X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=show_bonus.php;h=525d5b498055f406e6e07f0efa126355d0cc366d;hb=8fa01ac88b1208b28b47f57d997db6223f60cb9c;hp=d23e3d25466b8c492eaa3ee5bfadb304b44d2569;hpb=9afd6ec5878544a7982c50ed9c0dd7de37606d5b;p=mailer.git diff --git a/show_bonus.php b/show_bonus.php index d23e3d2546..525d5b4980 100644 --- a/show_bonus.php +++ b/show_bonus.php @@ -1,7 +1,7 @@ 0) && (getRequestElement('d') > 0) && (isGetRequestElementSet('t'))) { +if ((isValidUserId(getRequestElement('userid'))) && (getRequestElement('d') > 0) && (isGetRequestElementSet('t'))) { // Set row name $t = ''; switch (getRequestElement('t')) { @@ -78,15 +77,18 @@ if ((getRequestElement('userid') > 0) && (getRequestElement('d') > 0) && (isGetR // Valid type? if (!empty($t)) { // Check for data - $result = SQL_QUERY_ESC("SELECT d.gender, d.surname, d.family, b.level, b.points + $result = SQL_QUERY_ESC("SELECT + d.`userid`, b.`level`, b.`points` FROM `{?_MYSQL_PREFIX?}_user_data` AS d -RIGHT JOIN +INNER JOIN `{?_MYSQL_PREFIX?}_bonus_turbo` AS b ON - d.userid=b.userid + d.`userid`=b.`userid` WHERE - d.`status`='CONFIRMED' AND d.userid=%s AND b.%s=%s + d.`status`='CONFIRMED' AND + d.`userid`=%s AND + b.`%s`=%s LIMIT 1", array( bigintval(getRequestElement('userid')), @@ -100,8 +102,6 @@ LIMIT 1", $content = SQL_FETCHARRAY($result); // Prepare constants for the pre-template - $content['gender'] = translateGender($content['gender']); - $content['points'] = translateComma($content['points']); $content['mailid'] = bigintval(getRequestElement('d')); $content['rows'] = addBonusRanks(bigintval(getRequestElement('d')), $t, bigintval(getRequestElement('userid'))); @@ -112,18 +112,18 @@ LIMIT 1", $content['message'] = loadTemplate('show_bonus_msg', true, $content); } else { // No data found - $content['message'] = "{--BONUS_SHOW_NO_DATA--}"; + $content['message'] = '{--BONUS_SHOW_NO_DATA--}'; } // Free memory SQL_FREERESULT($result); } else { // Wrong type entered - $content['message'] = "{--BONUS_SHOW_WRONG_TYPE--}"; + $content['message'] = '{--BONUS_SHOW_WRONG_TYPE--}'; } } else { // Wrong call! - $content['message'] = "{--BONUS_SHOW_WRONG_CALL--}"; + $content['message'] = '{--BONUS_SHOW_WRONG_CALL--}'; } // Load send_bonus header template (for your banners, e.g.?)