X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fsponsor_functions.php;h=3b639ad7657b4b26b6f95eff57799f81331fee0f;hb=6e008d188bf9c7f8d4edc2a8799c61940eee48e7;hp=5d99a7d5a59d749c8c179a99ce76090b7b7621d2;hpb=b8c86fa12322603c24a88ea2b0fd3dbeba612752;p=mailer.git diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php index 5d99a7d5a5..3b639ad765 100644 --- a/inc/libs/sponsor_functions.php +++ b/inc/libs/sponsor_functions.php @@ -10,7 +10,12 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Funktionen fuer den Sponsorenbereich * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * @@ -37,7 +42,7 @@ if (!defined('__SECURITY')) { } // -function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_STATUS=false) { +function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $messageArray=array(), $RET_STATUS=false) { // Init a lot variables $SAVE = true; $UPDATE = false; @@ -62,7 +67,7 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S // Check only posted input entries not the submit button switch ($k) { - case "email": + case 'email': $ALREADY = false; if (!VALIDATE_EMAIL($v)) { // Email address is not valid @@ -90,7 +95,7 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S break; case "pass1": - $k = ""; $v = ""; + $k = ''; $v = ''; break; case "pass2": @@ -120,22 +125,22 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S if ((empty($POST['force'])) || (!IS_ADMIN())) $POST['force'] = 0; // SQL and message string is empty by default - $SQL = ""; $MSG = ""; + $sql = ''; $message = ''; // Update? if ($UPDATE) { // Update his data - $SQL = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET "; + $sql = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET "; foreach ($DATA['keys'] as $k => $v) { - $SQL .= $v."='%s', "; + $sql .= $v."='%s', "; } // Remove last ", " from SQL string - $SQL = substr($SQL, 0, -2)." WHERE id='%s' LIMIT 1"; + $sql = substr($sql, 0, -2)." WHERE id='%s' LIMIT 1"; $DATA['values'][] = bigintval(REQUEST_GET('id')); // Generate message - $MSG = SPONSOR_GET_MESSAGE(ADMIN_SPONSOR_UPDATED, "updated", $MSGs); + $message = SPONSOR_GET_MESSAGE(ADMIN_SPONSOR_UPDATED, "updated", $messageArray); $ret = "updated"; } elseif ((!$ALREADY) || (($POST['force'] == "1") && (IS_ADMIN()))) { // Add new sponsor, first add more data @@ -160,14 +165,14 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S $VALUES = str_repeat("%s', '", count($DATA['values']) - 1); // Generate string - $SQL = "INSERT INTO `{!_MYSQL_PREFIX!}_sponsor_data` (".$KEYS.") VALUES ('".$VALUES."%s')"; + $sql = "INSERT INTO `{!_MYSQL_PREFIX!}_sponsor_data` (".$KEYS.") VALUES ('".$VALUES."%s')"; // Generate message - $MSG = SPONSOR_GET_MESSAGE(getMessage('ADMIN_SPONSOR_ADDED'), "added", $MSGs); + $message = SPONSOR_GET_MESSAGE(getMessage('ADMIN_SPONSOR_ADDED'), "added", $messageArray); $ret = "added"; } elseif ((!$NO_UPDATE) && (IS_ADMIN())) { // Add all data as hidden data - $OUT = ""; + $OUT = ''; foreach ($POST as $k => $v) { // Do not add 'force' ! if ($k != "force") { @@ -182,23 +187,23 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S return; } else { // Already added! - $MSG = sprintf(getMessage('SPONSOR_ALREADY_FOUND', $POST['email'])); + $message = sprintf(getMessage('SPONSOR_ALREADY_FOUND', $POST['email'])); $ret = "already"; } - if (!empty($SQL)) { + if (!empty($sql)) { // Run SQL command - $result = SQL_QUERY_ESC($SQL, $DATA['values'], __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC($sql, $DATA['values'], __FUNCTION__, __LINE__); } // Output message if ((!$NO_UPDATE) && (IS_ADMIN())) { - LOAD_TEMPLATE("admin_settings_saved", false, $MSG); + LOAD_TEMPLATE('admin_settings_saved', false, $message); } } else { // Error found! - $MSG = SPONSOR_GET_MESSAGE(getMessage('SPONSOR_DATA_NOT_SAVED'), "failed", $MSGs); - LOAD_TEMPLATE("admin_settings_saved", false, $MSG); + $message = SPONSOR_GET_MESSAGE(getMessage('SPONSOR_DATA_NOT_SAVED'), "failed", $messageArray); + LOAD_TEMPLATE('admin_settings_saved', false, $message); } // Shall we return the status? @@ -223,7 +228,7 @@ function SPONSOR_TRANSLATE_STATUS ($status) { // Search for an email address in the database function SPONSOR_FOUND_EMAIL_DB ($email) { // Do we already have the provided email address in our DB? - $ret = (GET_TOTAL_DATA($email, "sponsor_data", "id", "email", true) == 1); + $ret = (GET_TOTAL_DATA($email, "sponsor_data", "id", 'email', true) == 1); // Return result return $ret; @@ -267,36 +272,36 @@ WHERE id='%s' AND password='%s' AND `status`='CONFIRMED' LIMIT 1", // function GENERATE_SPONSOR_MENU($current) { - $OUT = ""; + $OUT = ''; $WHERE = " AND active='Y'"; - if (IS_ADMIN()) $WHERE = ""; + if (IS_ADMIN()) $WHERE = ''; // Load main menu entries - $result_main = SQL_QUERY("SELECT action, title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` -WHERE (what='' OR `what` IS NULL) ".$WHERE." + $result_main = SQL_QUERY("SELECT action AS main_action, title AS main_title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` +WHERE (`what`='' OR `what` IS NULL) ".$WHERE." ORDER BY `sort`", __FUNCTION__, __LINE__); - if (SQL_NUMROWS($result_main) > 0) - { + if (SQL_NUMROWS($result_main) > 0) { // Load every menu and it's sub menus - while (list($action, $title_main) = SQL_FETCHROW($result_main)) - { + while ($content = SQL_FETCHARRAY($result_main)) { // Load sub menus - $result_sub = SQL_QUERY_ESC("SELECT what, title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` + $result_sub = SQL_QUERY_ESC("SELECT what AS sub_what, title AS sub_title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ".$WHERE." -ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); - if (SQL_NUMROWS($result_sub) > 0) - { +ORDER BY `sort`", + array($content['main_action']), __FUNCTION__, __LINE__); + if (SQL_NUMROWS($result_sub) > 0) { // Load sub menus - $SUB = ""; - while (list($what, $title_sub) = SQL_FETCHROW($result_sub)) - { + $SUB = ''; + while ($content2 = SQL_FETCHARRAY($result_sub)) { + // Merge both arrays + $content = merge_array($content, $content2); + // Check if current selected menu is matching the loaded one - if ($current == $what) $title_sub = "".$title_sub.""; + if ($current == $content['sub_what']) $content['sub_title'] = "".$content['sub_title'].""; // Prepare data for the sub template $content = array( - 'what' => $what, - 'title' => $title_sub + 'what' => $content['sub_what'], + 'title' => $content['sub_title'] ); // Load row template @@ -305,27 +310,23 @@ ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); // Prepare data for the main template $content = array( - 'title' => $title_main, + 'title' => $content['main_title'], 'menu' => $SUB ); // Load menu template $OUT .= LOAD_TEMPLATE("sponsor_action", true, $content); - } - else - { + } else { // No sub menus active - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_NO_SUB_MENUS_ACTIVE); + $OUT .= LOAD_TEMPLATE('admin_settings_saved', true, getMessage('SPONSOR_NO_SUB_MENUS_ACTIVE')); } // Free memory SQL_FREERESULT($result_sub); } - } - else - { + } else { // No main menus active - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_NO_MAIN_MENUS_ACTIVE); + $OUT .= LOAD_TEMPLATE('admin_settings_saved', true, getMessage('SPONSOR_NO_MAIN_MENUS_ACTIVE')); } // Free memory @@ -334,22 +335,23 @@ ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); // Return content return $OUT; } + // -function GENERATE_SPONSOR_CONTENT($what) -{ - $OUT = ""; +function GENERATE_SPONSOR_CONTENT ($what) { + $OUT = ''; $INC = sprintf("inc/modules/sponsor/%s.php", $what); if (INCLUDE_READABLE($INC)) { // Every sponsor action will output nothing directly. It will be written into $OUT! LOAD_INC_ONCE($INC); } else { // File not found! - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_CONTENT_404_1.$what.SPONSOR_CONTENT_404_2); + $OUT .= LOAD_TEMPLATE('admin_settings_saved', true, sprintf(getMessage('SPONSOR_CONTENT_404'), $what)); } // Return content return $OUT; } + // function UPDATE_SPONSOR_LOGIN () { // Failed by default @@ -380,7 +382,7 @@ function SPONSOR_SAVE_DATA ($POST, $content) { 'ok', 'pass1', 'pass2'); // Set default message ("not saved") - $MSG = SPONSOR_ACCOUNT_DATA_NOT_SAVED; + $message = getMessage('SPONSOR_ACCOUNT_DATA_NOT_SAVED'); // Check for submitted passwords if ((!empty($POST['pass1'])) && (!empty($POST['pass2']))) { @@ -388,30 +390,30 @@ function SPONSOR_SAVE_DATA ($POST, $content) { if ($POST['pass1'] == $POST['pass2']) { // Okay, then set password and remove pass1 and pass2 $POST['password'] = md5($POST['pass1']); - } - } + } // END - if + } // END - if // Remove all (maybe spoofed) unsafe data from array foreach ($UNSAFE as $remove) { unset($POST[$remove]); - } + } // END - foreach // This array is for the submitted data which we will use with the SQL_QUERY_ESC() function to // secure the data $DATA = array(); // Prepare SQL string - $SQL = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET"; + $sql = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET"; foreach ($POST as $key => $value) { // Mmmmm, too less security here??? - $SQL .= " ".strip_tags($key)."='%s',"; + $sql .= " ".strip_tags($key)."='%s',"; // We will secure this later inside the SQL_QUERY_ESC() function $DATA[] = strip_tags($value); // Compile {SLASH} and so on for the email templates $POST[$key] = COMPILE_CODE($value); - } + } // END - foreach // Check if email has changed if ((!empty($content['email'])) && (!empty($POST['email']))) { @@ -420,19 +422,19 @@ function SPONSOR_SAVE_DATA ($POST, $content) { $EMAIL = true; // Okay, has changed then add status with UNCONFIRMED and new hash code - $SQL .= " `status`='EMAIL', hash='%s',"; + $sql .= " `status`='EMAIL', hash='%s',"; // Generate hash code $HASH = md5(session_id().":".$POST['email'].":".GET_REMOTE_ADDR().":".GET_USER_AGENT().":".time()); $DATA[] = $HASH; - } - } + } // END - if + } // END - if // Remove last commata - $SQL = substr($SQL, 0, -1); + $sql = substr($sql, 0, -1); // Add SQL tail data - $SQL .= " WHERE id='%s' AND password='%s' LIMIT 1"; + $sql .= " WHERE id='%s' AND password='%s' LIMIT 1"; $DATA[] = bigintval(get_session('sponsorid')); $DATA[] = get_session('sponsorpass'); @@ -441,11 +443,11 @@ function SPONSOR_SAVE_DATA ($POST, $content) { { case "account": // Change account data if ($EMAIL === true) { - $MSG = getMessage('SPONSOR_ACCOUNT_EMAIL_CHANGED'); + $message = getMessage('SPONSOR_ACCOUNT_EMAIL_CHANGED'); $templ = "admin_sponsor_change_email"; $subj = getMessage('ADMIN_SPONSOR_ACC_EMAIL_SUBJ'); } else { - $MSG = getMessage('SPONSOR_ACCOUNT_DATA_SAVED'); + $message = getMessage('SPONSOR_ACCOUNT_DATA_SAVED'); $templ = "admin_sponsor_change_data"; $subj = getMessage('ADMIN_SPONSOR_ACC_DATA_SUBJ'); } @@ -457,22 +459,22 @@ function SPONSOR_SAVE_DATA ($POST, $content) { $content['interval'] = CREATE_FANCY_TIME($content['warning_interval']); // Set message template and subject for admin - $MSG = getMessage('SPONSOR_SETTINGS_SAVED'); + $message = getMessage('SPONSOR_SETTINGS_SAVED'); $templ = "admin_sponsor_settings"; $subj = getMessage('ADMIN_SPONSOR_SETTINGS_SUBJ'); break; default: // Unknown sponsor what value! DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown sponsor module (what) %s detected.", $GLOBALS['what'])); - $MSG = sprintf(getMessage('SPONSOR_UNKNOWN_WHAT'), $GLOBALS['what']); - $templ = ""; $subj = ""; + $message = sprintf(getMessage('SPONSOR_UNKNOWN_WHAT'), $GLOBALS['what']); + $templ = ''; $subj = ''; break; } if (SQL_AFFECTEDROWS() == 1) { if (!empty($templ) && !empty($subj)) { // Run SQL command and check for success - $result = SQL_QUERY_ESC($SQL, $DATA, __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC($sql, $DATA, __FUNCTION__, __LINE__); // Add all data to content global $DATA; @@ -488,7 +490,7 @@ function SPONSOR_SAVE_DATA ($POST, $content) { SEND_ADMIN_NOTIFICATION($subj, $templ, $content); // Shall we send mail to the sponsor's new email address? - if ($content['receive_warnings'] == "Y") { + if ($content['receive_warnings'] == 'Y') { // Okay send email with confirmation link to new address and with no confirmation link // to the old address @@ -515,12 +517,12 @@ function SPONSOR_SAVE_DATA ($POST, $content) { SEND_EMAIL($content['email'], getMessage('SPONSOR_SETTINGS_SUBJ'), $email_msg); break; } - } - } - } + } // END - if + } // END - if + } // END - if // Return final message - return $MSG; + return $message; } //