// Check for mode in GET
$mode = '';
-if (isGetRequestParameterSet('mode')) {
- $mode = getRequestParameter('mode');
+if (isGetRequestElementSet('mode')) {
+ $mode = getRequestElement('mode');
} // END - if
// Check for "faker"
// Add new transfer
if (getTransferCode() > 0) {
// Check for code
- $code = generateRandomCode(getTransferCode(), postRequestParameter('code_chk'), getMemberId(), $content['max_transferable']);
- $valid_code = ($code == postRequestParameter('code'));
+ $code = generateRandomCode(getTransferCode(), postRequestElement('code_chk'), getMemberId(), $content['max_transferable']);
+ $valid_code = ($code == postRequestElement('code'));
} else {
// Zero length (= disabled) is always valid!
$valid_code = true;
}
// Test password
- $valid_pass = ($pass == generateHash(postRequestParameter('password'), $pass));
+ $valid_pass = ($pass == generateHash(postRequestElement('password'), $pass));
// Test transfer amount
- $valid_amount = ((isPostRequestParameterSet('points')) && (postRequestParameter('points') <= $content['max_transferable']));
+ $valid_amount = ((isPostRequestElementSet('points')) && (postRequestElement('points') <= $content['max_transferable']));
// Test reason for transfer
- $valid_reason = (isPostRequestParameterSet('reason'));
+ $valid_reason = (isPostRequestElementSet('reason'));
// Test if a recipient is selected
- $valid_recipient = isValidUserId(postRequestParameter('to_userid'));
+ $valid_recipient = isValidUserId(postRequestElement('to_userid'));
// Re-check receivers and own personal data
- $result = SQL_QUERY_ESC("SELECT `userid`, `gender`, `surname`, `family`, `email` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `userid` IN ('%s','%s') AND `status`='CONFIRMED' LIMIT 2",
+ $result = SQL_QUERY_ESC("SELECT `userid`,`gender`,`surname`,`family`,`email` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `userid` IN ('%s','%s') AND `status`='CONFIRMED' LIMIT 2",
array(
getMemberId(),
- bigintval(postRequestParameter('to_userid'))
+ bigintval(postRequestElement('to_userid'))
), __FILE__, __LINE__);
// Do we have two entries?
// Default is userids for subject line
$SENDER = getMemberId();
- $RECIPIENT = bigintval(postRequestParameter('to_userid'));
+ $RECIPIENT = bigintval(postRequestElement('to_userid'));
// If nickname is installed we can set the nickname
// @TODO Rewrite this to a filter
$SENDER = $content['sender']['nickname'];
} // END - if
- if (($TEST_NICK_REC != postRequestParameter('to_userid')) && (!empty($TEST_NICK_REC))) {
+ if (($TEST_NICK_REC != postRequestElement('to_userid')) && (!empty($TEST_NICK_REC))) {
$RECIPIENT = $content['recipient']['nickname'];
} // END - if
} // END - if
// Remember transfer reason
- $content['reason'] = postRequestParameter('reason');
+ $content['reason'] = postRequestElement('reason');
// Generate tranafer id
- $content['trans_id'] = bigintval(generateRandomCode('10', mt_rand(0, 99999), getMemberId(), postRequestParameter('reason')));
+ $content['trans_id'] = bigintval(generateRandomCode('10', mt_rand(0, 99999), getMemberId(), postRequestElement('reason')));
// Add entries to both tables
- SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_transfers_in` (`userid`, `from_userid`, `points`, `reason`, `time_trans`, `trans_id`) VALUES (%s,%s,%s,'%s', UNIX_TIMESTAMP(),%s)",
+ SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_transfers_in` (`userid`,`from_userid`,`points`,`reason`,`time_trans`,`trans_id`) VALUES (%s,%s,%s,'%s', UNIX_TIMESTAMP(),%s)",
array(
- bigintval(postRequestParameter('to_userid')),
+ bigintval(postRequestElement('to_userid')),
getMemberId(),
- bigintval(postRequestParameter('points')),
- postRequestParameter('reason'),
+ bigintval(postRequestElement('points')),
+ postRequestElement('reason'),
$content['trans_id']
), __FILE__, __LINE__);
- SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_transfers_out` (`userid`, `to_userid`, `points`, `reason`, `time_trans`, `trans_id`) VALUES (%s,%s,%s,'%s', UNIX_TIMESTAMP(),%s)",
+ SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_transfers_out` (`userid`,`to_userid`,`points`,`reason`,`time_trans`,`trans_id`) VALUES (%s,%s,%s,'%s', UNIX_TIMESTAMP(),%s)",
array(
getMemberId(),
- bigintval(postRequestParameter('to_userid')),
- bigintval(postRequestParameter('points')),
- postRequestParameter('reason'),
+ bigintval(postRequestElement('to_userid')),
+ bigintval(postRequestElement('points')),
+ postRequestElement('reason'),
$content['trans_id']
), __FILE__, __LINE__);
// Add points to account *directly* ...
- addPointsThroughReferalSystem('transfer', bigintval(postRequestParameter('to_userid')), bigintval(postRequestParameter('points')));
+ initReferalSystem();
+ addPointsThroughReferalSystem('transfer', bigintval(postRequestElement('to_userid')), bigintval(postRequestElement('points')));
- // ... and add it to current user's used points
- subtractPoints('transfer', getMemberId(), postRequestParameter('points'));
+ // ... and add it to current user's used points and ignore return status
+ subtractPoints('transfer', getMemberId(), postRequestElement('points'));
// First send email to recipient
- $message = loadEmailTemplate('member_transfer_recipient', $content, postRequestParameter('to_userid'));
+ $message = loadEmailTemplate('member_transfer_recipient', $content, postRequestElement('to_userid'));
sendEmail($content['recipient']['userid'], '{--TRANSFER_MEMBER_RECIPIENT_SUBJECT--}' . ': ' . $SENDER, $message);
// Second send email to sender
} elseif ($valid_code === false) {
// Invalid Touring code!
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_CODE--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
} elseif ($valid_pass === false) {
// Wrong password entered
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_PASSWORD--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
} elseif ($valid_amount === false) {
// Too much points entered
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_POINTS--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
} elseif ($valid_reason === false) {
// No transfer reason entered
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_REASON--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
} elseif ($valid_recipient === false) {
// No recipient selected
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_RECIPIENT--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
} elseif ($valid_data === false) {
// No recipient/sender selected
loadTemplate('admin_settings_unsaved', false, '{--TRANSFER_INVALID_DATA--}');
- unsetPostRequestParameter('ok');
+ unsetPostRequestElement('ok');
}
// Free result
<option value="0">{--SELECT_NONE--}</option>';
while (list($userid) = SQL_FETCHROW($result)) {
$OUT .= ' <option value="' . $userid . '"';
- if ((isPostRequestParameterSet('to_userid')) && (postRequestParameter('to_userid') == $userid)) {
+ if ((isPostRequestElementSet('to_userid')) && (postRequestElement('to_userid') == $userid)) {
$OUT .= ' selected="selected"';
} // END - if
$OUT .= '>' . $userid . ' ({%user,nickname,fixEmptyContentToDashes=' . $userid . '%})</option>';
$content['reason'] = '';
// Transfer maybe already entered valued'
- if (isPostRequestParameterSet('ok')) {
+ if (isPostRequestElementSet('ok')) {
// Get values from form
- $content['points'] = postRequestParameter('points');
- $content['reason'] = postRequestParameter('reason');
+ $content['points'] = postRequestElement('points');
+ $content['reason'] = postRequestElement('reason');
} // END - if
// Output form
$nothingMessage = '';
switch ($mode) {
case 'list_in':
- $sql = 'SELECT `trans_id`, `from_userid` AS party_userid, `points`, `reason`, `time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_in` WHERE `userid`=%s ORDER BY `time_trans` DESC LIMIT {?transfer_max?}';
+ $sql = 'SELECT `trans_id`,`from_userid` AS party_userid, `points`,`reason`,`time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_in` WHERE `userid`=%s ORDER BY `time_trans` DESC LIMIT {?transfer_max?}';
$nothingMessage = '{--TRANSFER_NO_INCOMING_TRANSFERS--}';
$content['balance'] = '{--TRANSFER_TOTAL_INCOMING--}';
$content['title'] = '{--TRANSFER_LIST_INCOMING--}';
break;
case 'list_out':
- $sql = 'SELECT `trans_id`, `to_userid` AS party_userid, `points`, `reason`, `time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_out` WHERE `userid`=%s ORDER BY `time_trans` DESC LIMIT {?transfer_max?}';
+ $sql = 'SELECT `trans_id`,`to_userid` AS party_userid, `points`,`reason`,`time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_out` WHERE `userid`=%s ORDER BY `time_trans` DESC LIMIT {?transfer_max?}';
$nothingMessage = '{--TRANSFER_NO_OUTGOING_TRANSFERS--}';
$content['balance'] = '{--TRANSFER_TOTAL_OUTGOING--}';
$content['title'] = '{--TRANSFER_LIST_OUTGOING--}';
`reason` VARCHAR(255) NOT NULL DEFAULT '',
`time_trans` VARCHAR(10) NOT NULL DEFAULT 0,
`trans_type` ENUM('IN','OUT') NOT NULL DEFAULT 'IN',
-KEY (`party_userid`)
+INDEX (`party_userid`)
) ENGINE = HEAP COMMENT = 'Temporary transfer table'", array(getMemberId()), __FILE__, __LINE__);
// Let's begin with the incoming list
- $result = SQL_QUERY_ESC("SELECT `trans_id`, `from_userid`, `points`, `reason`, `time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_in` WHERE `userid`=%s ORDER BY `id` ASC LIMIT {?transfer_max?}",
+ $result = SQL_QUERY_ESC("SELECT `trans_id`,`from_userid`,`points`,`reason`,`time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_in` WHERE `userid`=%s ORDER BY `id` ASC LIMIT {?transfer_max?}",
array(getMemberId()), __FILE__, __LINE__);
- while ($DATA = SQL_FETCHROW($result)) {
- $DATA[] = 'IN';
- $DATA = implode("','", $DATA);
- $res_temp = SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_%s_transfers_tmp` (`trans_id`, `party_userid`, `points`, `reason`, `time_trans`, `trans_type`) VALUES ('" . $DATA . "')", array(getMemberId()), __FILE__, __LINE__);
+ while ($content = SQL_FETCHROW($result)) {
+ $content[] = 'IN';
+ $content = implode("','", $content);
+ $res_temp = SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_%s_transfers_tmp` (`trans_id`,`party_userid`,`points`,`reason`,`time_trans`,`trans_type`) VALUES ('" . $content . "')", array(getMemberId()), __FILE__, __LINE__);
} // END - while
// Free memory
SQL_FREERESULT($result);
// As the last table transfer data from outgoing table to temporary
- $result = SQL_QUERY_ESC("SELECT `trans_id`, `to_userid`, `points`, `reason`, `time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_out` WHERE `userid`=%s ORDER BY `id` LIMIT {?transfer_max?}",
+ $result = SQL_QUERY_ESC("SELECT `trans_id`,`to_userid`,`points`,`reason`,`time_trans` FROM `{?_MYSQL_PREFIX?}_user_transfers_out` WHERE `userid`=%s ORDER BY `id` LIMIT {?transfer_max?}",
array(getMemberId()), __FILE__, __LINE__);
- while ($DATA = SQL_FETCHROW($result)) {
- $DATA[] = 'OUT';
- $DATA = implode("','", $DATA);
- $res_temp = SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_%s_transfers_tmp` (`trans_id`, `party_userid`, `points`, `reason`, `time_trans`, `trans_type`) VALUES ('" . $DATA . "')", array(getMemberId()), __FILE__, __LINE__);
+ while ($content = SQL_FETCHROW($result)) {
+ $content[] = 'OUT';
+ $content = implode("','", $content);
+ $res_temp = SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_%s_transfers_tmp` (`trans_id`,`party_userid`,`points`,`reason`,`time_trans`,`trans_type`) VALUES ('" . $content . "')", array(getMemberId()), __FILE__, __LINE__);
} // END - while
// Free memory
SQL_FREERESULT($result);
// Search for entries
- $result = SQL_QUERY_ESC("SELECT `party_userid`, `trans_id`, `points`, `reason`, `time_trans`, `trans_type` FROM `{?_MYSQL_PREFIX?}_%s_transfers_tmp` ORDER BY `time_trans` DESC",
+ $result = SQL_QUERY_ESC("SELECT `party_userid`,`trans_id`,`points`,`reason`,`time_trans`,`trans_type` FROM `{?_MYSQL_PREFIX?}_%s_transfers_tmp` ORDER BY `time_trans` DESC",
array(getMemberId()), __FILE__, __LINE__);
$total = '0';
if (isFormSent()) {
// Save settings
SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `opt_in`='%s' WHERE `userid`=%s LIMIT 1",
- array(postRequestParameter('opt_in'), getMemberId()), __FILE__, __LINE__);
+ array(postRequestElement('opt_in'), getMemberId()), __FILE__, __LINE__);
// "Settings saved..."
displayMessage('{--SETTINGS_SAVED--}');