X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fsponsor%2Fsettings.php;h=636697afcf48a8e2bc92d9ebfd91702210b9efc9;hb=f55a18dbd4f2312a8812fb3feb3296b350ba269b;hp=f9130baf9357754eb6a9aedf2ddfec05ad634539;hpb=ea2a5e6a7838127d2f9dec02ba68ec575188528b;p=mailer.git

diff --git a/inc/modules/sponsor/settings.php b/inc/modules/sponsor/settings.php
index f9130baf93..636697afcf 100644
--- a/inc/modules/sponsor/settings.php
+++ b/inc/modules/sponsor/settings.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 10/11/2005 *
- * ===============                              Last change: 05/19/2008 *
+ * Mailer v0.2.1-FINAL                                Start: 10/11/2005 *
+ * ===================                          Last change: 05/19/2008 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : settings.php                                     *
@@ -10,14 +10,21 @@
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Der Sponsor kann seine Einstellungen aendern     *
  * -------------------------------------------------------------------- *
- *                                                                      *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
+ * $Tag:: 0.2.1-FINAL                                                 $ *
+ * $Author::                                                          $ *
+ * Needs to be in all Files and every File needs "svn propset           *
+ * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009, 2010 by Mailer Developer Team                    *
  * For more information visit: http://www.mxchange.org                  *
  *                                                                      *
- * This program is free software. You can redistribute it and/or modify *
+ * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
- * the Free Software Foundation; either version 2 of the License.       *
+ * the Free Software Foundation; either version 2 of the License, or    *
+ * (at your option) any later version.                                  *
  *                                                                      *
  * This program is distributed in the hope that it will be useful,      *
  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
@@ -31,86 +38,95 @@
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
-	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php";
-	require($INC);
-} elseif ((!EXT_IS_ACTIVE("sponsor")) && (!IS_ADMIN())) {
-	$FATAL[] = EXTENSION_PROBLEM_EXT_INACTIVE;
+if (!defined('__SECURITY')) {
+	die();
+} elseif (!isExtensionActive('sponsor')) {
+	loadTemplate('admin_settings_saved', false, generateExtensionInactiveNotInstalledMessage('sponsor'));
 	return;
-} elseif (!IS_SPONSOR()) {
+} elseif (!isSponsor()) {
 	// No sponsor!
-	$FATAL[] = SPONSOR_ONLY_AREA_ENTERED;
+	addFatalMessage(__FILE__, __LINE__, '{--SPONSOR_ONLY_AREA_ENTERED--}');
 	return;
 }
 
+// Init message
+$message = '';
+
 // Data for the formular
-$result = SQL_QUERY_ESC("SELECT status, receive_warnings, warning_interval, email, surname, family, salut
-FROM "._MYSQL_PREFIX."_sponsor_data
-WHERE id='%s' AND password='%s' LIMIT 1",
- array(bigintval($_COOKIE['sponsorid']), $_COOKIE['sponsorpass']), __FILE__, __LINE__);
+$result = SQL_QUERY_ESC("SELECT
+	`status`, `receive_warnings`, `warning_interval`, `email`, `surname`, `family`, `gender`
+FROM
+	`{?_MYSQL_PREFIX?}_sponsor_data`
+WHERE
+	`id`=%s AND
+	`password`='%s'
+LIMIT 1",
+	array(
+		bigintval(getSession('sponsor_id')),
+		getSession('sponsorpass')
+	), __FILE__, __LINE__);
+
 if (SQL_NUMROWS($result) == 1) {
 	// Load sponsor data
 	$content = SQL_FETCHARRAY($result);
-	if ($content['status'] == "CONFIRMED") {
+	if ($content['status'] == 'CONFIRMED') {
 		// Check if form was submitted or not
-		if (!empty($_POST['ok'])) {
+		if (isFormSent()) {
 			// Check passwords
-			if (empty($_POST['password'])) {
+			if (!isPostRequestParameterSet('password')) {
 				// No current password entered
-				$MSG = SPONSOR_NO_CURRENT_PASSWORD_ENTERED;
-			} elseif (md5($_POST['password']) != $_COOKIE['sponsorpass']) {
+				$message = SPONSOR_NO_CURRENT_PASSWORD_ENTERED;
+			} elseif (md5(postRequestParameter('password')) != getSession('sponsorpass')) {
 				// Entered password didn't match password in DB
-				$MSG = SPONSOR_CURRENT_PASSWORD_DIDNOT_MATCH_DB;
+				$message = SPONSOR_CURRENT_PASSWORD_DIDNOT_MATCH_DB;
 			} else {
 				// Unsecure data which we don't want here
-				$UNSAFE = array('company', 'position', 'tax_ident', 'salut', 'surname', 'family',
-				                'street_nr1', 'street_nr2', 'zip', 'city', 'country', 'phone', 'fax', 'cell',
-				                'email', 'url');
+				$UNSAFE = array(
+					'company', 'position', 'tax_ident', 'gender', 'surname', 'family',
+					'street_nr1', 'street_nr2', 'zip', 'city', 'country', 'phone', 'fax', 'cell',
+					'email', 'url'
+				);
 
 				// Remove all (maybe spoofed) unsafe data from array
 				foreach ($UNSAFE as $remove) {
-					unset($_POST[$remove]);
-				}
+					unsetPostRequestParameter($remove);
+				} // END - if
 
 				// Set last change timestamp
-				$_POST['last_change'] = time();
+				setPostRequestParameter('last_change', 'UNIX_TIMESTAMP()');
 
 				// Save data
-				$MSG = SPONSOR_SAVE_DATA($_POST, $content);
+				$message = saveSponsorData(postRequestArray(), $content);
 			}
 
-			if (!empty($MSG)) {
+			if (!empty($message)) {
 				// Output message
-				$OUT = LOAD_TEMPLATE("admin_settings_saved", true, $MSG);
+				$GLOBALS['sponsor_output'] = loadTemplate('admin_settings_saved', true, $message);
 			} else {
 				// No message generated
-				$OUT = LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_NO_MESSAGE_GENERATED);
+				$GLOBALS['sponsor_output'] = loadTemplate('admin_settings_saved', true, '{--SPONSOR_NO_MESSAGE_GENERATED--}');
 			}
 		} else {
 			// Make yes/no selection
-			switch ($content['receive_warnings']) {
-				case "Y": define('__YES', " checked"); define('__NO', "");         break;
-				case "N": define('__YES', "");         define('__NO', " checked"); break;
-			}
-
-			// Translate current interval into fancy string
-			define('__CURRENT', CREATE_FANCY_TIME($content['warning_interval']));
+			$content['receive_warnings_y'] = '';
+			$content['receive_warnings_n'] = '';
+			$content['receive_warnings_' . strtolower($content['receive_warnings'])] = ' checked="checked"';
 
 			// Output formular
-			$OUT = LOAD_TEMPLATE("sponsor_settings_form", true, $content);
+			$GLOBALS['sponsor_output'] = loadTemplate('sponsor_settings_form', true, $content);
 		}
 	} else {
 		// Locked or so?
-		$STATUS = SPONSOR_TRANSLATE_STATUS($content['status']);
-		$OUT = LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_ACCOUNT_FAILED_1.$STATUS.SPONSOR_ACCOUNT_FAILED_2);
+		$STATUS = sponsorTranslateUserStatus($content['status']);
+		$GLOBALS['sponsor_output'] = loadTemplate('admin_settings_saved', true, getMaskedMessage('SPONSOR_ACCOUNT_FAILED', $STATUS));
 	}
 } else {
 	// Sponsor account not found!
-	$OUT = LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_ACCOUNT_404_1.$_COOKIE['sponsorid'].SPONSOR_ACCOUNT_404_2);
+	$GLOBALS['sponsor_output'] = loadTemplate('admin_settings_saved', true, getMaskedMessage('SPONSOR_ACCOUNT_404', getSession('sponsor_id')));
 }
 
 // Free memory
 SQL_FREERESULT($result);
 
-//
+// [EOF]
 ?>