X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fsponsor%2Fsettings.php;h=b6f78e32f7122a8dde12f4f9f1593a31640fa1de;hb=e521a48cf5d2a3090bd8d7a9cb21dfbc2dfda257;hp=8c2f4dacbfb2f405460fd70feef27de49d2abcf9;hpb=d18075f375db1b9db40773cdf80a5d6f2c36cd3a;p=mailer.git diff --git a/inc/modules/sponsor/settings.php b/inc/modules/sponsor/settings.php index 8c2f4dacbf..b6f78e32f7 100644 --- a/inc/modules/sponsor/settings.php +++ b/inc/modules/sponsor/settings.php @@ -12,7 +12,7 @@ * -------------------------------------------------------------------- * * * * -------------------------------------------------------------------- * - * Copyleft (c) 2003, 2004, 2005 by Roland Haeder * + * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software. You can redistribute it and/or modify * @@ -31,20 +31,20 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) { +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php"; require($INC); } elseif ((!EXT_IS_ACTIVE("sponsor")) && (!IS_ADMIN())) { - $FATAL[] = EXTENSION_PROBLEM_EXT_INACTIVE; + ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE); return; } elseif (!IS_SPONSOR()) { // No sponsor! - $FATAL[] = SPONSOR_ONLY_AREA_ENTERED; + ADD_FATAL(SPONSOR_ONLY_AREA_ENTERED); return; } // Data for the formular -$result = SQL_QUERY_ESC("SELECT status, receive_warnings, warning_interval, email, surname, family, salut +$result = SQL_QUERY_ESC("SELECT status, receive_warnings, warning_interval, email, surname, family, gender FROM "._MYSQL_PREFIX."_sponsor_data WHERE id='%s' AND password='%s' LIMIT 1", array(bigintval($_COOKIE['sponsorid']), $_COOKIE['sponsorpass']), __FILE__, __LINE__); @@ -63,7 +63,7 @@ if (SQL_NUMROWS($result) == 1) { $MSG = SPONSOR_CURRENT_PASSWORD_DIDNOT_MATCH_DB; } else { // Unsecure data which we don't want here - $UNSAFE = array('company', 'position', 'tax_ident', 'salut', 'surname', 'family', + $UNSAFE = array('company', 'position', 'tax_ident', 'gender', 'surname', 'family', 'street_nr1', 'street_nr2', 'zip', 'city', 'country', 'phone', 'fax', 'cell', 'email', 'url');