X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-config_rallye_prices.php;h=6f43d830f979943193c9ae299423334bcaed7010;hb=eb301334eb0960dd060cc0d59e6021260a41f835;hp=0887e9ba982d7afe7932ee1692cd5e9857ebfc29;hpb=72288d31358f8061513f8d3d61a1f9e7feb44e50;p=mailer.git diff --git a/inc/modules/admin/what-config_rallye_prices.php b/inc/modules/admin/what-config_rallye_prices.php index 0887e9ba98..6f43d830f9 100644 --- a/inc/modules/admin/what-config_rallye_prices.php +++ b/inc/modules/admin/what-config_rallye_prices.php @@ -17,7 +17,7 @@ * Needs to be in all Files and every File needs "svn propset * * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -37,86 +37,85 @@ ************************************************************************/ // Some security stuff... -if ((!defined('__SECURITY')) || (!IS_ADMIN())) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php'; - require($INC); +if ((!defined('__SECURITY')) || (!isAdmin())) { + die(); } // Add description as navigation point -ADD_DESCR('admin', __FILE__); +addMenuDescription('admin', __FILE__); -if (REQUEST_ISSET_GET(('rallye'))) { +if (isGetRequestElementSet(('rallye'))) { // Price submitted? - if (REQUEST_ISSET_POST('add')) { - if ((REQUEST_ISSET_POST(('level'))) && ((REQUEST_ISSET_POST(('points'))) || (REQUEST_ISSET_POST(('info'))))) { + if (isPostRequestElementSet('add')) { + if ((isPostRequestElementSet(('level'))) && ((isPostRequestElementSet(('points'))) || (isPostRequestElementSet(('info'))))) { // Submitted data is valid, but maybe we already have this price level? - $result = SQL_QUERY_ESC("SELECT `id` FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE rallye_id=%s AND price_level='%s' LIMIT 1", - array(bigintval(REQUEST_GET('rallye')), bigintval(REQUEST_POST('level'))), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE rallye_id=%s AND price_level='%s' LIMIT 1", + array(bigintval(getRequestElement('rallye')), bigintval(postRequestElement('level'))), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 0) { // Ok, new price level entered! - SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_rallye_prices` (rallye_id, price_level, points, info) + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_rallye_prices` (rallye_id, price_level, points, info) VALUES ('%s','%s','%s','%s')", array( - bigintval(REQUEST_GET('rallye')), - bigintval(REQUEST_POST('level')), - REQUEST_POST('points'), - REQUEST_POST('info') + bigintval(getRequestElement('rallye')), + bigintval(postRequestElement('level')), + postRequestElement('points'), + postRequestElement('info') ), __FILE__, __LINE__); - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('RALLYE_PRICE_LEVEL_SAVED')); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_PRICE_LEVEL_SAVED')); } else { // Free memory SQL_FREERESULT($result); // Price level found! - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('RALLYE_PRICE_ALREADY_FOUND')); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_PRICE_ALREADY_FOUND')); } } - } elseif (REQUEST_ISSET_POST('remove')) { + } elseif (isPostRequestElementSet('remove')) { // Check if at last one line is selected $SEL = countPostSelection(); if ($SEL > 0) { // Delete selected entries - foreach (REQUEST_POST('sel') as $id => $sel) { - SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE `id`=%s LIMIT 1", + foreach (postRequestElement('sel') as $id => $sel) { + SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", array(bigintval($id)), __FILE__, __LINE__); } // Output message - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_DELETED')); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_DELETED')); } else { - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_NOT_DELETED')); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_NOT_DELETED')); } - } elseif (REQUEST_ISSET_POST('change')) { + } elseif (isPostRequestElementSet('change')) { // Change entries - foreach (REQUEST_POST('level') as $id => $level) { + foreach (postRequestElement('level') as $id => $level) { // Secure ID $id = bigintval($id); // Update entry - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_rallye_prices` SET rallye_id=%s, price_level='%s', points='%s', info='%s' WHERE `id`=%s LIMIT 1", + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_rallye_prices` SET rallye_id=%s, price_level='%s', points='%s', info='%s' WHERE `id`=%s LIMIT 1", array( - REQUEST_POST('rallye_id', $id), + postRequestElement('rallye_id', $id), bigintval($level), - REQUEST_POST('points', $id), - REQUEST_POST('infos', $id), + postRequestElement('points', $id), + postRequestElement('infos', $id), $id ), __FILE__, __LINE__); } // Output message - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_CHANGED')); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_CHANGED')); } - if (REQUEST_ISSET_POST('edit')) { + if (isPostRequestElementSet('edit')) { // Check if at last one line is selected $SEL = countPostSelection(); if ($SEL > 0) { // Make selected editable $OUT = ''; $SW = 2; - foreach (REQUEST_POST('sel') as $id => $sel) { + foreach (postRequestElement('sel') as $id => $sel) { // Load data to selected rallye - $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE `id`=%s LIMIT 1", + $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", array(bigintval($id)), __FILE__, __LINE__); list($rallye, $level, $points, $infos) = SQL_FETCHROW($result); SQL_FREERESULT($result); @@ -132,30 +131,30 @@ VALUES ('%s','%s','%s','%s')", ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_config_rallye_edit_row", true, $content); + $OUT .= loadTemplate('admin_config_rallye_edit_row', true, $content); $SW = 3 - $SW; } - define('__PRICE_ROWS', $OUT); + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', REQUEST_GET('rallye')); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE("admin_config_rallye_edit"); + loadTemplate('admin_config_rallye_edit', false, $content); } else { // Nothing selected - $content = sprintf(getMessage('RALLYE_NO_PRICES_SELECTED'), "", ""); - LOAD_TEMPLATE('admin_settings_saved', false, $content); + $content = sprintf(getMessage('RALLYE_NO_PRICES_SELECTED'), "", ""); + loadTemplate('admin_settings_saved', false, $content); } - } elseif (REQUEST_ISSET_POST('del')) { + } elseif (isPostRequestElementSet('del')) { // Check if at last one line is selected $SEL = countPostSelection(); if ($SEL > 0) { // List all prices $OUT = ''; $SW = 2; - foreach (REQUEST_POST('sel') as $id => $sel) { + foreach (postRequestElement('sel') as $id => $sel) { // Load data to selected rallye - $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE `id`=%s LIMIT 1", + $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", array(bigintval($id)), __FILE__, __LINE__); list($rallye, $level, $points, $infos) = SQL_FETCHROW($result); SQL_FREERESULT($result); @@ -172,25 +171,25 @@ VALUES ('%s','%s','%s','%s')", ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_config_rallye_del_row", true, $content); + $OUT .= loadTemplate('admin_config_rallye_del_row', true, $content); $SW = 3 - $SW; } - define('__PRICE_ROWS', $OUT); + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', REQUEST_GET('rallye')); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE("admin_config_rallye_del"); + loadTemplate('admin_config_rallye_del', false, $content); } else { // Nothing selected - $content = RALLYE_NO_PRICES_SELECTED_1."".RALLYE_NO_PRICES_SELECTED_2."".RALLYE_NO_PRICES_SELECTED_3; - LOAD_TEMPLATE('admin_settings_saved', false, $content); + $content = "{--RALLYE_NO_PRICES_SELECTED_1--}{--RALLYE_NO_PRICES_SELECTED_2--}{--RALLYE_NO_PRICES_SELECTED_3--}"; + loadTemplate('admin_settings_saved', false, $content); } } else { // a rallye was selected, so check if there are already prices assigned... - $result = SQL_QUERY_ESC("SELECT id, price_level, points, info FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE rallye_id=%s ORDER BY price_level", - array(bigintval(REQUEST_GET('rallye'))), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE rallye_id=%s ORDER BY price_level", + array(bigintval(getRequestElement('rallye'))), __FILE__, __LINE__); if (SQL_NUMROWS($result) > 0) { // Load all prices for the selected rallye @@ -210,7 +209,7 @@ VALUES ('%s','%s','%s','%s')", ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE('admin_config_rallye_prices_row', true, $content); + $OUT .= loadTemplate('admin_config_rallye_prices_row', true, $content); $SW = 3 - $SW; } // END - while @@ -218,28 +217,28 @@ VALUES ('%s','%s','%s','%s')", SQL_FREERESULT($result); // @TODO Rewrite these two constants - define('__PRICE_ROWS', $OUT); + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', REQUEST_GET('rallye')); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE('admin_config_rallye_prices'); + loadTemplate('admin_config_rallye_prices', false, $content); } } // Add form for adding new price level - if (!REQUEST_ISSET_POST('edit')) { - LOAD_TEMPLATE('admin_add_rallye_prices', false, REQUEST_GET('rallye')); + if (!isPostRequestElementSet('edit')) { + loadTemplate('admin_add_rallye_prices', false, getRequestElement('rallye')); } } else { // No rallye selected so display all available without prices $result = SQL_QUERY("SELECT d.id, d.admin_id, d.start_time, d.end_time, d.title, a.login, d.is_active FROM - `{!_MYSQL_PREFIX!}_rallye_data` AS d, + `{?_MYSQL_PREFIX?}_rallye_data` AS d, LEFT JOIN - `{!_MYSQL_PREFIX!}_admins` AS a + `{?_MYSQL_PREFIX?}_admins` AS a ON d.admin_id=a.id ORDER BY @@ -252,13 +251,13 @@ ORDER BY if ($content['is_active'] == 'Y') $select = "