid, $type);

													// Set template to mailid_points_done2 which contains a link to the ranking list
													$template = "mailid_points_done2";
													if ($locked) $template = "mailid_points_locked2";
													define('_UID_VALUE' , $url_uid);
													define('_TYPE_VALUE', $type);
													define('_DATA_VALUE', TRANSLATE_COMMA($DATA));
												} // END - if
											} // END - if
										} // END - if

										// Load total points
										define('__TOTAL_POINTS', TRANSLATE_COMMA(
											GET_TOTAL_DATA($url_uid, "user_points", "points") -
											GET_TOTAL_DATA($url_uid, "user_data", "used_points"))
										);

										// Load template
										LOAD_TEMPLATE($template);
									} else {
										// Wrong image code! So add points to sender's account
										unset($GLOBALS['ref_level']);
										ADD_POINTS_REFSYSTEM("mailid_payback", $sender, $payment, false, 0, false, "direct");

										// Load template
										LOAD_TEMPLATE("mailid_points_failed");
									}

									// Remove link from table
									SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_user_links` WHERE id=%s LIMIT 1",
										array(bigintval($lid)), __FILE__, __LINE__);
									break;

								case "img":
									GENERATE_IMAGE($img_code);
									break;

								case "confirm":
									if ($code > 0) {
										// Export data into constants for the template
										define('_CODE_VALUE', $code);
										define('_UID_VALUE' , $url_uid );
										define('_TYPE_VALUE', $type);
										define('_DATA_VALUE', $DATA);
										define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));
										if (getConfig('code_length') > 0) {
											// Generate Code
											define('_IMAGE_CODE', IMG_CODE($code, $type, $DATA, $url_uid));
											$templ = "mailid_enter_code";
										} else {
											// Disabled code
											define('__GFX_CODE', $img_code);
											$templ = "mailid_confirm_buttom";
										}

										// Load template
										LOAD_TEMPLATE($templ);
									}
									break;

								case "":
									// Ok, all data is valid and loaded. Finally let's output the timer... :-)
									// Export data into constants for the template
									define('_TIME_VALUE', $time);
									define('_TIM2_VALUE', strlen($time));
									define('_UID_VALUE' , $url_uid );
									define('_TYPE_VALUE', $type);
									define('_DATA_VALUE', $DATA);
									define('_RAND_VALUE', mt_rand(0, 99999));
									define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));

									// Load template
									LOAD_TEMPLATE("mailid_timer");
									break;
								} // END - switch
							} else {
								LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (6)</div>");
							}
						} else {
							LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (5)</div>");
						}
					} else {
						LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (4)</div>");
					}
				} else {
					SQL_FREERESULT($result);
					LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (3)</div>");
				}
			} else {
				SQL_FREERESULT($result);
				LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (2)</div>");
			}
		} else {
			SQL_FREERESULT($result);
			LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_failed\">{--MAIL_ALREADY_CONFIRMED--} (1)</div>");
		}

		// Insert footer if no image
		if ($mode != "img") {
			// Write footer
			LOAD_INC_ONCE("inc/footer.php");
		} // END - if
	}
} elseif ($mode != "img") {
	// You have to install first!
	LOAD_URL("install.php");
}

// Really all done here... ;-)
?>