X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fframetester.php;h=947753f18a38ef1599c053220a703587549e65e8;hb=27f65d023a3388a8bd85be8ee5991f776f541847;hp=49b06b359e17ef12edd66f6b8d131012cad1f3bb;hpb=d997f1621c6e6e0427166bd96690e0825387dadd;p=mailer.git diff --git a/inc/modules/frametester.php b/inc/modules/frametester.php index 49b06b359e..947753f18a 100644 --- a/inc/modules/frametester.php +++ b/inc/modules/frametester.php @@ -32,7 +32,7 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) { +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; require($INC); } @@ -41,7 +41,7 @@ $MODE = "guest"; if (!empty($_GET['order'])) { // Order number placed, is he also logged in? - if(IS_LOGGED_IN()) { + if (IS_MEMBER()) { // Ok, test passed... :) $result = SQL_QUERY_ESC("SELECT subject, url FROM "._MYSQL_PREFIX."_pool WHERE id=%s AND sender=%s AND data_type='TEMP' LIMIT 1", array(bigintval($_GET['order']), $GLOBALS['userid']), __FILE__, __LINE__); @@ -54,8 +54,7 @@ if (!empty($_GET['order'])) { // This fixes a white page $_POST['url'] = $url; - // Update his login data - UPDATE_LOGIN_DATA(); + // Mode is member $MODE = "member"; } else { // Matching line not found! @@ -75,7 +74,7 @@ if ((!empty($_POST['url'])) || (!empty($_GET['url'])) || (!empty($_GET['frame']) $url = URL; // Decode URL if set in GET parameters - if (!empty($_GET['url'])) $url = COMPILE_CODE(gzuncompress(base64_decode(urldecode($_GET['url'])))); + if (!empty($_GET['url'])) $url = gzuncompress(base64_decode(str_replace(" ", "+", COMPILE_CODE(urldecode($_GET['url']))))); // Use URL from POST data if set if (!empty($_POST['url'])) $url = $_POST['url'];