// If not currently doubled set it to zero
unset($_GET['DOUBLER_UID']);
unset($_POST['DOUBLER_UID']);
-unset($_SESSION['DOUBLER_UID']);
+set_session('DOUBLER_UID', "");
if (empty($DOUBLER_UID)) $DOUBLER_UID = "0";
// Check for doubles which we can pay out
{
// Task not created so it's a brand-new extension which we need to register and create a task for!
$result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_task_system (assigned_admin, userid, status, task_type, subject, text, task_created) VALUES ('%s', '0', 'NEW', 'EXTENSION_UPDATE', '%s', '%s', UNIX_TIMESTAMP())",
- array(GET_ADMIN_ID(SQL_ESCAPE($_SESSION['admin_login'])), $ext_subj, addslashes($NOTES)), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(SQL_ESCAPE(get_session('admin_login'))), $ext_subj, addslashes($NOTES)), __FILE__, __LINE__);
}
// Free memory
$SQLs[] = "ALTER TABLE "._MYSQL_PREFIX."_admins ADD default_acl enum('deny', 'allow') not null default 'deny'";
// But allow current admin everything (THIS SHALL BE YOU!)
- $SQLs[] = "UPDATE "._MYSQL_PREFIX."_admins SET default_acl='allow' WHERE login='".$_SESSION['admin_login']."' LIMIT 1";
+ $SQLs[] = "UPDATE "._MYSQL_PREFIX."_admins SET default_acl='allow' WHERE login='".get_session('admin_login')."' LIMIT 1";
$SQLs[] = "DROP TABLE IF EXISTS "._MYSQL_PREFIX."_admins_acls";
$SQLs[] = "CREATE TABLE "._MYSQL_PREFIX."_admins_acls (
id bigint(20) not null auto_increment,
return $ret;
}
//
-function GET_LANGUAGE()
-{
- if (!empty($_GET['mx_lang']))
- {
+function GET_LANGUAGE() {
+ if (!empty($_GET['mx_lang'])) {
// Accept only first 2 chars
$lang = substr($_GET['mx_lang'], 0, 2);
- }
- else
- {
+ } else {
// Do nothing
$lang = "";
}
$ret = DEFAULT_LANG;
// Check GET variable and cookie
- if (!empty($lang))
- {
+ if (!empty($lang)) {
// Check if main language file does exist
- if (file_exists(PATH."inc/language/".$lang.".php"))
- {
+ if (file_exists(PATH."inc/language/".$lang.".php")) {
// Okay found, so let's update cookies
SET_LANGUAGE($lang);
}
- }
- elseif (!empty($_SESSION['mx_lang']))
- {
+ } elseif (!isSessionVariableSet('mx_lang')) {
// Return stored value from cookie
- $ret = $_SESSION['mx_lang'];
+ $ret = get_session('mx_lang');
}
return $ret;
}
//
-function SET_LANGUAGE($lang)
-{
+function SET_LANGUAGE($lang) {
global $_CONFIG;
// Accept only first 2 chars!
// Set cookie
set_session("mx_lang", $lang);
-
- // Set array
- $_SESSION['mx_lang'] = $lang;
}
//
function LOAD_EMAIL_TEMPLATE($template, $content="", $UID="0")
$HTTP_USER_AGENT = getenv('HTTP_USER_AGENT');
$ADMIN = MAIN_TITLE;
- if (!empty($_SESSION['admin_login']))
- {
+ if (isSessionVariableSet('admin_login')) {
// Load Admin data
$result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
- array(SQL_ESCAPE($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(SQL_ESCAPE(get_session('admin_login'))), __FILE__, __LINE__);
list($ADMIN) = SQL_FETCHROW($result);
SQL_FREERESULT($result);
}
$data = $code.":".$uid.":".$DATA;
// Add more additional data
- if (isset($_SESSION['u_hash'])) $data .= ":".$_SESSION['u_hash'];
- if (isset($GLOBALS['userid'])) $data .= ":".$GLOBALS['userid'];
- if (isset($_SESSION['lifetime'])) $data .= ":".$_SESSION['lifetime'];
- if (isset($_SESSION['mxchange_theme'])) $data .= ":".$_SESSION['mxchange_theme'];
- if (isset($_SESSION['mx_lang'])) $data .= ":".$_SESSION['mx_lang'];
- if (isset($GLOBALS['refid'])) $data .= ":".$GLOBALS['refid'];
+ if (isSessionVariableSet('u_hash')) $data .= ":".get_session('u_hash');
+ if (isset($GLOBALS['userid'])) $data .= ":".$GLOBALS['userid'];
+ if (isSessionVariableSet('lifetime')) $data .= ":".get_session('lifetime');
+ if (isSessionVariableSet('mxchange_theme')) $data .= ":".get_session('mxchange_theme');
+ if (isSessionVariableSet('mx_lang')) $data .= ":".GET_LANGUAGE();
+ if (isset($GLOBALS['refid'])) $data .= ":".$GLOBALS['refid'];
// Calculate number for generating the code
$a = $code + _ADD - 1;
// Then check all cookies if they are marked as deleted!
foreach ($cookies as $cookieName) {
// Is the cookie set to "deleted"?
- if ((isset($_SESSION[$cookieName])) && ($_SESSION[$cookieName] == "deleted")) {
- unset($_SESSION[$cookieName]);
+ if (get_session($cookieName) == "deleted") {
+ set_session($cookieName, "");
}
}
}
$var = trim(SQL_ESCAPE($var)); $value = trim($value);
// Is the session variable set?
- if (("".$value."" == "") && (isset($_SESSION[$var]))) {
+ if (("".$value."" == "") && (isSessionVariableSet($var))) {
// Remove the session
- //* DEBUG: */ echo "UNSET:".$var."=".$_SESSION[$var]."<br />\n";
+ //* DEBUG: */ echo "UNSET:".$var."=".get_session($var)."<br />\n";
unset($_SESSION[$var]);
return session_unregister($var);
- } elseif (("".$value."" != "") && (!isset($_SESSION[$var]))) {
+ } elseif (("".$value."" != "") && (!isSessionVariableSet($var))) {
// Set session
//* DEBUG: */ echo "SET:".$var."=".$value."<br />\n";
$_SESSION[$var] = $value;
return($res);
}
+// Check wether a session variable is set
+function isSessionVariableSet($var) {
+ return (isset($_SESSION[$var]));
+}
+
+// Returns wether the value of the session variable or NULL if not set
+function get_session($var) {
+ if (!isset($_SESSION)) session_start();
+
+ // Default is not found! ;-)
+ $value = null;
+
+ // Is the variable there?
+ if (isSessionVariableSet($var)) {
+ // Then get it secured!
+ $value = SQL_ESCAPE($_SESSION[$var]);
+ }
+
+ // Return the value
+ return $value;
+}
+
//
//////////////////////////////////////////////
// //
@chmod($file, 0644);
//* DEBUG: */ unlink($file);
- //* DEBUG: */ $test = hexdec($_SESSION['u_hash']) / hexdec($secretKey);
+ //* DEBUG: */ $test = hexdec(get_session('u_hash')) / hexdec($secretKey);
//* DEBUG: */ $test = generateHash(str_replace('.', '', $test));
- //* DEBUG: */ die("Secret-Key: ".$secretKey."<br>Cookie: ".$_SESSION['u_hash']."<br>Test: ".$test);
+ //* DEBUG: */ die("Secret-Key: ".$secretKey."<br>Cookie: ".get_session('u_hash')."<br>Test: ".$test);
// Write $file_hash to database
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_config SET file_hash='%s' WHERE config=0 LIMIT 1",
$ret = false;
// Get admin's defult access right
- if (!empty($cacheArray['admins']['def_acl'][$_SESSION['admin_login']])) {
+ if (!empty($cacheArray['admins']['def_acl'][get_session('admin_login')])) {
// Load from cache
- $default = $cacheArray['admins']['def_acl'][$_SESSION['admin_login']];
+ $default = $cacheArray['admins']['def_acl'][get_session('admin_login')];
// Count cache hits
$_CONFIG['cache_hits']++;
} elseif (!is_object($cacheInstance)) {
// Load from database
$result = SQL_QUERY_ESC("SELECT default_acl FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
- array($_SESSION['admin_login']), __FILE__, __LINE__);
+ array(get_session('admin_login')), __FILE__, __LINE__);
list($default) = SQL_FETCHROW($result);
SQL_FREERESULT($result);
}
// Get admin's ID
- $aid = GET_ADMIN_ID($_SESSION['admin_login']);
+ $aid = GET_ADMIN_ID(get_session('admin_login'));
if (!empty($wht)) {
// Check for parent menu:
if (!empty($POST['pass1'][$id])) $ADD = sprintf(", password='%s'", SQL_ESCAPE($hash));
// Get admin's ID
- $salt = substr(GET_ADMIN_HASH($_SESSION['admin_login']), 0, -40);
- $aid = GET_ADMIN_ID($_SESSION['admin_login']);
+ $salt = substr(GET_ADMIN_HASH(get_session('admin_login')), 0, -40);
+ $aid = GET_ADMIN_ID(get_session('admin_login'));
// Rewrite cookie when it's own account
if ($aid == $id) {
// Set timeout cookie
set_session("admin_last", time());
- if ($login != $_SESSION['admin_login']) {
+ if ($login != get_session('admin_login')) {
// Update login cookie
set_session("admin_login", $login);
// Update password cookie as well?
if (!empty($ADD)) set_session("admin_md5", $hash);
- } elseif (generateHash($POST['pass1'][$id], $salt) != $_SESSION['admin_md5']) {
+ } elseif (generateHash($POST['pass1'][$id], $salt) != get_session('admin_md5')) {
// Update password cookie
set_session("admin_md5", $hash);
}
// Get default ACL from admin to check if we can allow him to change the default ACL
$result = SQL_QUERY_ESC("SELECT default_acl FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
- array($_SESSION['admin_login']), __FILE__, __LINE__);
+ array(get_session('admin_login')), __FILE__, __LINE__);
list($default) = SQL_FETCHROW($result);
// Free result
$id = bigintval($id);
// Delete only when it's not your own account!
- if (($del == 1) && (GET_ADMIN_ID($_SESSION['admin_login']) != $id)) {
+ if (($del == 1) && (GET_ADMIN_ID(get_session('admin_login')) != $id)) {
// Rewrite his tasks to all admins
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='0' WHERE assigned_admin='%s'",
array($id), __FILE__, __LINE__);
{
// Add more variables which you want to use in your template files
global $DATA, $ACTION, $WHAT;
- $REFID = bigintval($_SESSION['refid']);
+ $REFID = bigintval(get_session('refid'));
if ($template == "member_support_form")
{
// Support request of a member
- $ID = bigintval($_SESSION['userid']);
+ $ID = bigintval($GLOBALS['userid']);
$result = SQL_QUERY_ESC("SELECT sex, surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid='%s' LIMIT 1", array($ID), __FILE__, __LINE__);
list($sex, $surname, $family) = SQL_FETCHROW($result);
SQL_FREERESULT($result);
global $_POST;
$_POST = $GLOBALS['_POST'];
}
-if (!isset($_SESSION))
+if (!isset($_COOKIE))
{
- global $_SESSION;
- $_SESSION = $GLOBALS['_COOKIE'];
+ global $_COOKIE;
+ $_COOKIE = $GLOBALS['_COOKIE'];
}
// Include IP-Filter here
}
// ... and finally cookies
- foreach ($_SESSION as $seckey=>$secvalue)
+ foreach ($_COOKIE as $seckey=>$secvalue)
{
if (is_array($secvalue))
{
// Throw arrays away...
- unset($_SESSION[$seckey]);
+ unset($_COOKIE[$seckey]);
}
else
{
foreach ($SEC_CHARS['from'] as $key=>$char)
{
// Pass all through
- $_SESSION[$seckey] = str_replace($char , $SEC_CHARS['to'][$key], $_SESSION[$seckey]);
+ $_COOKIE[$seckey] = str_replace($char , $SEC_CHARS['to'][$key], $_COOKIE[$seckey]);
}
// Strip all other out
- $_SESSION[$seckey] = strip_tags($_SESSION[$seckey]);
+ $_COOKIE[$seckey] = strip_tags($_COOKIE[$seckey]);
}
}
}
if (!$JOBS_DONE) {
// New extensions or updates found
$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_task_system WHERE assigned_admin='%s' AND status='NEW' AND task_type='EXTENSION_UPDATE'",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
$value = SQL_NUMROWS($result);
SQL_FREERESULT($result);
// Solved tasks
//
$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_task_system WHERE status = 'SOLVED' AND assigned_admin='%s'",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
$value = SQL_NUMROWS($result);
SQL_FREERESULT($result);
// Your tasks
//
$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_task_system WHERE assigned_admin='%s' AND status = 'NEW' AND task_type != 'EXTENSION_UPDATE'",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
$value = SQL_NUMROWS($result);
SQL_FREERESULT($result);
if ((!isBooleanConstantAndTrue('mxchange_installed')) || (isBooleanConstantAndTrue('mxchange_installing'))) return;
// Load default sql_patches extension if present
-if (file_exists(PATH."inc/extensions/ext-sql_patches.php") && is_readable(PATH."inc/extensions/ext-sql_patches.php"))
-{
+if (file_exists(PATH."inc/extensions/ext-sql_patches.php") && is_readable(PATH."inc/extensions/ext-sql_patches.php")) {
// Load it...
$EXT_LOAD_MODE = "";
require_once(PATH."inc/extensions/ext-sql_patches.php");
$cacheArray['active_extensions'] = array('sql_patches' => 'Y'); // KEEP THIS ALWAYS ACTIVE!
-}
- else
-{
+} else {
// Initialize array for "always keep active extensions"
$cacheArray['active_extensions'] = array();
}
// Load language
if ($cacheMode == "load") include(PATH."inc/language/cache_".GET_LANGUAGE().".php");
-}
- else
-{
+} else {
$cacheMode = "no";
}
// Load register template
LOAD_TEMPLATE("admin_reg_form");
}
-} elseif ((empty($_SESSION['admin_login'])) || (empty($_SESSION['admin_md5'])) || (empty($_SESSION['admin_last'])) || (empty($_SESSION['admin_to'])) || (($_SESSION['admin_last'] + bigintval($_SESSION['admin_to']) * 3600 * 24) < time())) {
+} elseif ((!isSessionVariableSet('admin_login')) || (!isSessionVariableSet('admin_md5')) || (!isSessionVariableSet('admin_last')) || (!isSessionVariableSet('admin_to')) || ((get_session('admin_last') + bigintval(get_session('admin_to')) * 3600 * 24) < time())) {
// At leat one administrator account was created
- if ((!empty($_SESSION['admin_login'])) && (!empty($_SESSION['admin_md5'])) && (!empty($_SESSION['admin_last'])) && (!empty($_SESSION['admin_to']))) {
+ if ((isSessionVariableSet('admin_login')) && (isSessionVariableSet('admin_md5')) && (isSessionVariableSet('admin_last')) && (isSessionVariableSet('admin_to'))) {
// Timeout for last login, we have to logout first!
$URL = URL."/modules.php?module=admin&action=login&logout=1";
LOAD_URL($URL);
// Only try to remove cookies
if (set_session("admin_login", "") && set_session("admin_md5", "") && set_session("admin_last", "") && set_session("admin_to", "")) {
// Also remove array elements
- unset($_SESSION['admin_login']);
- unset($_SESSION['admin_md5']);
- unset($_SESSION['admin_last']);
- unset($_SESSION['admin_to']);
+ set_session('admin_login' , "");
+ set_session('admin_md5' , "");
+ set_session('admin_last' , "");
+ set_session('admin_to' , "");
// Destroy session
@session_destroy();
}
} else {
// Maybe an Admin want's to login?
- $ret = CHECK_ADMIN_COOKIES(SQL_ESCAPE($_SESSION['admin_login']), SQL_ESCAPE($_SESSION['admin_md5']));
+ $ret = CHECK_ADMIN_COOKIES(SQL_ESCAPE(get_session('admin_login')), SQL_ESCAPE(get_session('admin_md5')));
switch ($ret) {
case "done":
// Cookie-Data accepted
- if ((set_session("admin_md5", SQL_ESCAPE($_SESSION['admin_md5']))) && (set_session("admin_login", SQL_ESCAPE($_SESSION['admin_login']))) && (set_session("admin_last", time())) && (set_session("admin_to", bigintval($_SESSION['admin_to'])))) {
+ if ((set_session("admin_md5", SQL_ESCAPE(get_session('admin_md5')))) && (set_session("admin_login", SQL_ESCAPE(get_session('admin_login')))) && (set_session("admin_last", time())) && (set_session("admin_to", bigintval(get_session('admin_to'))))) {
// Ok, Cookie-Update done
if ((EXT_IS_ACTIVE("admins")) && (GET_EXT_VERSION("admins") > "0.2")) {
// Check if action GET variable was set
$act = GET_ACTION($GLOBALS['module'], $wht);
// Define admin login name and ID number
- define('__ADMIN_LOGIN', SQL_ESCAPE($_SESSION['admin_login']));
- define('__ADMIN_ID' , GET_ADMIN_ID($_SESSION['admin_login']));
+ define('__ADMIN_LOGIN', SQL_ESCAPE(get_session('admin_login')));
+ define('__ADMIN_ID' , GET_ADMIN_ID(get_session('admin_login')));
// Preload templates
if (EXT_IS_ACTIVE("admins")) {
$MODE = $_CONFIG['admin_menu']; $ADMIN = $MODE;
// Check individual settings of current admin
- if (isset($cacheArray['admins']['la_mode'][$_SESSION['admin_login']]))
+ if (isset($cacheArray['admins']['la_mode'][get_session('admin_login')]))
{
// Load from cache
- $ADMIN = $cacheArray['admins']['la_mode'][$_SESSION['admin_login']];
+ $ADMIN = $cacheArray['admins']['la_mode'][get_session('admin_login')];
$_CONFIG['cache_hits']++;
}
elseif (GET_EXT_VERSION("admins") >= "0.6.7")
{
// Load from database when version of "admins" is enough
$result = SQL_QUERY_ESC("SELECT la_mode FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
- array($_SESSION['admin_login']), __FILE__, __LINE__);
+ array(get_session('admin_login')), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1)
{
// Load data
// First check for solved and not assigned tasks and assign them to current admin
$result_task = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='%s' WHERE assigned_admin < 1 AND status != 'NEW'",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
// We currently don't want to install an extension so let's find out if we need...
$EXT_LOAD_MODE = "register"; $JOBS_DONE = true;
$result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_task_system (assigned_admin, userid, status, task_type, subject, text, task_created)
VALUES ('%s', '0', 'NEW', 'EXTENSION', '%s', '%s', UNIX_TIMESTAMP())",
array(
- GET_ADMIN_ID($_SESSION['admin_login']),
+ GET_ADMIN_ID(get_session('admin_login')),
$ext_subj,
addslashes($MSG),
), __FILE__, __LINE__, true, false);
FROM "._MYSQL_PREFIX."_task_system
WHERE assigned_admin='%s' OR (assigned_admin='0' AND status='NEW')
ORDER BY userid DESC, task_type DESC, subject, task_created DESC",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
if (SQL_NUMROWS($result_tasks) > 0)
{
// New jobs found!
foreach ($_POST['task'] as $id=>$sel)
{
$result_task = SQL_QUERY_ESC("SELECT id, userid, task_type, subject, text, task_created, status, assigned_admin FROM "._MYSQL_PREFIX."_task_system WHERE id=%d AND (assigned_admin='%s' OR (assigned_admin='0' AND status='NEW')) LIMIT 1",
- array(bigintval($id), GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(bigintval($id), GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
if (SQL_NUMROWS($result_task) == 1)
{
// Task is valid...
{
// Assgin current admin to unassgigned task
$result_assign = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='%s' WHERE id=%d LIMIT 1",
- array(GET_ADMIN_ID($_SESSION['admin_login']), bigintval($tid)), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login')), bigintval($tid)), __FILE__, __LINE__);
}
$ADD = "";
if ($type == "SUPPORT_MEMBER")
foreach ($_POST['task'] as $id=>$sel)
{
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='0' WHERE id=%d AND assigned_admin='%s' LIMIT 1",
- array(bigintval($id), GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(bigintval($id), GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
}
}
elseif (isset($_POST['del']))
foreach ($_POST['task'] as $id=>$sel)
{
$result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_task_system WHERE id=%d AND (assigned_admin='%s' OR assigned_admin='0') LIMIT 1",
- array(bigintval($id), GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(bigintval($id), GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
}
}
// Update query
$result_tasks = SQL_QUERY_ESC("SELECT id, assigned_admin, userid, task_type, subject, text, task_created FROM "._MYSQL_PREFIX."_task_system WHERE assigned_admin='%s' OR (assigned_admin='0' AND status='NEW') ORDER BY task_created DESC",
- array(GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
}
// There are uncompleted jobs!
$result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_rallye_data (admin_id, title, descr, template, start_time, end_time, auto_add_new_user, is_active, send_notify)
VALUES ('%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s')",
array(
- GET_ADMIN_ID($_SESSION['admin_login']),
+ GET_ADMIN_ID(get_session('admin_login')),
$_POST['title'],
$_POST['descr'],
$_POST['template'],
case "register": // Register new extension
$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_task_system WHERE assigned_admin='%s' AND task_type='EXTENSION' LIMIT 1",
- array(bigintval(GET_ADMIN_ID($_SESSION['admin_login']))), __FILE__, __LINE__);
+ array(bigintval(GET_ADMIN_ID(get_session('admin_login')))), __FILE__, __LINE__);
$task_found = SQL_NUMROWS($result);
// Free result
switch ($_GET['type'])
{
case "your": // List only your own open (new) tasks
- $whereStatement = "assigned_admin='".GET_ADMIN_ID($_SESSION['admin_login'])."' AND status='NEW' AND task_type != 'EXTENSION_UPDATE'";
+ $whereStatement = "assigned_admin='".GET_ADMIN_ID(get_session('admin_login'))."' AND status='NEW' AND task_type != 'EXTENSION_UPDATE'";
break;
case "updates": // List only updates assigned to you
- $whereStatement = "assigned_admin='".GET_ADMIN_ID($_SESSION['admin_login'])."' AND status='NEW' AND task_type = 'EXTENSION_UPDATE'";
+ $whereStatement = "assigned_admin='".GET_ADMIN_ID(get_session('admin_login'))."' AND status='NEW' AND task_type = 'EXTENSION_UPDATE'";
break;
case "solved": // List only solved tasks assigned to you
- $whereStatement = "assigned_admin='".GET_ADMIN_ID($_SESSION['admin_login'])."' AND status='SOLVED'";
+ $whereStatement = "assigned_admin='".GET_ADMIN_ID(get_session('admin_login'))."' AND status='SOLVED'";
break;
case "unassigned": // List unassigned (but not deleted) tasks
break;
case "closed": // List all closed
- $whereStatement = "assigned_admin='".GET_ADMIN_ID($_SESSION['admin_login'])."' AND status='CLOSED'";
+ $whereStatement = "assigned_admin='".GET_ADMIN_ID(get_session('admin_login'))."' AND status='CLOSED'";
break;
default: // Unknown type
foreach ($_POST['task'] as $id=>$sel)
{
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='0' WHERE id=%d AND assigned_admin='%s' LIMIT 1",
- array(bigintval($id), GET_ADMIN_ID($_SESSION['admin_login'])), __FILE__, __LINE__);
+ array(bigintval($id), GET_ADMIN_ID(get_session('admin_login'))), __FILE__, __LINE__);
}
}
elseif (isset($_POST['del']))
// Output generated?
if (empty($OUT)) ADMIN_THEME_NO_OUTPUT;
-}
- elseif (!empty($_GET['default_theme']))
-{
+} elseif (!empty($_GET['default_theme'])) {
// Save theme
- $POST['default_theme'] = $_GET['default_theme'];
+ $POST['default_theme'] = SQL_ESCAPE($_GET['default_theme']);
set_session("mxchange_theme", $POST['default_theme'], (time() + 60*60*24*365), COOKIE_PATH);
- $_SESSION['mxchange_theme'] = $POST['default_theme'];
ADMIN_SAVE_SETTINGS($POST);
}
OUTPUT_HTML("<br /><STRONG>".VALIDATING_LOGIN."</STRONG><br />");
-if (!empty($GLOBALS['userid']) && !empty($_SESSION['u_hash']) && !empty($_SESSION['lifetime']))
-{
+if (!empty($GLOBALS['userid']) && (isSessionVariableSet('u_hash')) && (isSessionVariableSet('lifetime'))) {
// Get theme from profile
$result = SQL_QUERY_ESC("SELECT curr_theme FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
array($GLOBALS['userid']), __FILE__, __LINE__);
// Change to new theme
set_session("mxchange_theme", $NewTheme, (time() + 60*60*24*365), COOKIE_PATH);
- $_SESSION['mxchange_theme'] = $NewTheme;
$bonus = false;
if ((GET_EXT_VERSION("sql_patches") >= "0.2.8") && (GET_EXT_VERSION("bonus") >= "0.2.1") && ($_CONFIG['bonus_login_yn'] == 'N') && ($_CONFIG['bonus_login_yn'] == 'Y')) {
if (defined('LEAD_CODE_ENABLED') && defined('LEAD_EXPIRY_TIME')) {
// Set special lead cookie
set_session("lead_uid", bigintval($uid), (time() + LEAD_EXPIRY_TIME), COOKIE_PATH);
- $_SESSION['lead_uid'] = bigintval($uid);
// Lead-Code mode enabled
LOAD_URL("lead-confirm.php");
} elseif (defined('LEAD_CODE_ENABLED') && defined('LEAD_EXPIRY_TIME')) {
// Set special lead cookie
set_session("lead_uid", bigintval($uid), (time() + LEAD_EXPIRY_TIME), COOKIE_PATH);
- $_SESSION['lead_uid'] = bigintval($uid);
// Lead-Code mode enabled
LOAD_URL("lead-confirm.php");
$probe_nickname = false; $UID = false; $hash = "";
unset($login); unset($online);
-if ((!empty($GLOBALS['userid'])) && (!empty($_SESSION['u_hash'])))
+if ((!empty($GLOBALS['userid'])) && (isSessionVariableSet('u_hash')))
{
// Already logged in?
$UID = $GLOBALS['userid'];
-}
- elseif ((!empty($_POST['id'])) && (!empty($_POST['password'])) && (isset($_POST['ok'])))
-{
+} elseif ((!empty($_POST['id'])) && (!empty($_POST['password'])) && (isset($_POST['ok']))) {
// Set userid and crypt password when login data was submitted
$probe_nickname = ((EXT_IS_ACTIVE("nickname")) && (("".round($_POST['id'])."") != $_POST['id']));
if ($probe_nickname)
{
// Nickname entered
$UID = SQL_ESCAPE($_POST['id']);
- }
- else
- {
+ } else {
// Direct userid entered
$UID = bigintval($_POST['id']);
}
-}
- elseif (!empty($_POST['new_pass']))
-{
+} elseif (!empty($_POST['new_pass'])) {
// New password requested
$UID = "0";
if (!empty($_POST['id'])) $UID = $_POST['id'];
-}
- else
-{
+} else {
// Not logged in
$UID = "0"; $hash = "";
}
if (empty($_POST['new_pass'])) $_POST['new_pass'] = "";
if (empty($_GET['login'])) $_GET['login'] = "";
-if (IS_LOGGED_IN())
-{
+if (IS_LOGGED_IN()) {
// Login immidiately...
$URL = URL."/modules.php?module=login";
-}
- elseif (isset($_POST['ok']))
-{
+} elseif (isset($_POST['ok'])) {
// Add last_login if available
$LAST = "";
- if (GET_EXT_VERSION("sql_patches") >= "0.2.8")
- {
+ if (GET_EXT_VERSION("sql_patches") >= "0.2.8") {
$LAST = ", last_login";
}
// Check login data
$password = "";
- if ($probe_nickname)
- {
+ if ($probe_nickname) {
// Nickname entered
$result = SQL_QUERY_ESC("SELECT userid, password, last_online".$LAST." FROM "._MYSQL_PREFIX."_user_data WHERE nickname='%s' AND status='CONFIRMED' LIMIT 1",
array($UID), __FILE__, __LINE__);
list($UID2, $password, $online, $login) = SQL_FETCHROW($result);
if (!empty($UID2)) $UID = $UID2;
- }
- else
- {
+ } else {
// Direct userid entered
$result = SQL_QUERY_ESC("SELECT userid, password, last_online".$LAST." FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
array(bigintval($UID), $hash), __FILE__, __LINE__);
list($dmy, $password, $online, $login) = SQL_FETCHROW($result);
}
- if (SQL_NUMROWS($result) == 1)
- {
+ if (SQL_NUMROWS($result) == 1) {
// Valid data found so let's load the last login data
- if (isset($_POST['ok']))
- {
+ if (isset($_POST['ok'])) {
// By default the hash is empty
$hash = "";
// Check for old MD5 passwords
- if ((strlen($password) == 32) && (md5($_POST['password']) == $password))
- {
+ if ((strlen($password) == 32) && (md5($_POST['password']) == $password)) {
// Just set the hash to the password from DB... :)
$hash = $password;
- }
- else
- {
+ } else {
// Encrypt hash for comparsion
$hash = generateHash($_POST['password'], substr($password, 0, -40));
}
- if ($hash == $password)
- {
+ if ($hash == $password) {
// New hashed password found so let's generate a new one
$hash = generateHash($_POST['password']);
// Probe for last online timemark
$probe = time() - $online;
if (!empty($login)) $probe = time() - $login;
- if ((GET_EXT_VERSION("bonus") >= "0.2.2") && ($probe >= $_CONFIG['login_timeout']))
- {
+ if ((GET_EXT_VERSION("bonus") >= "0.2.2") && ($probe >= $_CONFIG['login_timeout'])) {
// Add login bonus to user's account
$ADD = ", login_bonus=login_bonus+'".$_CONFIG['login_bonus']."'";
$BONUS = true;
// Secure lifetime from input form
$l = bigintval($_POST['lifetime']);
$life = "-1";
- if ($l > 0)
- {
+ if ($l > 0) {
// Calculate lifetime of cookies
$life = time() + $l;
// Update global array
$GLOBALS['userid'] = $UID;
- $_SESSION['u_hash'] = $hash;
- $_SESSION['lifetime'] = $l;
- }
- else
- {
+ } else {
// Check for login data
$login = IS_LOGGED_IN();
}
- if ($login)
- {
+ if ($login) {
// Update database records
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET total_logins=total_logins+1".$ADD." WHERE userid=%d LIMIT 1",
array(bigintval($UID)), __FILE__, __LINE__);
- if (SQL_AFFECTEDROWS($link) == 1)
- {
+ if (SQL_AFFECTEDROWS($link) == 1) {
// Procedure to checking for login data
- if (($BONUS) && (EXT_IS_ACTIVE("bonus")))
- {
+ if (($BONUS) && (EXT_IS_ACTIVE("bonus"))) {
// Bonus added (just displaying!)
$URL = URL."/modules.php?module=chk_login&mode=bonus";
- }
- else
- {
+ } else {
// Bonus not added
$URL = URL."/modules.php?module=chk_login&mode=login";
}
- }
- else
- {
+ } else {
// Cannot update counter!
$URL = URL."/modules.php?module=".$GLOBALS['module']."&what=login&login=".CODE_CNTR_FAILED;
}
- }
- else
- {
+ } else {
// Cookies not setable!
$URL = URL."/modules.php?module=".$GLOBALS['module']."&what=login&login=".CODE_NO_COOKIES;
}
- }
- else
- {
+ } else {
// Wrong password!
$ERROR = CODE_WRONG_PASS;
}
- }
- else
- {
+ } else {
// Fatal error!
$ERROR = CODE_LOGIN_FAILED;
}
- }
- else
- {
+ } else {
// Other account status?
$result = SQL_QUERY_ESC("SELECT status FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
array(bigintval($UID)), __FILE__, __LINE__);
// NEW: Fixed the Set of Cookies, you mus add right TimeSet, if you changed it in What_login.php! (eg. time()- cookieTime
-if (set_session("userid", "", time() - 3600, COOKIE_PATH) && set_session("u_hash", "", time() - 3600, COOKIE_PATH) && set_session("lifetime", "", time() - 3600, COOKIE_PATH))
+if (set_session("userid", "") && set_session("u_hash", "") && set_session("lifetime", ""))
{
// Remove theme cookie as well
- set_session("mxchange_theme", "", time() - 3600, COOKIE_PATH);
+ set_session("mxchange_theme", "");
// Logout completed
$URL .= "&msg=".CODE_LOGOUT_DONE;
notified='N',
last_profile_sent=UNIX_TIMESTAMP()
WHERE userid=%d AND password='%s' LIMIT 1",
- array(
- $_POST['sex'],
- $_POST['surname'],
- $_POST['family_name'],
- $_POST['street_nr'],
- bigintval($_POST['country_code']),
- bigintval($_POST['zip']),
- $_POST['city'],
- $_POST['addy'],
- bigintval($_POST['day']),
- bigintval($_POST['month']),
- bigintval($_POST['year']),
- bigintval($_POST['max_mails']),
- UID_VALUE,
- $_SESSION['u_hash']
+array(
+ $_POST['sex'],
+ $_POST['surname'],
+ $_POST['family_name'],
+ $_POST['street_nr'],
+ bigintval($_POST['country_code']),
+ bigintval($_POST['zip']),
+ $_POST['city'],
+ $_POST['addy'],
+ bigintval($_POST['day']),
+ bigintval($_POST['month']),
+ bigintval($_POST['year']),
+ bigintval($_POST['max_mails']),
+ UID_VALUE,
+ get_session('u_hash')
), __FILE__, __LINE__);
}
else
notified='N',
last_profile_sent=UNIX_TIMESTAMP()
WHERE userid=%d AND password='%s' LIMIT 1",
- array(
- $_POST['sex'],
- $_POST['surname'],
- $_POST['family_name'],
- $_POST['street_nr'],
- $_POST['cntry'],
- bigintval($_POST['zip']),
- $_POST['city'],
- $_POST['addy'],
- bigintval($_POST['day']),
- bigintval($_POST['month']),
- bigintval($_POST['year']),
- bigintval($_POST['max_mails']),
- UID_VALUE,
- $_SESSION['u_hash']
+array(
+ $_POST['sex'],
+ $_POST['surname'],
+ $_POST['family_name'],
+ $_POST['street_nr'],
+ $_POST['cntry'],
+ bigintval($_POST['zip']),
+ $_POST['city'],
+ $_POST['addy'],
+ bigintval($_POST['day']),
+ bigintval($_POST['month']),
+ bigintval($_POST['year']),
+ bigintval($_POST['max_mails']),
+ UID_VALUE,
+ get_session('u_hash')
), __FILE__, __LINE__);
}
// Change to new theme
set_session("mxchange_theme", $NewTheme, (time() + 60*60*24*365), COOKIE_PATH);
- $_SESSION['mxchange_theme'] = $NewTheme;
// Theme saved!
LOAD_TEMPLATE("admin_settings_saved", false, MEMBER_THEME_SAVED);
foreach ($THEMES['theme_unix'] as $key=>$unix)
{
$default = "";
- if ($_SESSION['mxchange_theme'] == $unix) $default = " checked selected";
+ if (get_session('mxchange_theme') == $unix) $default = " checked selected";
// Add row
$OUT .= "<TR>
// Secure and validate user ID from cookie
UPDATE_LOGIN_DATA();
- // Get session ID
- if (empty($_SESSION['PHPSESSID'])) $_SESSION['PHPSESSID'] = session_id();
-
// Update online list
- UPDATE_ONLINE_LIST($_SESSION['PHPSESSID'], $GLOBALS['module'], $GLOBALS['action'], $GLOBALS['what']);
+ UPDATE_ONLINE_LIST(get_session('PHPSESSID'), $GLOBALS['module'], $GLOBALS['action'], $GLOBALS['what']);
// Load theme name
$CurrTheme = GET_CURR_THEME();
//* DEBUG: */ echo __LINE__."ADMIN:".$admin."<br />";
// If admin login is not given take current from cookies...
- if ((empty($admin)) && (!empty($_SESSION['admin_login'])) && (!empty($_SESSION['admin_md5']))) {
- $admin = SQL_ESCAPE($_SESSION['admin_login']); $passCookie = $_SESSION['admin_md5'];
+ if ((empty($admin)) && (isSessionVariableSet('admin_login')) && (isSessionVariableSet('admin_md5'))) {
+ $admin = SQL_ESCAPE(get_session('admin_login')); $passCookie = get_session('admin_md5');
}
//* DEBUG: */ echo __LINE__."ADMIN:".$admin."/".$passCookie."<br />";
FIX_DELETED_COOKIES(array('userid', 'u_hash', 'lifetime'));
// Are cookies set?
- if ((!empty($GLOBALS['userid'])) && (!empty($_SESSION['u_hash'])) && (!empty($_SESSION['lifetime'])) && (defined('COOKIE_PATH')))
+ if ((!empty($GLOBALS['userid'])) && (isSessionVariableSet('u_hash')) && (isSessionVariableSet('lifetime')) && (defined('COOKIE_PATH')))
{
// Cookies are set with values, but are they valid?
$result = SQL_QUERY_ESC("SELECT password, status, last_module, last_online FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
if ((!empty($mod)) && (empty($LAST['module']))) { $LAST['module'] = $mod; $LAST['online'] = $onl; }
// So did we now have valid data and an unlocked user?
- //* DEBUG: */ echo $valPass."<br>".$_SESSION['u_hash']."<br>";
- if (($status == "CONFIRMED") && ($valPass == $_SESSION['u_hash']))
- {
+ //* DEBUG: */ echo $valPass."<br>".get_session('u_hash')."<br>";
+ if (($status == "CONFIRMED") && ($valPass == get_session('u_hash'))) {
// Account is confirmed and all cookie data is valid so he is definely logged in! :-)
$ret = true;
- }
- else
- {
+ } else {
// Maybe got locked etc.
//* DEBUG: */ echo __LINE__."!!!<br>";
- set_session("userid", "", time() - 3600, COOKIE_PATH);
- set_session("u_hash", "", time() - 3600, COOKIE_PATH);
- set_session("lifetime", "", time() - 3600, COOKIE_PATH);
+ set_session("userid", "");
+ set_session("u_hash", "");
+ set_session("lifetime", "");
// Remove array elements to prevent errors
unset($GLOBALS['userid']);
}
- }
- else
- {
+ } else {
// Cookie data is invalid!
//* DEBUG: */ echo __LINE__."***<br>";
- set_session("userid", "", time() - 3600, COOKIE_PATH);
- set_session("u_hash", "", time() - 3600, COOKIE_PATH);
- set_session("lifetime", "", time() - 3600, COOKIE_PATH);
+ set_session("userid", "");
+ set_session("u_hash", "");
+ set_session("lifetime", "");
// Remove array elements to prevent errors
unset($GLOBALS['userid']);
{
// Cookie data is invalid!
//* DEBUG: */ echo __LINE__."///<br>";
- set_session("userid", "", time() - 3600, COOKIE_PATH);
- set_session("u_hash", "", time() - 3600, COOKIE_PATH);
- set_session("lifetime", "", time() - 3600, COOKIE_PATH);
+ set_session("userid", "");
+ set_session("u_hash", "");
+ set_session("lifetime", "");
// Remove array elements to prevent errors
unset($GLOBALS['userid']);
if (!is_array($LAST)) $LAST = array();
// Are the required cookies set?
- if ((!isset($GLOBALS['userid'])) || (!isset($_SESSION['u_hash'])) || (!isset($_SESSION['lifetime']))) {
+ if ((!isset($GLOBALS['userid'])) || (!isSessionVariableSet('u_hash')) || (!isSessionVariableSet('lifetime'))) {
// Nope, then return here to caller function
return false;
} else {
// Secure user ID
- $GLOBALS['userid'] = bigintval($_SESSION['userid']);
+ $GLOBALS['userid'] = bigintval(get_session('userid'));
}
// Extract last online time (life) and how long is auto-login valid (time)
- $newl = time() + bigintval($_SESSION['lifetime']);
+ $newl = time() + bigintval(get_session('lifetime'));
// Recheck if logged in
if (!IS_LOGGED_IN()) return false;
// Maybe first login time?
if (empty($mod)) $mod = "login";
- if (set_session("userid", $GLOBALS['userid'], $newl, COOKIE_PATH) && set_session("u_hash", SQL_ESCAPE($_SESSION['u_hash']), $newl, COOKIE_PATH) && set_session("lifetime", bigintval($_SESSION['lifetime']), $newl, COOKIE_PATH)) {
+ if (set_session("userid", $GLOBALS['userid'], $newl, COOKIE_PATH) && set_session("u_hash", SQL_ESCAPE(get_session('u_hash')), $newl, COOKIE_PATH) && set_session("lifetime", bigintval(get_session('lifetime')), $newl, COOKIE_PATH)) {
// This will be displayed on welcome page! :-)
if (empty($LAST['module'])) {
$LAST['module'] = $mod; $LAST['online'] = $onl;
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_module='%s', last_online=UNIX_TIMESTAMP() WHERE userid=%d LIMIT 1",
array($GLOBALS['what'], $GLOBALS['userid']), __FILE__, __LINE__);
}
- }
- else
- {
+ } else {
// Destroy session, we cannot update!
- set_session("userid", "", time() - 3600, COOKIE_PATH);
- set_session("u_hash", "", time() - 3600, COOKIE_PATH);
- set_session("lifetime", "", time() - 3600, COOKIE_PATH);
+ set_session("userid", "");
+ set_session("u_hash", "");
+ set_session("lifetime", "");
}
}
//
list($hashDB) = SQL_FETCHROW($result_main);
// Extract salt from cookie
- $salt = substr($_SESSION['u_hash'], 0, -40);
+ $salt = substr(get_session('u_hash'), 0, -40);
// Now let's compare passwords
$hash = generatePassString($hashDB);
- if (($hash == $_SESSION['u_hash']) || ($_POST['pass1'] == $_POST['pass2'])) {
+ if (($hash == get_session('u_hash')) || ($_POST['pass1'] == $_POST['pass2'])) {
// Load user's data
$result = SQL_QUERY_ESC("SELECT sex, surname, family, street_nr, country, zip, city, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND password='%s' LIMIT 1",
array($GLOBALS['userid'], $hashDB), __FILE__, __LINE__);
// Is administrator
$ADMIN = 'Y';
}
- if (!empty($_SESSION['refid']))
- {
+ if (isSessionVariableSet('refid')) {
// Check cookie
- if ($_SESSION['refid'] > 0) $rid = $GLOBALS['refid'];
+ if (get_session('refid') > 0) $rid = $GLOBALS['refid'];
}
// Now Read data
}
//
function IS_DEMO() {
- return ((EXT_IS_ACTIVE("demo")) && ($_SESSION['admin_login'] == "demo"));
+ return ((EXT_IS_ACTIVE("demo")) && (get_session('admin_login') == "demo"));
}
//
function LOAD_CONFIG($no="0")
} elseif (!empty($_GET['ref'])) {
// Set refid=ref (the referral link uses such variable)
$GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_GET['ref']));
-} elseif (!empty($_SESSION['refid'])) {
+} elseif (isSessionVariableSet('refid')) {
// Set session refid als global
- $GLOBALS['refid'] = bigintval($_SESSION['refid']);
+ $GLOBALS['refid'] = bigintval(get_session('refid'));
} elseif (GET_EXT_VERSION("sql_patches") != "") {
// Set default refid as refid in URL
$GLOBALS['refid'] = bigintval($_CONFIG['def_refid']);
}
// Set cookie when default refid > 0
-if (empty($_SESSION['refid']) || (!empty($GLOBALS['refid'])) || (($_SESSION['refid'] == "0") && ($_CONFIG['def_refid'] > 0))) {
+if (!isSessionVariableSet('refid') || (!empty($GLOBALS['refid'])) || ((get_session('refid') == "0") && ($_CONFIG['def_refid'] > 0))) {
// Set cookie
set_session("refid", $GLOBALS['refid']);
}
// Load default theme if not empty from configuration
if (!empty($_CONFIG['default_theme'])) $ret = $_CONFIG['default_theme'];
- if (empty($_SESSION['mxchange_theme'])) {
+ if (!isSessionVariableSet('mxchange_theme')) {
// Set default theme
set_session("mxchange_theme", $ret, (time() + 60*60*24*365), COOKIE_PATH);
- } elseif ((!empty($_SESSION['mxchange_theme'])) && (GET_EXT_VERSION("sql_patches") >= "0.1.4")) {
+ } elseif ((isSessionVariableSet('mxchange_theme')) && (GET_EXT_VERSION("sql_patches") >= "0.1.4")) {
// Get theme from cookie
- $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_themes WHERE theme_path='%s' LIMIT 1", array($_SESSION['mxchange_theme']), __FILE__, __LINE__);
+ $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_themes WHERE theme_path='%s' LIMIT 1", array(get_session('mxchange_theme')), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1) {
// Design is valid!
- $ret = $_SESSION['mxchange_theme'];
+ $ret = get_session('mxchange_theme');
}
// Free memory
if ((!empty($_GET['theme'])) && (file_exists($theme)) && (is_readable($theme))) {
// Set cookie from URL data
set_session("mxchange_theme", $_GET['theme'], (time() + 60*60*24*365), COOKIE_PATH);
- $_SESSION['mxchange_theme'] = $_GET['theme'];
} elseif (file_exists(PATH."theme/".$_POST['theme']."/theme.php")) {
// Set cookie from posted data
set_session("mxchange_theme", $_POST['theme'], (time() + 60*60*24*365), COOKIE_PATH);
- $_SESSION['mxchange_theme'] = $_POST['theme'];
}
// Set return value
- $ret = $_SESSION['mxchange_theme'];
+ $ret = get_session('mxchange_theme');
} else {
// Invalid design, reset cookie
set_session("mxchange_theme", $ret, (time() + 60*60*24*365), COOKIE_PATH);
if (!isset($_CONFIG['index_cookie'])) $_CONFIG['index_cookie'] = 0;
// Check for cookies
- if ((empty($_SESSION['visited'])) || ($_CONFIG['index_delay'] == 0) || ($_CONFIG['index_cookie'] == 0)) {
+ if ((isSessionVariableSet('visited')) || ($_CONFIG['index_delay'] == 0) || ($_CONFIG['index_cookie'] == 0)) {
// Is the index page configured for redirect pr not?
if ($_CONFIG['index_cookie'] > 0) {
// Set cookie and remeber it for specified time
set_session("visited", "true", (time() + $_CONFIG['index_cookie']), COOKIE_PATH);
- } elseif (!empty($_SESSION['visited'])) {
+ } elseif (isSessionVariableSet('visited')) {
// Remove cookie when admin set 0 in setup
set_session("visited", "");
}
);
// Is the cookie set?
- if (isset($_SESSION['lead_uid'])) {
+ if (isSessionVariableSet('lead_uid')) {
// Is the user-account unlocked and valid?
$result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
- array(bigintval($_SESSION['lead_uid'])), __FILE__, __LINE__);
+ array(bigintval(get_session('lead_uid'))), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1) {
// Secure the ID number
- $content['lead_uid'] = bigintval($_SESSION['lead_uid']);
+ $content['lead_uid'] = bigintval(get_session('lead_uid'));
// Load the email address
list($content['lead_email']) = COMPILE_CODE(SQL_FETCHROW($result));
projects / mailer.git / commitdiff