Adding of request parameters partialy finished

[mailer.git] / inc / modules / member / what-order.php

diff --git a/inc/modules/member/what-order.php b/inc/modules/member/what-order.php
index a73cc895449baaa6c36b9a870278fdab428ec4db..d067869ada8be5cef63a6979014791387510a819 100644 (file)
--- a/inc/modules/member/what-order.php
+++ b/inc/modules/member/what-order.php
@@ -61,15 +61,21 @@ if (isAdmin()) $whereStatement = '';
 $links = countSumTotalData(getMemberId(), 'user_links', 'id', 'userid', true);
 
 // Do we have ext-holiday installed?
-$HOLIDAY = 'serid';
+// @TODO Rewrite this to a filter
+$HOLIDAY = 'userid';
 if ((isExtensionActive('holiday')) && (getExtensionVersion('holiday') >= '0.1.3')) {
        // Fetch also holiday activation data
        $HOLIDAY = 'holiday_active';
 } // END - if
 
-$result_mmails = SQL_QUERY_ESC("SELECT `userid`, `receive_mails`, `mail_orders`, `".$HOLIDAY."`
-FROM `{?_MYSQL_PREFIX?}_user_data`
-WHERE `userid`=%s AND `max_mails` > 0 LIMIT 1",
+$result_mmails = SQL_QUERY_ESC("SELECT
+       `userid`, `receive_mails`, `mail_orders`, `".$HOLIDAY."`
+FROM
+       `{?_MYSQL_PREFIX?}_user_data`
+WHERE
+       `userid`=%s AND
+       `max_mails` > 0
+LIMIT 1",
        array(getMemberId()), __FILE__, __LINE__);
 
 $mmails = SQL_NUMROWS($result_mmails);
@@ -121,9 +127,9 @@ LIMIT 1",
                // No entry found, so we need to check out the stats table as well... :)
                // We have to add that suff here, now we continue WITHOUT checking and check the text and subject against some filters
                $URL = '';
-               if (getConfig('test_text') == 'Y') {
+               if (getConfig('allow_url_in_text') == 'Y') {
                        // Test submitted text against some filters (length, URLs in text etc.)
-                       if ((strpos(strtolower(postRequestElement('text')), "https://") > -1) || (strpos(strtolower(postRequestElement('text')), 'http://') > -1) || (strpos(strtolower(postRequestElement('text')), "www") > -1)) {
+                       if ((strpos(strtolower(postRequestElement('text')), 'https://') > -1) || (strpos(strtolower(postRequestElement('text')), 'http://') > -1) || (strpos(strtolower(postRequestElement('text')), "www") > -1)) {
                                // URL found!
                                $URL = 'modules.php?module=login&what=order&code=' . getCode('URL_FOUND');
                        } // END - if
@@ -139,9 +145,9 @@ LIMIT 1",
                } // END - if
 
                // Shall I test the subject line against URLs?
-               if (getConfig('test_subj') == 'Y') {
+               if (getConfig('allow_url_in_subject') == 'Y') {
                        // Check the subject line for issues
-                       setRequestPostElement('subject', str_replace("\\", '[nl]', substr(postRequestElement('subject'), 0, 200)));
+                       setPostRequestElement('subject', str_replace("\\", '[nl]', substr(postRequestElement('subject'), 0, 200)));
                        if ((strpos(strtolower(postRequestElement('subject')), 'http://') > -1) || (strpos(strtolower(postRequestElement('subject')), "www") > -1)) {
                                // URL in subject found
                                $URL = 'modules.php?module=login&what=order&code=' . getCode('SUBJ_URL');
@@ -183,13 +189,13 @@ LIMIT 1",
                        // HTML or regular text mail?
                        if (postRequestElement('html') == 'Y') {
                                // Chek for valid HTML tags
-                               setRequestPostElement('text', checkHtmlTags(postRequestElement('text')));
+                               setPostRequestElement('text', checkHtmlTags(postRequestElement('text')));
 
                                // Maybe invalid tags found?
                                if (!isPostRequestElementSet('text')) $URL = 'modules.php?module=login&what=order&code=' . getCode('INVALID_TAGS')."&id=".$id;
                        } else {
                                // Remove any HTML code
-                               setRequestPostElement('text', str_replace('<', '{OPEN_HTML}', str_replace('>', '{CLOSE_HTML}', postRequestElement('text'))));
+                               setPostRequestElement('text', str_replace('<', '{OPEN_HTML}', str_replace('>', '{CLOSE_HTML}', postRequestElement('text'))));
                        }
                }
        } elseif (!isAdmin()) {
@@ -265,14 +271,14 @@ LIMIT 1",
                        SQL_FREERESULT($result);
 
                        // Implode array into string for the sending pool
-                       $RECEIVER = implode($TEST, ';');
+                       $receiver = implode($TEST, ';');
 
                        // Count array for maximum sent
                        $content['target_send'] = count($TEST);
 
                        // Update receiver list
                        SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `receive_mails`=`receive_mails`-1 WHERE `userid` IN (%s) LIMIT %s",
-                               array(convertReceivers($RECEIVER), $content['target_send']), __FILE__, __LINE__);
+                               array(convertReceivers($receiver), $content['target_send']), __FILE__, __LINE__);
 
                        // Is calculated max receivers larger than wanted receivers then reset it
                        if ($content['target_send'] > postRequestElement('receiver')) $content['target_send'] = bigintval(postRequestElement('receiver'));
@@ -281,7 +287,7 @@ LIMIT 1",
                        $USED = $content['target_send'] * getPaymentPoints(bigintval(postRequestElement('type')));
 
                        // Fix empty zip code
-                       if (!isPostRequestElementSet('zip')) setRequestPostElement('zip', 0);
+                       if (!isPostRequestElementSet('zip')) setPostRequestElement('zip', 0);
 
                        // Check if he has enougth points for this order and selected more than 0 receivers
                        if (($USED > 0) && ($USED <= $total) && ($content['target_send'] > 0)) {
@@ -297,7 +303,7 @@ LIMIT 1",
                                                                getMemberId(),
                                                                postRequestElement('subject'),
                                                                postRequestElement('text'),
-                                                               $RECEIVER,
+                                                               $receiver,
                                                                bigintval(postRequestElement('type')),
                                                                postRequestElement('url'),
                                                                bigintval(postRequestElement('cat')),
@@ -313,7 +319,7 @@ LIMIT 1",
                                                                getMemberId(),
                                                                postRequestElement('subject'),
                                                                postRequestElement('text'),
-                                                               $RECEIVER,
+                                                               $receiver,
                                                                bigintval(postRequestElement('type')),
                                                                postRequestElement('url'),
                                                                bigintval(postRequestElement('cat')),
@@ -344,7 +350,7 @@ LIMIT 1",
                                                        array(
                                                                postRequestElement('subject'),
                                                                postRequestElement('text'),
-                                                               $RECEIVER,
+                                                               $receiver,
                                                                bigintval(postRequestElement('type')),
                                                                postRequestElement('url'),
                                                                bigintval(postRequestElement('cat')),
@@ -373,7 +379,7 @@ LIMIT 1",
                                                        array(
                                                                postRequestElement('subject'),
                                                                postRequestElement('text'),
-                                                               $RECEIVER,
+                                                               $receiver,
                                                                bigintval(postRequestElement('type')),
                                                                postRequestElement('url'),
                                                                bigintval(postRequestElement('cat')),
@@ -552,7 +558,7 @@ LIMIT 1",
 
                                        default: // Unknown/invalid
                                                logDebugMessage(__FILE__, __LINE__, sprintf("Unknown order_mas_full config detected.", getConfig('order_max_full')));
-                                               $content['order_max_full'] = sprintf(getMessage('MEMBER_ORDER_ALLOWED_UNKNOWN'), getConfig('order_max_full'));
+                                               $content['order_max_full'] = getMessage('MEMBER_ORDER_ALLOWED_UNKNOWN');
                                                break;
                                } // END - switch
 
@@ -643,7 +649,7 @@ LIMIT 1",
                                        $add = '';
                                        if (isExtensionActive('html_mail')) {
                                                // Add some content when html extension is active
-                                               if ((getConfig('order_multi_page') == 'Y') || (isAdmin())) $add = "<tr><td colspan=\"2\" class=\"seperator bottom2\" height=\"5\">&nbsp;</td></tr>\n";
+                                               if ((getConfig('order_multi_page') == 'Y') || (isAdmin())) $add = "<tr><td colspan=\"2\" class=\"seperator bottom\" height=\"5\">&nbsp;</td></tr>\n";
                                                $content['html_extension'] = loadTemplate('member_order-html_intro', true);
                                        } else {
                                                // No HTML extension installed
@@ -690,7 +696,7 @@ LIMIT 1",
        loadTemplate('admin_settings_saved', false, getMessage('MEMBER_HAS_ZERO_MMAILS'));
 } else {
        // Please confirm some mails first
-       loadTemplate('admin_settings_saved', false, sprintf(getMessage('MEMBER_LINKS_LEFT'), $links, getConfig('unconfirmed')));
+       loadTemplate('admin_settings_saved', false, getMaskedMessage('MEMBER_LINKS_LEFT'), $links);
 }
 
 if (!empty($URL)) {