X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=beg.php;h=7dd2d6a78b399abe7048f7d462ee3bd14143c05d;hb=bf23be313dc997126f6e179d5c96c9b332071a81;hp=59d3572d675a507f0c501e34cd4cf57280a49b9f;hpb=9f6c30cc0e06098171d773d671292081ecee3d29;p=mailer.git diff --git a/beg.php b/beg.php index 59d3572d67..7dd2d6a78b 100644 --- a/beg.php +++ b/beg.php @@ -1,7 +1,7 @@ 0) && (getConfig('beg_userid') != getUserData('userid'))) { + if ((isValidUserId(getUserData('userid'))) && (getConfig('beg_userid') != getUserData('userid'))) { // Update counter SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `beg_clicks`=`beg_clicks`+1 WHERE `userid`=%s LIMIT 1", array(getUserData('userid')), __FILE__, __LINE__); @@ -107,8 +108,7 @@ if (isGetRequestElementSet('userid')) { array(getUserData('userid'), detectRemoteAddr(), session_id()), __FILE__, __LINE__); // Entry not found, points set and not logged in? - if (((SQL_NUMROWS($result) == 0) || (isAdmin())) && ($points > 0) && (!isMember()) && (getConfig('beg_pay_mode') == 'NONE')) { - + if (((SQL_HASZERONUMS($result)) || (isAdmin())) && ($points > 0) && (!isMember()) && (getConfig('beg_pay_mode') == 'NONE')) { // Admin is testing? if (!isAdmin()) { // Remember remote address, userid and timestamp for next click @@ -129,26 +129,19 @@ if (isGetRequestElementSet('userid')) { // Add points to user or begging rallye account if (addPointsBeg(getUserData('userid'), $points)) { // Set 'done' message - $content['message'] = loadTemplate('beg_done', true); + $content['message'] = loadTemplate('beg_done', true, $content); } else { // Error! - $content['message'] = loadTemplate('beg_failed', true); + $content['message'] = loadTemplate('beg_failed', true, $content); } } else { // Error! - $content['message'] = loadTemplate('beg_failed', true); + $content['message'] = loadTemplate('beg_failed', true, $content); } } elseif (isMember()) { // Logged in user found! - $content['message'] = loadTemplate('beg_login', true); + $content['message'] = loadTemplate('beg_login', true, $content); } elseif (getConfig('beg_pay_mode') != 'NONE') { // Other pay-mode active! - // Prepare content for template - $content = array( - 'clicks' => $content['clicks'], - 'points' => $content['points'], - 'userid' => $content['userid'] - ); - // Load message template depending on pay-mode $content['message'] = loadTemplate('beg_pay_mode_'.strtolower(getConfig('beg_pay_mode')), true, $content); $pay = true; @@ -185,9 +178,9 @@ if (isGetRequestElementSet('userid')) { } elseif ((getUserData('status') != 'CONFIRMED') && (getUserData('status') != 'failed')) { // Maybe locked/unconfirmed account? $errorCode = generateErrorCodeFromUserStatus(); - } elseif ((getUserData('userid') == 0) || (getUserData('status') == 'failed')) { + } elseif ((getUserData('userid') == '0') || (getUserData('status') == 'failed')) { // Inalid or locked account, so let's find out - if (fetchUserData(getRequestElement('userid'), 'nickname')) { + if (fetchUserData(getRequestParameter('userid'), 'nickname')) { // Locked account $errorCode = getCode('ACCOUNT_LOCKED'); } else {