X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fsponsor%2Fwelcome.php;h=304593ecbf243661c22f2cde2c279c5eea582c93;hb=a954ccdf4aba81ec0e75a1836aa4bc14cb245aba;hp=4aa7880e92ea56c03149deed544cb67f9e8e73cf;hpb=f01652b7b8efac92d97889e312402c4a845c2f14;p=mailer.git diff --git a/inc/modules/sponsor/welcome.php b/inc/modules/sponsor/welcome.php index 4aa7880e92..304593ecbf 100644 --- a/inc/modules/sponsor/welcome.php +++ b/inc/modules/sponsor/welcome.php @@ -31,23 +31,23 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) { +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php"; require($INC); -} elseif ((!EXT_IS_ACTIVE("sponsor")) && (!IS_ADMIN())) { - ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE); +} elseif ((!EXT_IS_ACTIVE("sponsor")) + addFatalMessage(EXTENSION_PROBLEM_EXT_INACTIVE); return; } elseif (!IS_SPONSOR()) { // No sponsor! - ADD_FATAL(SPONSOR_ONLY_AREA_ENTERED); + addFatalMessage(SPONSOR_ONLY_AREA_ENTERED); return; } // Load some data $result = SQL_QUERY_ESC("SELECT gender, surname, family, (points_amount - points_used) AS points -FROM "._MYSQL_PREFIX."_sponsor_data +FROM `{!_MYSQL_PREFIX!}_sponsor_data` WHERE id='%s' AND password='%s' LIMIT 1", - array(bigintval($_COOKIE['sponsorid']), $_COOKIE['sponsorpass']), __FILE__, __LINE__); + array(bigintval(get_session('sponsorid')), get_session('sponsorpass')), __FILE__, __LINE__); list($gender, $surname, $family, $points) = SQL_FETCHROW($result); // Free memory