inc/modules/member/what-transfer.php

   1 <?php
   2 /************************************************************************
   3  * MXChange v0.2.1                                    Start: 10/07/2004 *
   4  * ================                             Last change: 10/07/2004 *
   5  *                                                                      *
   6  * -------------------------------------------------------------------- *
   7  * File              : what-transfer.php                                *
   8  * -------------------------------------------------------------------- *
   9  * Short description : Point transfers                                  *
  10  * -------------------------------------------------------------------- *
  11  * Kurzbeschreibung  : Punktetransfers                                  *
  12  * -------------------------------------------------------------------- *
  13  *                                                                      *
  14  * -------------------------------------------------------------------- *
  15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
  16  * For more information visit: http://www.mxchange.org                  *
  17  *                                                                      *
  18  * This program is free software; you can redistribute it and/or modify *
  19  * it under the terms of the GNU General Public License as published by *
  20  * the Free Software Foundation; either version 2 of the License, or    *
  21  * (at your option) any later version.                                  *
  22  *                                                                      *
  23  * This program is distributed in the hope that it will be useful,      *
  24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
  25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
  26  * GNU General Public License for more details.                         *
  27  *                                                                      *
  28  * You should have received a copy of the GNU General Public License    *
  29  * along with this program; if not, write to the Free Software          *
  30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
  31  * MA  02110-1301  USA                                                  *
  32  ************************************************************************/
  33
  34 // Some security stuff...
  35 if (!defined('__SECURITY')) {
  36         $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
  37         require($INC);
  38 } elseif (!IS_MEMBER()) {
  39         LOAD_URL("modules.php?module=index");
  40 } elseif ((!EXT_IS_ACTIVE("transfer")) && (!IS_ADMIN())) {
  41         addFatalMessage(EXTENSION_PROBLEM_EXT_INACTIVE, "transfer");
  42         return;
  43 }
  44
  45 // Add description as navigation point
  46 ADD_DESCR("member", __FILE__);
  47
  48 // Load data
  49 $result = SQL_QUERY_ESC("SELECT opt_in FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
  50         array($GLOBALS['userid']), __FILE__, __LINE__);
  51 list($opt_in) = SQL_FETCHROW($result);
  52
  53 // Free memory
  54 SQL_FREERESULT($result);
  55
  56 $MODE = "";
  57 if (!empty($_GET['mode'])) $MODE = $_GET['mode'];
  58
  59 // Check for "faker"
  60 if (($opt_in == "N") && ($MODE == "new")) $MODE = "";
  61
  62 switch ($MODE)
  63 {
  64 case "new": // Start new transfer
  65         // Get total points and subtract the balance amount from it = maximum transferable points
  66         $total = GET_TOTAL_DATA($GLOBALS['userid'], "user_points", "points")  - GET_TOTAL_DATA($GLOBALS['userid'], "user_data", "used_points");
  67
  68         // Remember maximum value for template
  69         define('__TRANSFER_MAX_VALUE', round($total - getConfig('transfer_balance') - 0.5));
  70
  71         if (isset($_POST['ok'])) {
  72                 // Add new transfer
  73                 if (getConfig('transfer_code') > 0) {
  74                         // Check for code
  75                         $code = GEN_RANDOM_CODE(getConfig('transfer_code'), $_POST['code_chk'], $GLOBALS['userid'], __TRANSFER_MAX_VALUE);
  76                         $valid_code = ($code == $_POST['code']);
  77                 } else {
  78                         // Zero length (= disabled) is always valid!
  79                         $valid_code = true;
  80                 }
  81
  82                 // Test password
  83                 $valid_pass = ($pass == generateHash($_POST['password'], $pass));
  84
  85                 // Test transfer amount
  86                 $valid_amount = ((!empty($_POST['points'])) && ($_POST['points'] <= __TRANSFER_MAX_VALUE));
  87
  88                 // Test reason for transfer
  89                 $valid_reason = (!empty($_POST['reason']));
  90
  91                 // Test if a recipient is selected
  92                 $valid_recipient = ($_POST['to_uid'] > 0);
  93
  94                 // Check for nickname extension and set additional data
  95                 $nick = false; $ADD = ", userid";
  96                 if (EXT_IS_ACTIVE("nickname")) {
  97                         $ADD = ", nickname";
  98                         $nick = true;
  99                 }
 100
 101                 // Re-check receivers and own personal data
 102                 $result = SQL_QUERY_ESC("SELECT userid, gender, surname, family, email".$ADD." FROM `"._MYSQL_PREFIX."_user_data` WHERE userid IN ('%s','%s') AND status='CONFIRMED' ORDER BY userid LIMIT 2",
 103                         array($GLOBALS['userid'], bigintval($_POST['to_uid'])), __FILE__, __LINE__);
 104                 $valid_data = (SQL_NUMROWS($result) == 2);
 105
 106                 if ($valid_code && $valid_pass && $valid_amount && $valid_reason && $valid_recipient) {
 107                         // Let's start the transfer and load user data
 108                         list($uid1, $gender1, $sname1, $fname1, $email1, $nick1) = SQL_FETCHROW($result);
 109                         list($uid2, $gender2, $sname2, $fname2, $email2, $nick2) = SQL_FETCHROW($result);
 110                         SQL_FREERESULT($result);
 111                         if ($uid1 == $GLOBALS['userid']) {
 112                                 // Data row 1 is sender's data
 113                                 define('__SENDER_GENDER'     , TRANSLATE_GENDER($gender1));
 114                                 define('__SENDER_NICK'    , $nick1);
 115                                 define('__SENDER_SNAME'   , $sname1);
 116                                 define('__SENDER_FNAME'   , $fname1);
 117                                 define('__SENDER_EMAIL'   , $email1);
 118                                 // Data row 2 is recpient's data
 119                                 define('__RECIPIENT_GENDER'  , TRANSLATE_GENDER($gender2));
 120                                 define('__RECIPIENT_NICK' , $nick2);
 121                                 define('__RECIPIENT_SNAME', $sname2);
 122                                 define('__RECIPIENT_FNAME', $fname2);
 123                                 define('__RECIPIENT_EMAIL', $email2);
 124
 125                                 // Prepare variables for testing
 126                                 $TEST_NICK_SENDER = $nick1;
 127                                 $TEST_NICK_REC = $nick2;
 128                         } else {
 129                                 // Data row 2 is sender's data
 130                                 define('__SENDER_GENDER'     , TRANSLATE_GENDER($gender2));
 131                                 define('__SENDER_NICK'    , $nick2);
 132                                 define('__SENDER_SNAME'   , $sname2);
 133                                 define('__SENDER_FNAME'   , $fname2);
 134                                 define('__SENDER_EMAIL'   , $email2);
 135                                 // Data row 1 is recpient's data
 136                                 define('__RECIPIENT_GENDER'  , TRANSLATE_GENDER($gender1));
 137                                 define('__RECIPIENT_NICK' , $nick1);
 138                                 define('__RECIPIENT_SNAME', $sname1);
 139                                 define('__RECIPIENT_FNAME', $fname1);
 140                                 define('__RECIPIENT_EMAIL', $email1);
 141
 142                                 // Prepare variables for testing
 143                                 $TEST_NICK_SENDER = $nick2;
 144                                 $TEST_NICK_REC = $nick1;
 145                         }
 146
 147                         // Sender's UID is always currently stored in cookie userid...
 148                         define('__SENDER_UID'     , $GLOBALS['userid']);
 149                         define('__RECIPIENT_UID'  , $_POST['to_uid']);
 150
 151                         $SENDER = __SENDER_UID;
 152                         $RECIPIENT = __RECIPIENT_UID;
 153                         if ($nick) {
 154                                 if (($TEST_NICK_SENDER != __SENDER_UID) && (!empty($TEST_NICK_SENDER))) {
 155                                         $SENDER = __SENDER_NICK;
 156                                 }
 157
 158                                 if (($TEST_NICK_REC != __RECIPIENT_UID) && (!empty($TEST_NICK_REC))) {
 159                                         $RECIPIENT = __RECIPIENT_NICK;
 160                                 }
 161                         }
 162
 163                         // Remember transfer reason and fancy date/time in constants
 164                         define('__TRANSFER_REASON', $_POST['reason']);
 165                         if (function_exists('CREATE_FANCY_TIME')) {
 166                                 define('__TRANSFER_EXPIRES', CREATE_FANCY_TIME(getConfig('transfer_age')));
 167                         } else {
 168                                 define('__TRANSFER_EXPIRES', round(getConfig('transfer_age')/60/60/24)." ".DAYS);
 169                         }
 170
 171                         // Generate tranafer id
 172                         define('__TRANS_ID', bigintval(GEN_RANDOM_CODE("10", mt_rand(0, 99999), $GLOBALS['userid'], $_POST['reason'])));
 173
 174                         // Add entries to both tables
 175                         SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_transfers_in (userid, from_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
 176                                 array(bigintval($_POST['to_uid']), $GLOBALS['userid'], bigintval($_POST['points']), $_POST['reason'], __TRANS_ID),
 177                                 __FILE__, __LINE__);
 178                         SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_transfers_out (userid, to_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
 179                                 array($GLOBALS['userid'], bigintval($_POST['to_uid']), bigintval($_POST['points']), $_POST['reason'], __TRANS_ID),
 180                                 __FILE__, __LINE__);
 181
 182                         // Add points to account *directly* ...
 183                         ADD_POINTS_REFSYSTEM("member_transfer", bigintval($_POST['to_uid']), bigintval($_POST['points']), false, "0", false, "direct");
 184
 185                         // ... and add it to current user's used points
 186                         SUB_POINTS("transfer", $GLOBALS['userid'], $_POST['points']);
 187
 188                         // First send email to recipient
 189                         $msg = LOAD_EMAIL_TEMPLATE("member_transfer_recipient", "", __RECIPIENT_UID);
 190                         SEND_EMAIL(__RECIPIENT_EMAIL, TRANSFER_MEMBER_RECIPIENT_SUBJ.": ".$SENDER, $msg);
 191
 192                         // Second send email to sender
 193                         $msg = LOAD_EMAIL_TEMPLATE("member_transfer_sender", "", __SENDER_UID);
 194                         SEND_EMAIL(__SENDER_EMAIL, TRANSFER_MEMBER_SENDER_SUBJ.": ".$RECIPIENT, $msg);
 195
 196                         // At last send admin mail(s)
 197                         $ADMIN_SUBJ = sprintf("%s (%s->%s)", TRANSFER_ADMIN_SUBJECT, $SENDER, $RECIPIENT);
 198                         SEND_ADMIN_NOTIFICATION($ADMIN_SUBJ, "admin_transfer_points");
 199
 200                         // Transfer is completed
 201                         LOAD_TEMPLATE("admin_settings_saved", false, TRANSFER_COMPLETED."<br /><a href=\"".URL."/modules.php?module=login&amp;what=transfer\">".TRANSFER_CONTINUE_OVERVIEW."</a>");
 202                 } elseif (!$valid_code) {
 203                         // Invalid Touring code!
 204                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_CODE."</div>");
 205                         unset($_POST['ok']);
 206                 } elseif (!$valid_pass) {
 207                         // Wrong password entered
 208                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_PASSWORD."</div>");
 209                         unset($_POST['ok']);
 210                 } elseif (!$valid_amount) {
 211                         // Too much points entered
 212                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_POINTS."</div>");
 213                         unset($_POST['ok']);
 214                 } elseif (!$valid_reason) {
 215                         // No transfer reason entered
 216                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_REASON."</div>");
 217                         unset($_POST['ok']);
 218                 } elseif (!$valid_recipient) {
 219                         // No recipient selected
 220                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_RECIPIENT."</div>");
 221                         unset($_POST['ok']);
 222                 } elseif (!$valid_data) {
 223                         // No recipient selected
 224                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">".TRANSFER_INVALID_DATA."</div>");
 225                         unset($_POST['ok']);
 226                 }
 227         }
 228
 229         if (!isset($_POST['ok'])) {
 230                 // Load member list
 231                 if (EXT_IS_ACTIVE("nickname")) {
 232                         // Load userid and nickname
 233                         $result = SQL_QUERY_ESC("SELECT userid, nickname FROM `"._MYSQL_PREFIX."_user_data` WHERE status='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
 234                          array($GLOBALS['userid']), __FILE__, __LINE__);
 235                 } else {
 236                         // Load only userid
 237                         $result = SQL_QUERY_ESC("SELECT userid, userid FROM `"._MYSQL_PREFIX."_user_data` WHERE status='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
 238                          array($GLOBALS['userid']), __FILE__, __LINE__);
 239                 }
 240
 241                 if (SQL_NUMROWS($result) > 0) {
 242                         // Load list
 243                         $OUT  = "<select name=\"to_uid\" size=\"1\" class=\"member_select\">
 244   <option value=\"0\">".SELECT_NONE."</option>\n";
 245                         while (list($uid, $nick) = SQL_FETCHROW($result)) {
 246                                 $OUT .= "<option value=\"".$uid."\"";
 247                                 if ((isset($_POST['to_uid'])) && ($_POST['to_uid'] == $uid)) $OUT .= " selected=\"selected\"";
 248                                 $OUT .= ">";
 249                                 if (($nick != $uid) && (!empty($nick))) {
 250                                         // Output nickname
 251                                         $OUT .= $nick;
 252                                 } else {
 253                                         // Output userid
 254                                         $OUT .= $uid;
 255                                 }
 256                                 $OUT .= "</option>\n";
 257                         }
 258                         $OUT .= "</select>\n";
 259                         define('__TRANSFER_TO_DISABLED', "");
 260
 261                         // Free memory
 262                         SQL_FREERESULT($result);
 263                 } else {
 264                         // No one else is opt-in
 265                         $OUT = TRANSFER_NO_ONE_ELSE_OPT_IN;
 266                         define('__TRANSFER_TO_DISABLED', " disabled");
 267                 }
 268
 269                 // Transfer output to constant for the template
 270                 define('__TRANSFER_USERID_SELECTION', $OUT);
 271
 272                 // Generate Code
 273                 if (getConfig('transfer_code') > 0) {
 274                         $rand = mt_rand(0, 99999);
 275                         $code = GEN_RANDOM_CODE(getConfig('transfer_code'), $rand, $GLOBALS['userid'], __TRANSFER_MAX_VALUE);
 276                         $img = GENERATE_IMAGE($code, false);
 277                         define('__TRANSFER_IMAGE_INPUT', "<INPUT type=\"hidden\" name=\"code_chk\" value=\"".$rand."\"><INPUT type=\"text\" name=\"code\" class=\"member_normal\" size=\"5\" maxlength=\"7\"".__TRANSFER_TO_DISABLED.">&nbsp;".$img);
 278                 } else {
 279                         $code = "00000";
 280                         define('__TRANSFER_IMAGE_INPUT', TRANSFER_NO_CODE);
 281                 }
 282
 283                 // Transfer maybe already entered valued'
 284                 if (isset($_GET['ok'])) {
 285                         // Get values from form
 286                         define('__TRANSFER_POINTS_VALUE', bigintval($_POST['points']));
 287                         define('__TRANSFER_REASON_VALUE', strip_tags($_POST['reason']));
 288                 } else {
 289                         // Set empty values
 290                         define('__TRANSFER_POINTS_VALUE', "");
 291                         define('__TRANSFER_REASON_VALUE', "");
 292                 }
 293
 294                 // Output form
 295                 LOAD_TEMPLATE("member_transfer_new");
 296         }
 297         break;
 298
 299 case "list_in": // List only incoming transactions
 300 case "list_out": // List only outgoing transactions
 301         // As you can see I put list_in and list_out together. I now do a switch() again on it for the right SQL command
 302         switch ($MODE)
 303         {
 304         case "list_in":
 305                 $SQL = "SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
 306                 $NOTHING = TRANSFER_NO_INCOMING_TRANSFERS;
 307                 define('__TRANSFER_SUM', TRANSFER_TOTAL_INCOMING);
 308                 define('__TRANSFER_TITLE', TRANSFER_LIST_INCOMING);
 309                 break;
 310
 311         case "list_out":
 312                 $SQL = "SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
 313                 $NOTHING = TRANSFER_NO_OUTGOING_TRANSFERS;
 314                 define('__TRANSFER_SUM', TRANSFER_TOTAL_OUTGOING);
 315                 define('__TRANSFER_TITLE', TRANSFER_LIST_OUTGOING);
 316                 break;
 317         }
 318
 319         // Run the SQL command
 320         $total = 0;
 321         $result = SQL_QUERY_ESC($SQL, array($GLOBALS['userid']), __FILE__, __LINE__);
 322         if (SQL_NUMROWS($result) > 0) {
 323                 $OUT = ""; $SW = 2;
 324                 while (list($tid, $uid, $points, $reason, $stamp) = SQL_FETCHROW($result)) {
 325                         if ($type == "OUT") $points = "$points-";
 326                         $OUT .= "<TR>
 327   <TD class=\"transfer_row1 switch_sw".$SW." bottom2 right2\">
 328     <div class=\"transfer_row1\">".$tid."</div>
 329   </TD>
 330   <TD class=\"transfer_row2 switch_sw".$SW." bottom2 right2\">
 331     <div class=\"transfer_row2\">".MAKE_DATETIME($stamp, "3")."</div>
 332   </TD>
 333   <TD class=\"transfer_row3 switch_sw".$SW." bottom2 right2\">
 334     <div class=\"transfer_row3\">".$uid."</div>
 335   </TD>
 336   <TD class=\"transfer_row4 switch_sw".$SW." bottom2 right2\">
 337     <div class=\"transfer_row4\">".$reason."</div>
 338   </TD>
 339   <TD class=\"transfer_row5 switch_sw".$SW." bottom2\">
 340     <div class=\"transfer_row5\">".$points."</div>
 341   </TD>
 342 </TR>\n";
 343                         $total += $points;
 344                         $SW = 3 - $SW;
 345                 }
 346
 347                 // Free memory
 348                 SQL_FREERESULT($result);
 349         } else {
 350                 // Nothing for in or out
 351                 $OUT = "<TR>
 352   <TD colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
 353     ".LOAD_TEMPLATE("admin_settings_saved", true, $NOTHING)."
 354   </TD>
 355 </TR>";
 356         }
 357
 358         // ... and add them to a constant for the template
 359         define('__TRANSFER_ROWS', $OUT);
 360
 361         // Remeber total amount
 362         define('__TRANSFER_TOTAL_VALUE', $total);
 363
 364         // Load final template
 365         LOAD_TEMPLATE("member_transfer_list");
 366         break;
 367
 368 case "list_all": // List all transactions
 369         // We fill a temporary table with data from both tables. This is much easier
 370         // to code and unstand by you as sub-SELECT queries. I know this is not the
 371         // fastest way but it shall be fine for now.
 372         //
 373         // First of all create the temporary table
 374         $result = SQL_QUERY("CREATE TEMPORARY TABLE "._MYSQL_PREFIX."_transfers_tmp (
 375 trans_id VARCHAR(12) NOT NULL DEFAULT '',
 376 party_uid BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
 377 points BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
 378 reason VARCHAR(255) NOT NULL DEFAULT '',
 379 time_trans VARCHAR(10) NOT NULL DEFAULT '0',
 380 trans_type ENUM('IN','OUT') NOT NULL DEFAULT 'IN',
 381 KEY(party_uid)
 382 ) TYPE=HEAP", __FILE__, __LINE__);
 383
 384         // Let's begin with the incoming list
 385         $result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s ORDER BY id LIMIT %s",
 386 array($GLOBALS['userid'], getConfig('transfer_max')), __FILE__, __LINE__);
 387         while ($DATA = SQL_FETCHROW($result)) {
 388                 $DATA[] = "IN";
 389                 $DATA = implode("','", $DATA);
 390                 $res_temp = SQL_QUERY("INSERT INTO "._MYSQL_PREFIX."_transfers_tmp (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
 391         }
 392
 393         // Free memory
 394         SQL_FREERESULT($result);
 395
 396         // As the last table transfer data from outgoing table to temporary
 397         $result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s ORDER BY id LIMIT %s",
 398 array($GLOBALS['userid'], getConfig('transfer_max')), __FILE__, __LINE__);
 399         while ($DATA = SQL_FETCHROW($result)) {
 400                 $DATA[] = "OUT";
 401                 $DATA = implode("','", $DATA);
 402                 $res_temp = SQL_QUERY("INSERT INTO "._MYSQL_PREFIX."_transfers_tmp (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
 403         }
 404
 405         // Free memory
 406         SQL_FREERESULT($result);
 407
 408         $total = 0;
 409         if (SQL_NUMROWS($result) > 0) {
 410                 // Output rows
 411                 $OUT = ""; $SW = 2;
 412                 $result = SQL_QUERY("SELECT party_uid, trans_id, points, reason, time_trans, trans_type FROM "._MYSQL_PREFIX."_transfers_tmp ORDER BY time_trans DESC", __FILE__, __LINE__);
 413                 while(list($uid, $idx, $points, $reason, $stamp, $type) = SQL_FETCHROW($result)) {
 414                         if ($type == "OUT") $points = "-$points";
 415                         $OUT .= "<TR>
 416   <TD class=\"transfer_row1 switch_sw".$SW." bottom2 right2\">
 417     <div class=\"transfer_row1\">".$idx."</div>
 418   </TD>
 419   <TD class=\"transfer_row2 switch_sw".$SW." bottom2 right2\">
 420     <div class=\"transfer_row2\">".MAKE_DATETIME($stamp, "3")."</div>
 421   </TD>
 422   <TD class=\"transfer_row3 switch_sw".$SW." bottom2 right2\">
 423     <div class=\"transfer_row3\">".$uid."</div>
 424   </TD>
 425   <TD class=\"transfer_row4 switch_sw".$SW." bottom2 right2\">
 426     <div class=\"transfer_row4\">".$reason."</div>
 427   </TD>
 428   <TD class=\"transfer_row5 switch_sw".$SW." bottom2\">
 429     <div class=\"transfer_row5\">".$points."</div>
 430   </TD>
 431 </TR>\n";
 432                         $total += $points;
 433                         $SW = 3 - $SW;
 434                 }
 435
 436                 // Free memory
 437                 SQL_FREERESULT($result);
 438         } else {
 439                 // Nothing for in and out
 440                 $OUT = "<TR>
 441   <TD colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
 442     ".LOAD_TEMPLATE("admin_settings_saved", true, TRANSFER_NO_INOUT_TRANSFERS)."
 443   </TD>
 444 </TR>";
 445         }
 446
 447         // ... and add them to a constant for the template
 448         define('__TRANSFER_ROWS', $OUT);
 449
 450         // Remeber total amount
 451         define('__TRANSFER_TOTAL_VALUE', $total);
 452
 453         // Set title
 454         define('__TRANSFER_TITLE', TRANSFER_LIST_ALL);
 455
 456         // Set "balance" word
 457         define('__TRANSFER_SUM', TRANSFER_TOTAL_BALANCE);
 458
 459         // Load final template
 460         LOAD_TEMPLATE("member_transfer_list");
 461
 462         // At the end we don't need a temporary table in memory
 463         $result = SQL_QUERY("DROP TABLE IF EXISTS "._MYSQL_PREFIX."_transfers_tmp", __FILE__, __LINE__);
 464
 465         // Free some memory...
 466         SQL_FREERESULT($result);
 467         break;
 468
 469 case "": // Overview page
 470         // Check incoming transfers
 471         $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 472         list($dmy) = SQL_FETCHROW($result);
 473         SQL_FREERESULT($result);
 474
 475         $total=$dmy;
 476         if ($dmy > 0) {
 477                 define('__TRANSFER_IN_LINK', "<a href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_in\">".$dmy."</a>");
 478         } else {
 479                 define('__TRANSFER_IN_LINK', $dmy);
 480         }
 481
 482         // Check outgoing transfers
 483         $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 484         list($dmy) = SQL_FETCHROW($result);
 485         SQL_FREERESULT($result);
 486
 487         $total+=$dmy;
 488         if ($dmy > 0) {
 489                 define('__TRANSFER_OUT_LINK', "<a href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_out\">".$dmy."</a>");
 490         } else {
 491                 define('__TRANSFER_OUT_LINK', $dmy);
 492         }
 493
 494         // Total transactions
 495         if ($total > 0) {
 496                 define('__TRANSFER_ALL_LINK', "<a href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_all\">".$total."</a>");
 497         } else {
 498                 define('__TRANSFER_ALL_LINK', $total);
 499         }
 500
 501         if (isset($_POST['ok'])) {
 502                 // Save settings
 503                 SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_user_data` SET opt_in='%s' WHERE userid=%s LIMIT 1",
 504                         array($_POST['opt_in'], $GLOBALS['userid']), __FILE__, __LINE__);
 505
 506                 // Rember for next switch() command
 507                 $opt_in = $_POST['opt_in'];
 508
 509                 // "Settings saved..."
 510                 LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_done\">".SETTINGS_SAVED."</div>");
 511         }
 512
 513         switch ($opt_in)
 514         {
 515         case "Y":
 516                 define('__TRANSFER_ALLOW_Y', " checked=\"checked\"");
 517                 define('__TRANSFER_ALLOW_N', "");
 518                 define('__TRANSFER_NEW_LINK', "<a href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=new\">".TRANSFER_NOW_LINK."</a>");
 519                 break;
 520
 521         case "N":
 522                 define('__TRANSFER_ALLOW_Y', "");
 523                 define('__TRANSFER_ALLOW_N', " checked=\"checked\"");
 524                 define('__TRANSFER_NEW_LINK', TRANSFER_PLEASE_ALLOW_OPT_IN);
 525                 break;
 526         }
 527
 528         // Check for latest out-transfers
 529         $result = SQL_QUERY_ESC("SELECT time_trans
 530 FROM "._MYSQL_PREFIX."_user_transfers_out
 531 WHERE time_trans > (UNIX_TIMESTAMP() - %s) AND userid=%s
 532 ORDER BY time_trans DESC
 533 LIMIT 1", array(getConfig('transfer_timeout'), $GLOBALS['userid']), __FILE__, __LINE__);
 534         if (SQL_NUMROWS($result) == 0) {
 535                 // Load template
 536                 define('__TRANSFER_SETTINGS_CONTENT', LOAD_TEMPLATE("member_transfer_settings", true));
 537         } else {
 538                 // Load newest transaction
 539                 list($newest) = SQL_FETCHROW($result);
 540                 SQL_FREERESULT($result);
 541                 define('__TRANSFER_SETTINGS_CONTENT', TRANSFER_LATEST_IS_1.MAKE_DATETIME($newest, "3").TRANSFER_LATEST_IS_2);
 542         }
 543
 544         // Load template
 545         LOAD_TEMPLATE("member_transfer_overview");
 546         break;
 547 }
 548 //
 549 ?>