X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fmember%2Fwhat-order.php;h=db7f6f012767f3c2a6fc6522b6b462ac4d6cbc7c;hb=8a73ce89f88fb09523fce05eb2aff80665e65827;hp=c255e92df9a42ec2eac2f43d54adc915da46a6dd;hpb=1cf72a9c1a5e737509af79d49f0731da2eb6a218;p=mailer.git diff --git a/inc/modules/member/what-order.php b/inc/modules/member/what-order.php index c255e92df9..db7f6f0127 100644 --- a/inc/modules/member/what-order.php +++ b/inc/modules/member/what-order.php @@ -10,7 +10,12 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Hier koennen Ihre Mitglieder Mails buchen * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * @@ -38,7 +43,7 @@ if (!defined('__SECURITY')) { } elseif (!IS_MEMBER()) { LOAD_URL("modules.php?module=index"); } elseif ((!EXT_IS_ACTIVE("order")) && (!IS_ADMIN())) { - addFatalMessage(getMessage('EXTENSION_PROBLEM_EXT_INACTIVE'), "order"); + addFatalMessage(__FILE__, __LINE__, getMessage('EXTENSION_PROBLEM_EXT_INACTIVE'), "order"); return; } @@ -49,17 +54,17 @@ $URL = ""; $id = 0; $whereStatement = " WHERE `visible`='Y'"; // Set undefined array elements -if (empty($_GET['msg'])) $_GET['msg'] = ""; -if (empty($_POST['zip'])) $_POST['zip'] = ""; -if (empty($_POST['html'])) $_POST['html'] = ""; -if (empty($_POST['receiver'])) $_POST['receiver'] = ""; +if (!REQUEST_ISSET_GET(('msg'))) REQUEST_SET_GET('msg' , ""); +if (!REQUEST_ISSET_POST(('zip'))) REQUEST_SET_POST('zip' , ""); +if (!REQUEST_ISSET_POST(('html'))) REQUEST_SET_POST('html' , ""); +if (!REQUEST_ISSET_POST(('receiver'))) REQUEST_SET_POST('receiver', ""); if (IS_ADMIN()) $whereStatement = ""; // Minimum mails / order define('__MIN_VALUE', getConfig('order_min')); // Count unconfirmed mails -$links = GET_TOTAL_DATA($GLOBALS['userid'], "user_links", "id", "userid", true); +$links = GET_TOTAL_DATA(getUserId(), "user_links", "id", "userid", true); // Does the user has more than 0 mails per day set? $HOLIDAY = "userid"; @@ -71,7 +76,7 @@ if (GET_EXT_VERSION("holiday") >= "0.1.3") { $result_mmails = SQL_QUERY_ESC("SELECT userid, receive_mails, mail_orders, ".$HOLIDAY." FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s AND max_mails > 0 LIMIT 1", - array($GLOBALS['userid']), __FILE__, __LINE__); + array(getUserId()), __FILE__, __LINE__); $mmails = SQL_NUMROWS($result_mmails); list($DMY, $MAXI, $ORDERS, $HOLIDAY) = SQL_FETCHROW($result_mmails); @@ -82,19 +87,19 @@ $ALLOWED = $MAXI - $ORDERS; if (getConfig('order_max_full') == "MAX") $ALLOWED = $MAXI; // Now check his points amount -$TOTAL = GET_TOTAL_DATA($GLOBALS['userid'], "user_points", "points") - GET_TOTAL_DATA($GLOBALS['userid'], "user_data", "used_points");; +$TOTAL = GET_TOTAL_DATA(getUserId(), "user_points", "points") - GET_TOTAL_DATA(getUserId(), "user_data", "used_points");; if (($HOLIDAY == "Y") && (GET_EXT_VERSION("holiday") >= "0.1.3")) { // Holiday is active! - LOAD_TEMPLATE("admin_settings_saved", false, HOLIDAY_ORDER_NOT_POSSIBLE); -} elseif ((!empty($_POST['frametester'])) && ($ALLOWED > 0) && ($_POST['receiver'] > 0)) { + LOAD_TEMPLATE("admin_settings_saved", false, getMessage('HOLIDAY_ORDER_NOT_POSSIBLE')); +} elseif ((REQUEST_ISSET_POST(('frametester'))) && ($ALLOWED > 0) && (REQUEST_POST('receiver') > 0)) { // Continue with the frametester, we first need to store the data temporary in the pool // // First we would like to store the data and get it's pool position back... $result = SQL_QUERY_ESC("SELECT id, data_type FROM `{!_MYSQL_PREFIX!}_pool` WHERE sender=%s AND url='%s' AND timestamp > (UNIX_TIMESTAMP() - %s) LIMIT 1", - array($GLOBALS['userid'], $_POST['url'], getConfig('url_tlock')), __FILE__, __LINE__); + array(getUserId(), REQUEST_POST('url'), getConfig('url_tlock')), __FILE__, __LINE__); $type = "TEMP"; $id = 0; if (SQL_NUMROWS($result) == 1) { @@ -111,28 +116,28 @@ WHERE sender=%s AND url='%s' AND timestamp > (UNIX_TIMESTAMP() - %s) LIMIT 1", $URL = ""; if (getConfig('test_text') == "Y") { // Test submitted text against some filters (length, URLs in text etc.) - if ((strpos(strtolower($_POST['text']), "https://") > -1) || (strpos(strtolower($_POST['text']), "http://") > -1) || (strpos(strtolower($_POST['text']), "www") > -1)) { + if ((strpos(strtolower(REQUEST_POST('text')), "https://") > -1) || (strpos(strtolower(REQUEST_POST('text')), "http://") > -1) || (strpos(strtolower(REQUEST_POST('text')), "www") > -1)) { // URL found! - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_URL_FOUND'); + $URL = "modules.php?module=login&what=order&msg=".getCode('URL_FOUND'); } // END - if // Remove new-line and carriage-return characters - $TEST = str_replace("\n", "", str_replace("\r", "", $_POST['text'])); + $TEST = str_replace("\n", "", str_replace("\r", "", REQUEST_POST('text'))); // Text length within allowed length? if (strlen($TEST) > getConfig('max_tlength')) { // Text is too long! - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_OVERLENGTH'); + $URL = "modules.php?module=login&what=order&msg=".getCode('OVERLENGTH'); } // END - if } // END - if // Shall I test the subject line against URLs? if (getConfig('test_subj') == "Y") { // Check the subject line for issues - $_POST['subject'] = str_replace("\\", "[nl]", substr($_POST['subject'], 0, 200)); - if ((strpos(strtolower($_POST['subject']), "http://") > -1) || (strpos(strtolower($_POST['subject']), "www") > -1)) { + REQUEST_SET_POST('subject', str_replace("\\", "[nl]", substr(REQUEST_POST('subject'), 0, 200))); + if ((strpos(strtolower(REQUEST_POST('subject')), "http://") > -1) || (strpos(strtolower(REQUEST_POST('subject')), "www") > -1)) { // URL in subject found - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_SUBJ_URL'); + $URL = "modules.php?module=login&what=order&msg=".getCode('SUBJ_URL'); } // END - if } // END - if @@ -140,14 +145,14 @@ WHERE sender=%s AND url='%s' AND timestamp > (UNIX_TIMESTAMP() - %s) LIMIT 1", if (getConfig('url_blacklist') == "Y") { // Ok, I do that for you know... $result = SQL_QUERY_ESC("SELECT UNIX_TIMESTAMP(`timestamp`) AS tstamp FROM `{!_MYSQL_PREFIX!}_url_blacklist` WHERE `url`='%s' LIMIT 1", - array($_POST['url']), __FILE__, __LINE__); + array(REQUEST_POST('url')), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { // Jupp, we got one listed list($blist) = SQL_FETCHROW($result); // Create redirect-URL - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_BLIST_URL')."&blist=".$blist; + $URL = "modules.php?module=login&what=order&msg=".getCode('BLIST_URL')."&blist=".$blist; } // END - if // Free result @@ -155,43 +160,43 @@ WHERE sender=%s AND url='%s' AND timestamp > (UNIX_TIMESTAMP() - %s) LIMIT 1", } // END - if // Enougth receivers entered? - if (($_POST['receiver'] < getConfig('order_min')) && (!IS_ADMIN())) { + if ((REQUEST_POST('receiver') < getConfig('order_min')) && (!IS_ADMIN())) { // Less than allowed receivers entered! - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_MORE_RECEIVERS3'); + $URL = "modules.php?module=login&what=order&msg=".getCode('MORE_RECEIVERS3'); } // END - if // Validate URL - if (!VALIDATE_URL($_POST['url'])) { + if (!VALIDATE_URL(REQUEST_POST('url'))) { // URL is invalid! - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_INVALID_URL'); + $URL = "modules.php?module=login&what=order&msg=".getCode('INVALID_URL'); } // END - if // Probe for HTML extension if (EXT_IS_ACTIVE("html_mail")) { // HTML or regular text mail? - if ($_POST['html'] == "Y") { + if (REQUEST_POST('html') == "Y") { // Chek for valid HTML tags - $_POST['text'] = HTML_CHECK_TAGS($_POST['text']); + REQUEST_SET_POST('text', HTML_CHECK_TAGS(REQUEST_POST('text'))); // Maybe invalid tags found? - if (empty($_POST['text'])) $URL = "modules.php?module=login&what=order&msg=".constant('CODE_INVALID_TAGS')."&id=".$id; + if (!REQUEST_ISSET_POST(('text'))) $URL = "modules.php?module=login&what=order&msg=".getCode('INVALID_TAGS')."&id=".$id; } else { // Remove any HTML code - $_POST['text'] = str_replace("<", "{OPEN_HTML}", str_replace(">", "{CLOSE_HTML}", $_POST['text'])); + REQUEST_SET_POST('text', str_replace("<", "{OPEN_HTML}", str_replace(">", "{CLOSE_HTML}", REQUEST_POST('text')))); } } } elseif (!IS_ADMIN()) { // He has already sent a mail within a specific time - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_URL_TLOCK')."&id=".$id; + $URL = "modules.php?module=login&what=order&msg=".getCode('URL_TLOCK')."&id=".$id; } // Still no error? if (empty($URL)) { // Check if category and number of receivers is okay $ADD = ""; - if ((getConfig('order_multi_page') == "Y") && (!empty($_POST['zip']))) { + if ((getConfig('order_multi_page') == "Y") && (REQUEST_ISSET_POST(('zip')))) { // Choose recipients by ZIP code - $ADD = " AND d.zip LIKE '".bigintval($_POST['zip'])."{PER}'"; + $ADD = " AND d.zip LIKE '".bigintval(REQUEST_POST('zip'))."{PER}'"; } // END - if // Check for userids @@ -201,14 +206,14 @@ ON c.userid=d.userid WHERE c.cat_id=%s AND c.userid != '%s' AND d.`status`='CONFIRMED' AND d.receive_mails > 0".$ADD." ORDER BY d.%s %s", array( - bigintval($_POST['cat']), - $GLOBALS['userid'], + bigintval(REQUEST_POST('cat')), + getUserId(), getConfig('order_select'), getConfig('order_mode'), ), __FILE__, __LINE__); // Do we enougth receivers left? - if (SQL_NUMROWS($result) >= $_POST['receiver']) { + if (SQL_NUMROWS($result) >= REQUEST_POST('receiver')) { // Check for holiday extensions $HOLIDAY = false; if (GET_EXT_VERSION("holiday") >= "0.1.3") { @@ -218,21 +223,21 @@ ORDER BY d.%s %s", // Load receivers from database $TEST = array(); $cnt = 0; - while (list($REC) = SQL_FETCHROW($result)) { + while ($content = SQL_FETCHARRAY($result)) { if ($HOLIDAY) { // Check for his holiday status $result_holiday = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_user_holidays` WHERE userid=%s AND holiday_start < UNIX_TIMESTAMP() AND holiday_end > UNIX_TIMESTAMP() LIMIT 1", - array(bigintval($REC)), __FILE__, __LINE__); - if (SQL_NUMROWS($result_holiday) == 1) $REC = 0; // Exclude user who are in holiday + array(bigintval($content['userid'])), __FILE__, __LINE__); + if (SQL_NUMROWS($result_holiday) == 1) $content['userid'] = 0; // Exclude user who are in holiday // Free memory SQL_FREERESULT($result_holiday); } // END - if - if ($REC > 0) { + if ($content['userid'] > 0) { // Add receiver - $TEST[] = $REC; + $TEST[] = $content['userid']; $cnt++; } // END - if } // END - while @@ -251,13 +256,13 @@ WHERE userid=%s AND holiday_start < UNIX_TIMESTAMP() AND holiday_end > UNIX_TIME array(str_replace(";", ", ", $RECEIVER), $MAX_SEND), __FILE__, __LINE__); // Is calculated max receivers larger than wanted receivers then reset it - if ($MAX_SEND > $_POST['receiver']) $MAX_SEND = $_POST['receiver']; + if ($MAX_SEND > REQUEST_POST('receiver')) $MAX_SEND = REQUEST_POST('receiver'); // Calculate used points - $USED = $MAX_SEND * GET_PAY_POINTS(bigintval($_POST['type'])); + $USED = $MAX_SEND * GET_PAY_POINTS(bigintval(REQUEST_POST('type'))); // Fix empty zip code - if (empty($_POST['zip'])) $_POST['zip'] = "0"; + if (!REQUEST_ISSET_POST(('zip'))) REQUEST_SET_POST('zip', "0"); // Check if he has enougth points for this order and selected more than 0 receivers if (($USED > 0) && ($USED <= $TOTAL) && ($MAX_SEND > 0)) { @@ -271,33 +276,33 @@ WHERE userid=%s AND holiday_start < UNIX_TIMESTAMP() AND holiday_end > UNIX_TIME SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_pool` (sender, subject, text, receivers, payment_id, data_type, timestamp, url, cat_id, target_send, zip, html_msg) VALUES ('%s','%s','%s','%s','%s','TEMP','%s','%s','%s','%s','%s','%s')", array( - $GLOBALS['userid'], - $_POST['subject'], - $_POST['text'], + getUserId(), + REQUEST_POST('subject'), + REQUEST_POST('text'), $RECEIVER, - bigintval($_POST['type']), + bigintval(REQUEST_POST('type')), $TIME, - $_POST['url'], - bigintval($_POST['cat']), + REQUEST_POST('url'), + bigintval(REQUEST_POST('cat')), $MAX_SEND, - bigintval($_POST['zip']), - $_POST['html'] + bigintval(REQUEST_POST('zip')), + REQUEST_POST('html') ), __FILE__, __LINE__); } else { // No HTML extension is active SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_pool` (sender, subject, text, receivers, payment_id, data_type, timestamp, url, cat_id, target_send, zip) VALUES ('%s','%s','%s','%s','%s','TEMP','%s','%s','%s','%s','%s')", array( - $GLOBALS['userid'], - $_POST['subject'], - $_POST['text'], + getUserId(), + REQUEST_POST('subject'), + REQUEST_POST('text'), $RECEIVER, - bigintval($_POST['type']), + bigintval(REQUEST_POST('type')), $TIME, - $_POST['url'], - bigintval($_POST['cat']), + REQUEST_POST('url'), + bigintval(REQUEST_POST('cat')), $MAX_SEND, - bigintval($_POST['zip']), + bigintval(REQUEST_POST('zip')), ), __FILE__, __LINE__); } } else { @@ -317,15 +322,15 @@ zip=%s, html_msg='%s' WHERE id=%s LIMIT 1", array( - $_POST['subject'], - $_POST['text'], + REQUEST_POST('subject'), + REQUEST_POST('text'), $RECEIVER, - bigintval($_POST['type']), - $_POST['url'], - bigintval($_POST['cat']), + bigintval(REQUEST_POST('type')), + REQUEST_POST('url'), + bigintval(REQUEST_POST('cat')), $MAX_SEND, - bigintval($_POST['zip']), - $_POST['html'], + bigintval(REQUEST_POST('zip')), + REQUEST_POST('html'), bigintval($id) ), __FILE__, __LINE__); } else { @@ -342,14 +347,14 @@ target_send=%s, zip=%s WHERE id=%s LIMIT 1", array( - $_POST['subject'], - $_POST['text'], + REQUEST_POST('subject'), + REQUEST_POST('text'), $RECEIVER, - bigintval($_POST['type']), - $_POST['url'], - bigintval($_POST['cat']), + bigintval(REQUEST_POST('type')), + REQUEST_POST('url'), + bigintval(REQUEST_POST('cat')), $MAX_SEND, - bigintval($_POST['zip']), + bigintval(REQUEST_POST('zip')), bigintval($id) ), __FILE__, __LINE__); } @@ -360,9 +365,9 @@ array( // Order is placed as temporary. We need to get it's id for the frametester $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_pool` WHERE sender=%s AND subject='%s' AND payment_id=%s AND data_type='TEMP' AND timestamp=%s LIMIT 1", array( - $GLOBALS['userid'], - $_POST['subject'], - bigintval($_POST['type']), + getUserId(), + REQUEST_POST('subject'), + bigintval(REQUEST_POST('type')), $TIME ), __FILE__, __LINE__); @@ -374,19 +379,19 @@ array( $URL = "modules.php?module=frametester&order=".$id.""; } elseif ($MAX_SEND == 0) { // Not enougth receivers found which can receive mails - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_MORE_RECEIVERS2'); + $URL = "modules.php?module=login&what=order&msg=".getCode('MORE_RECEIVERS2'); } else { // No enougth points left! - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_MORE_POINTS'); + $URL = "modules.php?module=login&what=order&msg=".getCode('MORE_POINTS'); } } else { // Ordered more mails than he can send in this category - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_NO_RECS_LEFT'); + $URL = "modules.php?module=login&what=order&msg=".getCode('NO_RECS_LEFT'); } } -} elseif ($_POST['receiver'] == "0") { +} elseif (REQUEST_POST('receiver') == "0") { // Not enougth receivers selected - $URL = "modules.php?module=login&what=order&msg=".constant('CODE_MORE_RECEIVERS1'); + $URL = "modules.php?module=login&what=order&msg=".getCode('MORE_RECEIVERS1'); } elseif (($ALLOWED == 0) && (getConfig('order_max_full') == "ORDER")) { // No more mail orders allowed LOAD_TEMPLATE("admin_settings_saved", false, getMessage('MEMBER_ORDER_ALLOWED_EXHAUSTED')); @@ -404,20 +409,20 @@ array( // Enable HTML checking $HTML = ""; $HOLIDAY = false; $HOL_STRING = ""; - if ((EXT_IS_ACTIVE("html_mail")) && ($_POST['html'] == "Y")) $HTML = " AND html='Y'"; + if ((EXT_IS_ACTIVE("html_mail")) && (REQUEST_POST('html') == "Y")) $HTML = " AND html='Y'"; if (GET_EXT_VERSION("holiday") >= "0.1.3") { // Extension's version is fine $HOLIDAY = true; $HOL_STRING = " AND holiday_active='N'"; } // END - if // ... and begin loading stuff - while (list($id, $cat) = SQL_FETCHROW($result_cats)) { - $CATS['id'][] = bigintval($id); - $CATS['name'][] = $cat; + while ($content = SQL_FETCHARRAY($result_cats)) { + $CATS['id'][] = bigintval($content['id']); + $CATS['name'][] = $content['cat']; // Select users in current category $result_uids = SQL_QUERY_ESC("SELECT userid FROM `{!_MYSQL_PREFIX!}_user_cats` WHERE cat_id=%s AND userid != '%s' ORDER BY userid", - array(bigintval($id), $GLOBALS['userid']), __FILE__, __LINE__); + array(bigintval($content['id']), getUserId()), __FILE__, __LINE__); $uid_cnt = 0; while (list($ucat) = SQL_FETCHROW($result_uids)) { @@ -445,10 +450,10 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); $result_ver = SQL_QUERY_ESC("SELECT zip FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s".$HTML." AND receive_mails > 0 AND `status`='CONFIRMED' LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); - if ((SQL_NUMROWS($result_ver) == 1) && (!empty($_POST['zip'])) && (getConfig('order_multi_page') == "Y")) { + if ((SQL_NUMROWS($result_ver) == 1) && (REQUEST_ISSET_POST(('zip'))) && (getConfig('order_multi_page') == "Y")) { list($zip) = SQL_FETCHROW($result_ver); SQL_FREERESULT($result_ver); - if (substr($zip, 0, strlen($_POST['zip'])) == $_POST['zip']) { + if (substr($zip, 0, strlen(REQUEST_POST('zip'))) == REQUEST_POST('zip')) { // Ok, ZIP part is found $uid_cnt++; } // END - if @@ -474,11 +479,11 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); if (SQL_NUMROWS($result) > 0) { // Check for message ID in URL $MSG = ""; - switch ($_GET['msg']) + switch (REQUEST_GET('msg')) { - case constant('CODE_URL_TLOCK'): + case getCode('URL_TLOCK'): $result = SQL_QUERY_ESC("SELECT timestamp FROM `{!_MYSQL_PREFIX!}_pool` WHERE id=%s LIMIT 1", - array(bigintval($_GET['id'])), __FILE__, __LINE__); + array(bigintval(REQUEST_GET('id'))), __FILE__, __LINE__); // Load timestamp from last order list($LORDER) = SQL_FETCHROW($result); @@ -503,47 +508,47 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); {--MEMBER_LAST_TLOCK--}: ".$LORDER; break; - case constant('CODE_OVERLENGTH'): + case getCode('OVERLENGTH'): $MSG = getMessage('MEMBER_TEXT_OVERLENGTH'); break; - case constant('CODE_URL_FOUND'): + case getCode('URL_FOUND'): $MSG = getMessage('MEMBER_TEXT_CONTAINS_URL'); break; - case constant('CODE_SUBJ_URL'): + case getCode('SUBJ_URL'): $MSG = getMessage('MEMBER_SUBJ_CONTAINS_URL'); break; - case constant('CODE_BLIST_URL'): - $MSG = "{--MEMBER_URL_BLACK_LISTED--}
\n{--MEMBER_BLIST_TIME--}: ".MAKE_DATETIME($_GET['blist'], "0"); + case getCode('BLIST_URL'): + $MSG = "{--MEMBER_URL_BLACK_LISTED--}
\n{--MEMBER_BLIST_TIME--}: ".MAKE_DATETIME(REQUEST_GET('blist'), "0"); break; - case constant('CODE_NO_RECS_LEFT'): + case getCode('NO_RECS_LEFT'): $MSG = getMessage('MEMBER_SELECTED_MORE_RECS'); break; - case constant('CODE_INVALID_TAGS'): + case getCode('INVALID_TAGS'): $MSG = getMessage('MEMBER_HTML_INVALID_TAGS'); break; - case constant('CODE_MORE_POINTS'): + case getCode('MORE_POINTS'): $MSG = getMessage('MEMBER_MORE_POINTS_NEEDED'); break; - case constant('CODE_MORE_RECEIVERS1'): + case getCode('MORE_RECEIVERS1'): $MSG = getMessage('MEMBER_ENTER_MORE_RECEIVERS'); break; - case constant('CODE_MORE_RECEIVERS2'): + case getCode('MORE_RECEIVERS2'): $MSG = getMessage('MEMBER_NO_MORE_RECEIVERS_FOUND'); break; - case constant('CODE_MORE_RECEIVERS3'): - $MSG = "{--MEMBER_ENTER_MORE_MIN_RECEIVERS_1--}".getConfig('order_min')."{--MEMBER_ENTER_MORE_MIN_RECEIVERS_2--}"; + case getCode('MORE_RECEIVERS3'): + $MSG = sprintf(getMessage('MEMBER_ENTER_MORE_MIN_RECEIVERS'), getConfig('order_min')); break; - case constant('CODE_INVALID_URL'): + case getCode('INVALID_URL'): $MSG = getMessage('MEMBER_ENTER_INVALID_URL'); break; @@ -551,8 +556,8 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); break; default: - DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown error code %s detected.", $_GET['msg'])); - $MSG = "{--UNKNOWN_CODE_1--}".$_GET['msg']."{--UNKNOWN_CODE_2--}"; + DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown error code %s detected.", REQUEST_GET('msg'))); + $MSG = sprintf(getMessage('UNKNOWN_CODE'), REQUEST_GET('msg')); break; } @@ -580,7 +585,7 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); break; case "ORDER": // He is allowed to send as much as he setup the receiving value - define('ORDER_MAX_VALUE', ORDER_ALLOWED_RECEIVE_1.$ALLOWED.ORDER_ALLOWED_RECEIVE_2.$MAXI.ORDER_ALLOWED_RECEIVE_3); + define('ORDER_MAX_VALUE', sprintf(getMessage('ORDER_ALLOWED_RECEIVE'), $ALLOWED, $MAXI)); break; default: // Unknown/invalid @@ -597,14 +602,14 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); // Check if we already have an order placed and make it editable $result = SQL_QUERY_ESC("SELECT subject, text, payment_id, timestamp, url, target_send, cat_id, zip FROM `{!_MYSQL_PREFIX!}_pool` WHERE sender=%s AND data_type='TEMP' LIMIT 1", - array($GLOBALS['userid']), __FILE__, __LINE__); + array(getUserId()), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { // Old order found - list($subject, $text, $payment, $tstamp, $url, $target, $cat, $zip) = SQL_FETCHROW($result); + list($subject, $text, $payment, $tstamp, $url, $target, $content['cat'], $zip) = SQL_FETCHROW($result); // Fix max receivers when it is too much - if ((isset($CATS['uids'][$cat])) && ($target > $CATS['uids'][$cat])) $target = $CATS['uids'][$cat]; + if ((isset($CATS['uids'][$content['cat']])) && ($target > $CATS['uids'][$content['cat']])) $target = $CATS['uids'][$content['cat']]; // Old order is grabbed $OLD_ORDER = true; @@ -617,12 +622,12 @@ LIMIT 1", array(bigintval($ucat)), __FILE__, __LINE__); SQL_FREERESULT($result); // 01 2 21 12 2 23 443 3 3210 - if ((!empty($_POST['data'])) || ((getConfig('order_multi_page') != "Y") && ((!IS_ADMIN()) && (!EXT_IS_ACTIVE("html_mail"))))) { + if ((REQUEST_ISSET_POST(('data'))) || ((getConfig('order_multi_page') != "Y") && ((!IS_ADMIN()) && (!EXT_IS_ACTIVE("html_mail"))))) { // Pre-output categories $CAT = ""; foreach ($CATS['id'] as $key => $value) { $CAT .= "