X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-config_rallye_prices.php;h=6f43d830f979943193c9ae299423334bcaed7010;hb=eb301334eb0960dd060cc0d59e6021260a41f835;hp=91565cf9e3234575182989391ef1fc3b71645895;hpb=fff3e2abc8ffb5a086fbf0f3a7d6b9f2ff5ddaed;p=mailer.git diff --git a/inc/modules/admin/what-config_rallye_prices.php b/inc/modules/admin/what-config_rallye_prices.php index 91565cf9e3..6f43d830f9 100644 --- a/inc/modules/admin/what-config_rallye_prices.php +++ b/inc/modules/admin/what-config_rallye_prices.php @@ -10,9 +10,14 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Rallye-Preise einrichten * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -32,99 +37,86 @@ ************************************************************************/ // Some security stuff... -if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN())) -{ - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; - require($INC); +if ((!defined('__SECURITY')) || (!isAdmin())) { + die(); } + // Add description as navigation point -ADD_DESCR("admin", basename(__FILE__)); +addMenuDescription('admin', __FILE__); -if (!empty($_GET['rallye'])) -{ +if (isGetRequestElementSet(('rallye'))) { // Price submitted? - if (isset($_POST['add'])) - { - if ((!empty($_POST['level'])) && ((!empty($_POST['points'])) || (!empty($_POST['info'])))) - { + if (isPostRequestElementSet('add')) { + if ((isPostRequestElementSet(('level'))) && ((isPostRequestElementSet(('points'))) || (isPostRequestElementSet(('info'))))) { // Submitted data is valid, but maybe we already have this price level? - $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_rallye_prices WHERE rallye_id=%d AND price_level='%s' LIMIT 1", - array(bigintval($_GET['rallye']), bigintval($_POST['level'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE rallye_id=%s AND price_level='%s' LIMIT 1", + array(bigintval(getRequestElement('rallye')), bigintval(postRequestElement('level'))), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 0) - { + if (SQL_NUMROWS($result) == 0) { // Ok, new price level entered! - $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_rallye_prices (rallye_id, price_level, points, info) -VALUES ('%s', '%s', '%s', '%s')", - array( - bigintval($_GET['rallye']), - bigintval($_POST['level']), - $_POST['points'], - $_POST['info'] -), __FILE__, __LINE__); - LOAD_TEMPLATE ("admin_settings_saved", false, RALLYE_PRICE_LEVEL_SAVED); - } - else - { + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_rallye_prices` (rallye_id, price_level, points, info) +VALUES ('%s','%s','%s','%s')", + array( + bigintval(getRequestElement('rallye')), + bigintval(postRequestElement('level')), + postRequestElement('points'), + postRequestElement('info') + ), __FILE__, __LINE__); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_PRICE_LEVEL_SAVED')); + } else { // Free memory SQL_FREERESULT($result); // Price level found! - LOAD_TEMPLATE ("admin_settings_saved", false, RALLYE_PRICE_ALREADY_FOUND); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_PRICE_ALREADY_FOUND')); } } - } - elseif (isset($_POST['remove'])) - { + } elseif (isPostRequestElementSet('remove')) { // Check if at last one line is selected - $SEL = SELECTION_COUNT($_POST['sel']); - if ($SEL > 0) - { + $SEL = countPostSelection(); + if ($SEL > 0) { // Delete selected entries - foreach ($_POST['sel'] as $id=>$sel) - { - $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%d LIMIT 1", - array(bigintval($id)), __FILE__, __LINE__); + foreach (postRequestElement('sel') as $id => $sel) { + SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", + array(bigintval($id)), __FILE__, __LINE__); } // Output message - LOAD_TEMPLATE ("admin_settings_saved", false, RALLYE_ENTRIES_DELETED); - } - else - { - LOAD_TEMPLATE ("admin_settings_saved", false, RALLYE_ENTRIES_NOT_DELETED); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_DELETED')); + } else { + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_NOT_DELETED')); } - } - elseif (isset($_POST['change'])) - { + } elseif (isPostRequestElementSet('change')) { // Change entries - foreach ($_POST['level'] as $id=>$level) - { + foreach (postRequestElement('level') as $id => $level) { // Secure ID $id = bigintval($id); // Update entry - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_rallye_prices SET rallye_id=%d, price_level='%s', points='%s', info='%s' WHERE id=%d LIMIT 1", - array($_POST['rallye_id'][$id], bigintval($level), $_POST['points'][$id], $_POST['infos'][$id], $id), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_rallye_prices` SET rallye_id=%s, price_level='%s', points='%s', info='%s' WHERE `id`=%s LIMIT 1", + array( + postRequestElement('rallye_id', $id), + bigintval($level), + postRequestElement('points', $id), + postRequestElement('infos', $id), + $id + ), __FILE__, __LINE__); } // Output message - LOAD_TEMPLATE ("admin_settings_saved", false, RALLYE_ENTRIES_CHANGED); + loadTemplate('admin_settings_saved', false, getMessage('RALLYE_ENTRIES_CHANGED')); } - if (isset($_POST['edit'])) - { + if (isPostRequestElementSet('edit')) { // Check if at last one line is selected - $SEL = SELECTION_COUNT($_POST['sel']); - if ($SEL > 0) - { + $SEL = countPostSelection(); + if ($SEL > 0) { // Make selected editable - $SW = 2; $OUT = ""; - foreach ($_POST['sel'] as $id=>$sel) - { + $OUT = ''; $SW = 2; + foreach (postRequestElement('sel') as $id => $sel) { // Load data to selected rallye - $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%d LIMIT 1", - array(bigintval($id)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", + array(bigintval($id)), __FILE__, __LINE__); list($rallye, $level, $points, $infos) = SQL_FETCHROW($result); SQL_FREERESULT($result); @@ -132,48 +124,42 @@ VALUES ('%s', '%s', '%s', '%s')", $content = array( 'sw' => $SW, 'id' => $id, - 'rallyes' => ADD_OPTION_LINES("rallye_data", "id", "title", $rallye), + 'rallyes' => generateOptionList("rallye_data", 'id', "title", $rallye), 'level' => $level, 'points' => $points, 'infos' => $infos, ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_config_rallye_edit_row", true, $content); + $OUT .= loadTemplate('admin_config_rallye_edit_row', true, $content); $SW = 3 - $SW; } - define('__PRICE_ROWS', $OUT); + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', $_GET['rallye']); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE("admin_config_rallye_edit"); - } - else - { + loadTemplate('admin_config_rallye_edit', false, $content); + } else { // Nothing selected - $content = RALLYE_NO_PRICES_SELECTED_1."".RALLYE_NO_PRICES_SELECTED_2."".RALLYE_NO_PRICES_SELECTED_3; - LOAD_TEMPLATE("admin_settings_saved", false, $content); + $content = sprintf(getMessage('RALLYE_NO_PRICES_SELECTED'), "", ""); + loadTemplate('admin_settings_saved', false, $content); } - } - elseif (isset($_POST['del'])) - { + } elseif (isPostRequestElementSet('del')) { // Check if at last one line is selected - $SEL = SELECTION_COUNT($_POST['sel']); - if ($SEL > 0) - { + $SEL = countPostSelection(); + if ($SEL > 0) { // List all prices - $SW = 2; $OUT = ""; - foreach ($_POST['sel'] as $id=>$sel) - { + $OUT = ''; $SW = 2; + foreach (postRequestElement('sel') as $id => $sel) { // Load data to selected rallye - $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%d LIMIT 1", - array(bigintval($id)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE `id`=%s LIMIT 1", + array(bigintval($id)), __FILE__, __LINE__); list($rallye, $level, $points, $infos) = SQL_FETCHROW($result); SQL_FREERESULT($result); - if (empty($infos)) $infos = "---"; + if (empty($infos)) $infos = '---'; // Prepare data for the row template $content = array( @@ -185,115 +171,114 @@ VALUES ('%s', '%s', '%s', '%s')", ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_config_rallye_del_row", true, $content); + $OUT .= loadTemplate('admin_config_rallye_del_row', true, $content); $SW = 3 - $SW; } - define('__PRICE_ROWS', $OUT); + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', $_GET['rallye']); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE("admin_config_rallye_del"); - } - else - { + loadTemplate('admin_config_rallye_del', false, $content); + } else { // Nothing selected - $content = RALLYE_NO_PRICES_SELECTED_1."".RALLYE_NO_PRICES_SELECTED_2."".RALLYE_NO_PRICES_SELECTED_3; - LOAD_TEMPLATE("admin_settings_saved", false, $content); + $content = "{--RALLYE_NO_PRICES_SELECTED_1--}{--RALLYE_NO_PRICES_SELECTED_2--}{--RALLYE_NO_PRICES_SELECTED_3--}"; + loadTemplate('admin_settings_saved', false, $content); } - } - else - { - // A rallye was selected, so check if there are already prices assigned... - $result = SQL_QUERY_ESC("SELECT id, price_level, points, info FROM "._MYSQL_PREFIX."_rallye_prices WHERE rallye_id=%d ORDER BY price_level", - array(bigintval($_GET['rallye'])), __FILE__, __LINE__); + } else { + // a rallye was selected, so check if there are already prices assigned... + $result = SQL_QUERY_ESC("SELECT id, price_level, points, info FROM `{?_MYSQL_PREFIX?}_rallye_prices` WHERE rallye_id=%s ORDER BY price_level", + array(bigintval(getRequestElement('rallye'))), __FILE__, __LINE__); - if (SQL_NUMROWS($result) > 0) - { + if (SQL_NUMROWS($result) > 0) { // Load all prices for the selected rallye - $SW = 2; $OUT = ""; - while(list($id, $level, $points, $infos) = SQL_FETCHROW($result)) - { - if (empty($infos)) $infos = "---"; + $OUT = ''; $SW = 2; + while ($content = SQL_FETCHARRAY($result)) { + // Fix empty info + if (empty($content['info'])) $content['info'] = '---'; // Prepare data for the row template + // @TODO Rewritings: level->price_level, infos->info in template $content = array( 'sw' => $SW, - 'id' => $id, - 'level' => $level, - 'points' => $points, - 'infos' => $infos, + 'id' => $content['id'], + 'level' => $content['price_level'], + 'points' => $content['points'], + 'infos' => $content['info'], ); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_config_rallye_prices_row", true, $content); + $OUT .= loadTemplate('admin_config_rallye_prices_row', true, $content); $SW = 3 - $SW; - } + } // END - while // Free memory SQL_FREERESULT($result); - define('__PRICE_ROWS', $OUT); + + // @TODO Rewrite these two constants + $content['rows'] = $OUT; // Prepare data for the main template - define('__RALLYE_ID', $_GET['rallye']); + $content['rallye'] = getRequestElement('rallye'); // Load main template - LOAD_TEMPLATE("admin_config_rallye_prices"); + loadTemplate('admin_config_rallye_prices', false, $content); } } // Add form for adding new price level - if (empty($_POST['edit'])) - { - LOAD_TEMPLATE("admin_add_rallye_prices", false, $_GET['rallye']); + if (!isPostRequestElementSet('edit')) { + loadTemplate('admin_add_rallye_prices', false, getRequestElement('rallye')); } -} - else -{ +} else { // No rallye selected so display all available without prices - $result = SQL_QUERY("SELECT d.id, d.admin_id, d.start_time, d.end_time, d.title, a.login, d.is_active -FROM "._MYSQL_PREFIX."_rallye_data AS d, "._MYSQL_PREFIX."_admins AS a -WHERE d.admin_id=a.id ORDER BY start_time DESC", __FILE__, __LINE__); - if (SQL_NUMROWS($result) > 0) - { + $result = SQL_QUERY("SELECT + d.id, d.admin_id, d.start_time, d.end_time, d.title, a.login, d.is_active +FROM + `{?_MYSQL_PREFIX?}_rallye_data` AS d, +LEFT JOIN + `{?_MYSQL_PREFIX?}_admins` AS a +ON + d.admin_id=a.id +ORDER BY + `d.start_time` DESC", __FILE__, __LINE__); + if (SQL_NUMROWS($result) > 0) { // List found rallyes - $SW = 2; $OUT = ""; - while (list($id, $aid, $start, $end, $title, $alogin, $active) = SQL_FETCHROW($result)) - { - $select = ""; - if ($active == 'Y') $select = "".$id.""; + $OUT = ''; $SW = 2; + while ($content = SQL_FETCHARRAY($result)) { + $select = ""; + if ($content['is_active'] == 'Y') $select = "