X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fmember%2Fwhat-transfer.php;h=b521ba218f88e9b9aed24906941adbab6d7a6a45;hb=ea2a5e6a7838127d2f9dec02ba68ec575188528b;hp=03da5c22f3785c6dec57c1e9f21aff69fa555923;hpb=e8a44f28a734e4796b70a1bc9df353f2466e1846;p=mailer.git

diff --git a/inc/modules/member/what-transfer.php b/inc/modules/member/what-transfer.php
index 03da5c22f3..b521ba218f 100644
--- a/inc/modules/member/what-transfer.php
+++ b/inc/modules/member/what-transfer.php
@@ -46,7 +46,7 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
 ADD_DESCR("member", basename(__FILE__));
 
 // Load data
-$result = SQL_QUERY_ESC("SELECT opt_in FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+$result = SQL_QUERY_ESC("SELECT opt_in FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
  array($GLOBALS['userid']), __FILE__, __LINE__);
 list($opt_in) = SQL_FETCHROW($result);
 
@@ -63,13 +63,13 @@ switch ($MODE)
 {
 case "new": // Start new transfer
 	// Get total points and subtract the balance amount from it = maximum transferable points
-	$result = SQL_QUERY_ESC("SELECT SUM(points) FROM "._MYSQL_PREFIX."_user_points WHERE userid=%d AND points > 0",
+	$result = SQL_QUERY_ESC("SELECT SUM(points) FROM "._MYSQL_PREFIX."_user_points WHERE userid=%s AND points > 0",
 	 array($GLOBALS['userid']), __FILE__, __LINE__);
 	list($total) = SQL_FETCHROW($result);
 	SQL_FREERESULT($result);
 
 	// Get totally used points and password
-	$result = SQL_QUERY_ESC("SELECT used_points, password FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+	$result = SQL_QUERY_ESC("SELECT used_points, password FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
 	 array($GLOBALS['userid']), __FILE__, __LINE__);
 	list($used, $pass) = SQL_FETCHROW($result);
 	SQL_FREERESULT($result);
@@ -201,12 +201,11 @@ case "new": // Start new transfer
 			 __FILE__, __LINE__);
 
 			// Add points to account *directly* ...
-			$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_points SET points=points+%s WHERE userid=%d AND ref_depth=0 LIMIT 1",
+			$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_points SET points=points+%s WHERE userid=%s AND ref_depth=0 LIMIT 1",
 			 array(bigintval($_POST['points']), bigintval($_POST['to_uid'])), __FILE__, __LINE__);
 
 			// ... and add it to current user's used points
-			$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s WHERE userid=%d LIMIT 1",
-			 array(bigintval($_POST['points']), $GLOBALS['userid']), __FILE__, __LINE__);
+			SUB_POINTS($GLOBALS['userid'], $_POST['points']);
 
 			// First send email to recipient
 			$msg = LOAD_EMAIL_TEMPLATE("member_transfer_recipient", "", __RECIPIENT_UID);
@@ -348,14 +347,14 @@ case "list_out": // List only outgoing transactions
 	switch ($MODE)
 	{
 	case "list_in":
-		$SQL = "SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d ORDER BY time_trans DESC LIMIT ".$_CONFIG['transfer_max'];
+		$SQL = "SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s ORDER BY time_trans DESC LIMIT ".$_CONFIG['transfer_max'];
 		$NOTHING = TRANSFER_NO_INCOMING_TRANSFERS;
 		define('__TRANSFER_SUM', TRANSFER_TOTAL_INCOMING);
 		define('__TRANSFER_TITLE', TRANSFER_LIST_INCOMING);
 		break;
 
 	case "list_out":
-		$SQL = "SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d ORDER BY time_trans DESC LIMIT ".$_CONFIG['transfer_max'];
+		$SQL = "SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s ORDER BY time_trans DESC LIMIT ".$_CONFIG['transfer_max'];
 		$NOTHING = TRANSFER_NO_OUTGOING_TRANSFERS;
 		define('__TRANSFER_SUM', TRANSFER_TOTAL_OUTGOING);
 		define('__TRANSFER_TITLE', TRANSFER_LIST_OUTGOING);
@@ -432,7 +431,7 @@ KEY(party_uid)
 ) TYPE=HEAP", __FILE__, __LINE__);
 
 	// Let's begin with the incoming list
-	$result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d ORDER BY id LIMIT %s",
+	$result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s ORDER BY id LIMIT %s",
 array($GLOBALS['userid'], $_CONFIG['transfer_max']), __FILE__, __LINE__);
 	while ($DATA = SQL_FETCHROW($result))
 	{
@@ -445,7 +444,7 @@ array($GLOBALS['userid'], $_CONFIG['transfer_max']), __FILE__, __LINE__);
 	SQL_FREERESULT($result);
 
 	// As the last table transfer data from outgoing table to temporary
-	$result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d ORDER BY id LIMIT %s",
+	$result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s ORDER BY id LIMIT %s",
 array($GLOBALS['userid'], $_CONFIG['transfer_max']), __FILE__, __LINE__);
 	while ($DATA = SQL_FETCHROW($result))
 	{
@@ -524,7 +523,7 @@ array($GLOBALS['userid'], $_CONFIG['transfer_max']), __FILE__, __LINE__);
 
 case "": // Overview page
 	// Check incoming transfers
-	$result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d", array($GLOBALS['userid']), __FILE__, __LINE__);
+	$result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 	list($dmy) = SQL_FETCHROW($result);
 	SQL_FREERESULT($result);
 
@@ -539,7 +538,7 @@ case "": // Overview page
 	}
 
 	// Check outgoing transfers
-	$result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d", array($GLOBALS['userid']), __FILE__, __LINE__);
+	$result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 	list($dmy) = SQL_FETCHROW($result);
 	SQL_FREERESULT($result);
 
@@ -566,7 +565,7 @@ case "": // Overview page
 	if (isset($_POST['ok']))
 	{
 		// Save settings
-		$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET opt_in='%s' WHERE userid=%d LIMIT 1",
+		$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET opt_in='%s' WHERE userid=%s LIMIT 1",
 		 array($_POST['opt_in'], $GLOBALS['userid']), __FILE__, __LINE__);
 
 		// Rember for next switch() command
@@ -591,7 +590,7 @@ case "": // Overview page
 	}
 
 	// Check for latest out-transfers
-	$result = SQL_QUERY_ESC("SELECT time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE time_trans > ".(time() - $_CONFIG['transfer_timeout'])." AND userid=%d ORDER BY time_trans DESC LIMIT 1", array($GLOBALS['userid']), __FILE__, __LINE__);
+	$result = SQL_QUERY_ESC("SELECT time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE time_trans > ".(time() - $_CONFIG['transfer_timeout'])." AND userid=%s ORDER BY time_trans DESC LIMIT 1", array($GLOBALS['userid']), __FILE__, __LINE__);
 	if (SQL_NUMROWS($result) == 0)
 	{
 		// Load template