X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=show_bonus.php;h=90b0024e5ccbcbc9a33a5124be47001cd785eee1;hb=cc5fcb5c6db358d2b41f3a4477d0d4303fdd859f;hp=d23e3d25466b8c492eaa3ee5bfadb304b44d2569;hpb=9afd6ec5878544a7982c50ed9c0dd7de37606d5b;p=mailer.git diff --git a/show_bonus.php b/show_bonus.php index d23e3d2546..90b0024e5c 100644 --- a/show_bonus.php +++ b/show_bonus.php @@ -1,7 +1,7 @@ 0) && (getRequestElement('d') > 0) && (isGetRequestElementSet('t'))) { +if ((isValidUserId(getRequestParameter('userid'))) && (getRequestParameter('d') > 0) && (isGetRequestParameterSet('t'))) { // Set row name $t = ''; - switch (getRequestElement('t')) { + switch (getRequestParameter('t')) { case 'bonusid': // Bonus mail $t = 'bonus_id'; break; @@ -71,27 +70,30 @@ if ((getRequestElement('userid') > 0) && (getRequestElement('d') > 0) && (isGetR break; default: // Invalid type - logDebugMessage(__FILE__, __LINE__, sprintf("Invalid type %s detected.", getRequestElement('t'))); + logDebugMessage(__FILE__, __LINE__, sprintf("Invalid type %s detected.", getRequestParameter('t'))); break; } // END - switch // Valid type? if (!empty($t)) { // Check for data - $result = SQL_QUERY_ESC("SELECT d.gender, d.surname, d.family, b.level, b.points + $result = SQL_QUERY_ESC("SELECT + d.`userid`, b.`level`, b.`points` FROM `{?_MYSQL_PREFIX?}_user_data` AS d -RIGHT JOIN +INNER JOIN `{?_MYSQL_PREFIX?}_bonus_turbo` AS b ON - d.userid=b.userid + d.`userid`=b.`userid` WHERE - d.`status`='CONFIRMED' AND d.userid=%s AND b.%s=%s + d.`status`='CONFIRMED' AND + d.`userid`=%s AND + b.`%s`=%s LIMIT 1", array( - bigintval(getRequestElement('userid')), + bigintval(getRequestParameter('userid')), $t, - bigintval(getRequestElement('d')) + bigintval(getRequestParameter('d')) ), __FILE__, __LINE__); // Entry found? @@ -100,10 +102,8 @@ LIMIT 1", $content = SQL_FETCHARRAY($result); // Prepare constants for the pre-template - $content['gender'] = translateGender($content['gender']); - $content['points'] = translateComma($content['points']); - $content['mailid'] = bigintval(getRequestElement('d')); - $content['rows'] = addBonusRanks(bigintval(getRequestElement('d')), $t, bigintval(getRequestElement('userid'))); + $content['mailid'] = bigintval(getRequestParameter('d')); + $content['rows'] = addBonusRanks(bigintval(getRequestParameter('d')), $t, bigintval(getRequestParameter('userid'))); // Get some prepared content $content = merge_array($content, $GLOBALS['ranking_content']); @@ -112,18 +112,18 @@ LIMIT 1", $content['message'] = loadTemplate('show_bonus_msg', true, $content); } else { // No data found - $content['message'] = "{--BONUS_SHOW_NO_DATA--}"; + $content['message'] = '{--BONUS_SHOW_NO_DATA--}'; } // Free memory SQL_FREERESULT($result); } else { // Wrong type entered - $content['message'] = "{--BONUS_SHOW_WRONG_TYPE--}"; + $content['message'] = '{--BONUS_SHOW_WRONG_TYPE--}'; } } else { // Wrong call! - $content['message'] = "{--BONUS_SHOW_WRONG_CALL--}"; + $content['message'] = '{--BONUS_SHOW_WRONG_CALL--}'; } // Load send_bonus header template (for your banners, e.g.?)