X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=beg.php;h=60afef8e96dafaaa2e761f64b7a22fc294e41dbc;hb=f34c00b4a31f6747e78c6cf88801888d1e84a123;hp=67e9855844707ace61455ef319cf8ee1004623ad;hpb=9afd6ec5878544a7982c50ed9c0dd7de37606d5b;p=mailer.git diff --git a/beg.php b/beg.php index 67e9855844..60afef8e96 100644 --- a/beg.php +++ b/beg.php @@ -1,7 +1,7 @@ 0) && (getConfig('beg_userid') != getUserData('userid'))) { + if ((isValidUserId(getUserData('userid'))) && (getConfig('beg_userid') != getUserData('userid'))) { // Update counter SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `beg_clicks`=`beg_clicks`+1 WHERE `userid`=%s LIMIT 1", array(getUserData('userid')), __FILE__, __LINE__); @@ -107,8 +106,7 @@ if (isGetRequestElementSet('userid')) { array(getUserData('userid'), detectRemoteAddr(), session_id()), __FILE__, __LINE__); // Entry not found, points set and not logged in? - if (((SQL_NUMROWS($result) == '0') || (isAdmin())) && ($points > 0) && (!isMember()) && (getConfig('beg_pay_mode') == 'NONE')) { - + if (((SQL_HASZERONUMS($result)) || (isAdmin())) && ($points > 0) && (!isMember()) && (getConfig('beg_pay_mode') == 'NONE')) { // Admin is testing? if (!isAdmin()) { // Remember remote address, userid and timestamp for next click @@ -129,26 +127,19 @@ if (isGetRequestElementSet('userid')) { // Add points to user or begging rallye account if (addPointsBeg(getUserData('userid'), $points)) { // Set 'done' message - $content['message'] = loadTemplate('beg_done', true); + $content['message'] = loadTemplate('beg_done', true, $content); } else { // Error! - $content['message'] = loadTemplate('beg_failed', true); + $content['message'] = loadTemplate('beg_failed', true, $content); } } else { // Error! - $content['message'] = loadTemplate('beg_failed', true); + $content['message'] = loadTemplate('beg_failed', true, $content); } } elseif (isMember()) { // Logged in user found! - $content['message'] = loadTemplate('beg_login', true); + $content['message'] = loadTemplate('beg_login', true, $content); } elseif (getConfig('beg_pay_mode') != 'NONE') { // Other pay-mode active! - // Prepare content for template - $content = array( - 'clicks' => $content['clicks'], - 'points' => $content['points'], - 'userid' => $content['userid'] - ); - // Load message template depending on pay-mode $content['message'] = loadTemplate('beg_pay_mode_'.strtolower(getConfig('beg_pay_mode')), true, $content); $pay = true; @@ -187,7 +178,7 @@ if (isGetRequestElementSet('userid')) { $errorCode = generateErrorCodeFromUserStatus(); } elseif ((getUserData('userid') == '0') || (getUserData('status') == 'failed')) { // Inalid or locked account, so let's find out - if (fetchUserData(getRequestElement('userid'), 'nickname')) { + if (fetchUserData(getRequestParameter('userid'), 'nickname')) { // Locked account $errorCode = getCode('ACCOUNT_LOCKED'); } else {