inc/modules/member/what-transfer.php

   1 <?php
   2 /************************************************************************
   3  * MXChange v0.2.1                                    Start: 10/07/2004 *
   4  * ================                             Last change: 10/07/2004 *
   5  *                                                                      *
   6  * -------------------------------------------------------------------- *
   7  * File              : what-transfer.php                                *
   8  * -------------------------------------------------------------------- *
   9  * Short description : Point transfers                                  *
  10  * -------------------------------------------------------------------- *
  11  * Kurzbeschreibung  : Punktetransfers                                  *
  12  * -------------------------------------------------------------------- *
  13  *                                                                      *
  14  * -------------------------------------------------------------------- *
  15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
  16  * For more information visit: http://www.mxchange.org                  *
  17  *                                                                      *
  18  * This program is free software; you can redistribute it and/or modify *
  19  * it under the terms of the GNU General Public License as published by *
  20  * the Free Software Foundation; either version 2 of the License, or    *
  21  * (at your option) any later version.                                  *
  22  *                                                                      *
  23  * This program is distributed in the hope that it will be useful,      *
  24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
  25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
  26  * GNU General Public License for more details.                         *
  27  *                                                                      *
  28  * You should have received a copy of the GNU General Public License    *
  29  * along with this program; if not, write to the Free Software          *
  30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
  31  * MA  02110-1301  USA                                                  *
  32  ************************************************************************/
  33
  34 // Some security stuff...
  35 if (!defined('__SECURITY')) {
  36         $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
  37         require($INC);
  38 } elseif (!IS_MEMBER()) {
  39         LOAD_URL("modules.php?module=index");
  40 } elseif ((!EXT_IS_ACTIVE("transfer")) && (!IS_ADMIN())) {
  41         addFatalMessage(__FILE__, __LINE__, getMessage('EXTENSION_PROBLEM_EXT_INACTIVE'), "transfer");
  42         return;
  43 }
  44
  45 // Add description as navigation point
  46 ADD_DESCR("member", __FILE__);
  47
  48 // Load data
  49 $result = SQL_QUERY_ESC("SELECT opt_in FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
  50         array($GLOBALS['userid']), __FILE__, __LINE__);
  51 list($opt_in) = SQL_FETCHROW($result);
  52
  53 // Free memory
  54 SQL_FREERESULT($result);
  55
  56 $MODE = "";
  57 if (REQUEST_ISSET_GET(('mode'))) $MODE = REQUEST_GET('mode');
  58
  59 // Check for "faker"
  60 if (($opt_in == "N") && ($MODE == "new")) $MODE = "";
  61
  62 switch ($MODE)
  63 {
  64 case "new": // Start new transfer
  65         // Get total points and subtract the balance amount from it = maximum transferable points
  66         $total = GET_TOTAL_DATA($GLOBALS['userid'], "user_points", "points")  - GET_TOTAL_DATA($GLOBALS['userid'], "user_data", "used_points");
  67
  68         // Remember maximum value for template
  69         define('__TRANSFER_MAX_VALUE', round($total - getConfig('transfer_balance') - 0.5));
  70
  71         if (IS_FORM_SENT()) {
  72                 // Add new transfer
  73                 if (getConfig('transfer_code') > 0) {
  74                         // Check for code
  75                         $code = generateRandomCodde(getConfig('transfer_code'), REQUEST_POST('code_chk'), $GLOBALS['userid'], constant('__TRANSFER_MAX_VALUE'));
  76                         $valid_code = ($code == REQUEST_POST('code'));
  77                 } else {
  78                         // Zero length (= disabled) is always valid!
  79                         $valid_code = true;
  80                 }
  81
  82                 // Test password
  83                 $valid_pass = ($pass == generateHash(REQUEST_POST('password'), $pass));
  84
  85                 // Test transfer amount
  86                 $valid_amount = ((REQUEST_ISSET_POST(('points'))) && (REQUEST_POST('points') <= constant('__TRANSFER_MAX_VALUE')));
  87
  88                 // Test reason for transfer
  89                 $valid_reason = (REQUEST_ISSET_POST(('reason')));
  90
  91                 // Test if a recipient is selected
  92                 $valid_recipient = (REQUEST_POST('to_uid') > 0);
  93
  94                 // Check for nickname extension and set additional data
  95                 $nick = false; $ADD = ", userid";
  96                 if (EXT_IS_ACTIVE("nickname")) {
  97                         $ADD = ", nickname";
  98                         $nick = true;
  99                 }
 100
 101                 // Re-check receivers and own personal data
 102                 $result = SQL_QUERY_ESC("SELECT userid, gender, surname, family, email".$ADD." FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid IN ('%s','%s') AND `status`='CONFIRMED' ORDER BY userid LIMIT 2",
 103                         array($GLOBALS['userid'], bigintval(REQUEST_POST('to_uid'))), __FILE__, __LINE__);
 104                 $valid_data = (SQL_NUMROWS($result) == 2);
 105
 106                 if ($valid_code && $valid_pass && $valid_amount && $valid_reason && $valid_recipient) {
 107                         // Let's start the transfer and load user data
 108                         list($uid1, $gender1, $sname1, $fname1, $email1, $nick1) = SQL_FETCHROW($result);
 109                         list($uid2, $gender2, $sname2, $fname2, $email2, $nick2) = SQL_FETCHROW($result);
 110                         SQL_FREERESULT($result);
 111                         // @TODO Rewrite all these constants to array elements
 112                         if ($uid1 == $GLOBALS['userid']) {
 113                                 // Data row 1 is sender's data
 114                                 define('__SENDER_GENDER'   , TRANSLATE_GENDER($gender1));
 115                                 define('__SENDER_NICK'     , $nick1);
 116                                 define('__SENDER_SNAME'    , $sname1);
 117                                 define('__SENDER_FNAME'    , $fname1);
 118                                 define('__SENDER_EMAIL'    , $email1);
 119                                 // Data row 2 is recpient's data
 120                                 define('__RECIPIENT_GENDER', TRANSLATE_GENDER($gender2));
 121                                 define('__RECIPIENT_NICK'  , $nick2);
 122                                 define('__RECIPIENT_SNAME' , $sname2);
 123                                 define('__RECIPIENT_FNAME' , $fname2);
 124                                 define('__RECIPIENT_EMAIL' , $email2);
 125
 126                                 // Prepare variables for testing
 127                                 $TEST_NICK_SENDER = $nick1;
 128                                 $TEST_NICK_REC = $nick2;
 129                         } else {
 130                                 // Data row 2 is sender's data
 131                                 define('__SENDER_GENDER'   , TRANSLATE_GENDER($gender2));
 132                                 define('__SENDER_NICK'     , $nick2);
 133                                 define('__SENDER_SNAME'    , $sname2);
 134                                 define('__SENDER_FNAME'    , $fname2);
 135                                 define('__SENDER_EMAIL'    , $email2);
 136                                 // Data row 1 is recpient's data
 137                                 define('__RECIPIENT_GENDER', TRANSLATE_GENDER($gender1));
 138                                 define('__RECIPIENT_NICK'  , $nick1);
 139                                 define('__RECIPIENT_SNAME' , $sname1);
 140                                 define('__RECIPIENT_FNAME' , $fname1);
 141                                 define('__RECIPIENT_EMAIL' , $email1);
 142
 143                                 // Prepare variables for testing
 144                                 $TEST_NICK_SENDER = $nick2;
 145                                 $TEST_NICK_REC = $nick1;
 146                         }
 147
 148                         // Sender's UID is always currently stored in cookie userid...
 149                         define('__SENDER_UID'     , $GLOBALS['userid']);
 150                         define('__RECIPIENT_UID'  , REQUEST_POST('to_uid'));
 151
 152                         $SENDER = constant('__SENDER_UID');
 153                         $RECIPIENT = constant('__RECIPIENT_UID');
 154                         if ($nick) {
 155                                 if (($TEST_NICK_SENDER != constant('__SENDER_UID')) && (!empty($TEST_NICK_SENDER))) {
 156                                         $SENDER = constant('__SENDER_NICK');
 157                                 }
 158
 159                                 if (($TEST_NICK_REC != constant('__RECIPIENT_UID')) && (!empty($TEST_NICK_REC))) {
 160                                         $RECIPIENT = constant('__RECIPIENT_NICK');
 161                                 }
 162                         }
 163
 164                         // Remember transfer reason and fancy date/time in constants
 165                         define('__TRANSFER_REASON', REQUEST_POST('reason'));
 166                         define('__TRANSFER_EXPIRES', CREATE_FANCY_TIME(getConfig('transfer_age')));
 167
 168                         // Generate tranafer id
 169                         define('__TRANS_ID', bigintval(generateRandomCodde("10", mt_rand(0, 99999), $GLOBALS['userid'], REQUEST_POST('reason'))));
 170
 171                         // Add entries to both tables
 172                         SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_user_transfers_in` (userid, from_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
 173                                 array(bigintval(REQUEST_POST('to_uid')), $GLOBALS['userid'], bigintval(REQUEST_POST('points')), REQUEST_POST('reason'), __TRANS_ID),
 174                                 __FILE__, __LINE__);
 175                         SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_user_transfers_out` (userid, to_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
 176                                 array($GLOBALS['userid'], bigintval(REQUEST_POST('to_uid')), bigintval(REQUEST_POST('points')), REQUEST_POST('reason'), __TRANS_ID),
 177                                 __FILE__, __LINE__);
 178
 179                         // Add points to account *directly* ...
 180                         ADD_POINTS_REFSYSTEM("member_transfer", bigintval(REQUEST_POST('to_uid')), bigintval(REQUEST_POST('points')), false, "0", false, "direct");
 181
 182                         // ... and add it to current user's used points
 183                         SUB_POINTS("transfer", $GLOBALS['userid'], REQUEST_POST('points'));
 184
 185                         // First send email to recipient
 186                         $msg = LOAD_EMAIL_TEMPLATE("member_transfer_recipient", "", constant('__RECIPIENT_UID'));
 187                         SEND_EMAIL(constant('__RECIPIENT_EMAIL'), getMessage('TRANSFER_MEMBER_RECIPIENT_SUBJ').": ".$SENDER, $msg);
 188
 189                         // Second send email to sender
 190                         $msg = LOAD_EMAIL_TEMPLATE("member_transfer_sender", "", constant('__SENDER_UID'));
 191                         SEND_EMAIL(constant('__SENDER_EMAIL'), getMessage('TRANSFER_MEMBER_SENDER_SUBJ').": ".$RECIPIENT, $msg);
 192
 193                         // At last send admin mail(s)
 194                         $ADMIN_SUBJ = sprintf("%s (%s->%s)", getMessage('TRANSFER_ADMIN_SUBJECT'), $SENDER, $RECIPIENT);
 195                         SEND_ADMIN_NOTIFICATION($ADMIN_SUBJ, "admin_transfer_points");
 196
 197                         // Transfer is completed
 198                         LOAD_TEMPLATE("admin_settings_saved", false, getMessage('TRANSFER_COMPLETED')."<br /><a href=\"{!URL!}/modules.php?module=login&amp;what=transfer\">{--TRANSFER_CONTINUE_OVERVIEW--}</a>");
 199                 } elseif (!$valid_code) {
 200                         // Invalid Touring code!
 201                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_CODE--}</div>");
 202                         REQUEST_UNSET_POST('ok');
 203                 } elseif (!$valid_pass) {
 204                         // Wrong password entered
 205                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_PASSWORD--}</div>");
 206                         REQUEST_UNSET_POST('ok');
 207                 } elseif (!$valid_amount) {
 208                         // Too much points entered
 209                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_POINTS--}</div>");
 210                         REQUEST_UNSET_POST('ok');
 211                 } elseif (!$valid_reason) {
 212                         // No transfer reason entered
 213                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_REASON--}</div>");
 214                         REQUEST_UNSET_POST('ok');
 215                 } elseif (!$valid_recipient) {
 216                         // No recipient selected
 217                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_RECIPIENT--}</div>");
 218                         REQUEST_UNSET_POST('ok');
 219                 } elseif (!$valid_data) {
 220                         // No recipient selected
 221                         LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_note\">{--TRANSFER_INVALID_DATA--}</div>");
 222                         REQUEST_UNSET_POST('ok');
 223                 }
 224         }
 225
 226         if (!IS_FORM_SENT()) {
 227                 // Load member list
 228                 if (EXT_IS_ACTIVE("nickname")) {
 229                         // Load userid and nickname
 230                         $result = SQL_QUERY_ESC("SELECT userid, nickname FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `status`='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
 231                          array($GLOBALS['userid']), __FILE__, __LINE__);
 232                 } else {
 233                         // Load only userid
 234                         $result = SQL_QUERY_ESC("SELECT userid, userid FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `status`='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
 235                          array($GLOBALS['userid']), __FILE__, __LINE__);
 236                 }
 237
 238                 if (SQL_NUMROWS($result) > 0) {
 239                         // Load list
 240                         $OUT  = "<select name=\"to_uid\" size=\"1\" class=\"member_select\">
 241         <option value=\"0\">{--SELECT_NONE--}</option>\n";
 242                         // @TODO Try to rewrite his to $content = SQL_FETCHARRAY(), see some lines above for two different queries
 243                         while (list($uid, $nick) = SQL_FETCHROW($result)) {
 244                                 $OUT .= "       <option value=\"".$uid."\"";
 245                                 if ((REQUEST_ISSET_POST(('to_uid'))) && (REQUEST_POST('to_uid') == $uid)) $OUT .= " selected=\"selected\"";
 246                                 $OUT .= ">";
 247                                 if (($nick != $uid) && (!empty($nick))) {
 248                                         // Output nickname
 249                                         $OUT .= $nick;
 250                                 } else {
 251                                         // Output userid
 252                                         $OUT .= $uid;
 253                                 }
 254                                 $OUT .= "</option>\n";
 255                         }
 256                         $OUT .= "</select>\n";
 257                         define('__TRANSFER_TO_DISABLED', "");
 258
 259                         // Free memory
 260                         SQL_FREERESULT($result);
 261                 } else {
 262                         // No one else is opt-in
 263                         $OUT = getMessage('TRANSFER_NO_ONE_ELSE_OPT_IN');
 264                         define('__TRANSFER_TO_DISABLED', " disabled");
 265                 }
 266
 267                 // Transfer output to constant for the template
 268                 define('__TRANSFER_USERID_SELECTION', $OUT);
 269
 270                 // Generate Code
 271                 if (getConfig('transfer_code') > 0) {
 272                         $rand = mt_rand(0, 99999);
 273                         $code = generateRandomCodde(getConfig('transfer_code'), $rand, $GLOBALS['userid'], constant('__TRANSFER_MAX_VALUE'));
 274                         $img = GENERATE_IMAGE($code, false);
 275                         define('__TRANSFER_IMAGE_INPUT', "<input type=\"hidden\" name=\"code_chk\" value=\"".$rand."\" /><input type=\"text\" name=\"code\" class=\"member_normal\" size=\"5\" maxlength=\"7\"{!__TRANSFER_TO_DISABLED!} />&nbsp;".$img);
 276                 } else {
 277                         $code = "00000";
 278                         define('__TRANSFER_IMAGE_INPUT', getMessage('TRANSFER_NO_CODE'));
 279                 }
 280
 281                 // Transfer maybe already entered valued'
 282                 if (REQUEST_ISSET_GET('ok')) {
 283                         // Get values from form
 284                         define('__TRANSFER_POINTS_VALUE', bigintval(REQUEST_POST('points')));
 285                         define('__TRANSFER_REASON_VALUE', strip_tags(REQUEST_POST('reason')));
 286                 } else {
 287                         // Set empty values
 288                         define('__TRANSFER_POINTS_VALUE', "");
 289                         define('__TRANSFER_REASON_VALUE', "");
 290                 }
 291
 292                 // Output form
 293                 LOAD_TEMPLATE("member_transfer_new");
 294         }
 295         break;
 296
 297 case "list_in": // List only incoming transactions
 298 case "list_out": // List only outgoing transactions
 299         // As you can see I put list_in and list_out together. I now do a switch() again on it for the right SQL command
 300         switch ($MODE)
 301         {
 302         case "list_in":
 303                 $sql = "SELECT trans_id, from_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
 304                 // @TODO Rewrite these constants
 305                 $NOTHING = getMessage('TRANSFER_NO_INCOMING_TRANSFERS');
 306                 define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_INCOMING'));
 307                 define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_INCOMING'));
 308                 break;
 309
 310         case "list_out":
 311                 $sql = "SELECT trans_id, to_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
 312                 // @TODO Rewrite these constants
 313                 $NOTHING = getMessage('TRANSFER_NO_OUTGOING_TRANSFERS');
 314                 define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_OUTGOING'));
 315                 define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_OUTGOING'));
 316                 break;
 317         }
 318
 319         // Run the SQL command
 320         $total = 0;
 321         $result = SQL_QUERY_ESC($sql, array($GLOBALS['userid']), __FILE__, __LINE__);
 322         if (SQL_NUMROWS($result) > 0) {
 323                 $OUT = ""; $SW = 2;
 324                 // @TODO This should be somehow rewritten to $content = SQL_FETCHARRAY(), see switch() block above for SQL queries
 325                 while (list($tid, $uid, $points, $reason, $stamp) = SQL_FETCHROW($result)) {
 326                         // Rewrite points
 327                         if ($type == "OUT") $points = $points."-";
 328
 329                         // Prepare content for template
 330                         $content = array(
 331                                 'sw'     => $SW,
 332                                 'tid'    => $id,
 333                                 'stamp'  => MAKE_DATETIME($stamp, "3"),
 334                                 'uid'    => $uid,
 335                                 'reason' => $reason,
 336                                 'points' => TRANSLATE_COMMA($points)
 337                         );
 338
 339                         // Load row template
 340                         $OUT .= LOAD_TEMPLATE("member_transfer_row2", true, $content);
 341
 342                         // Add points and switch color
 343                         $total += $points;
 344                         $SW = 3 - $SW;
 345                 }
 346
 347                 // Free memory
 348                 SQL_FREERESULT($result);
 349         } else {
 350                 // Nothing for in or out
 351                 $OUT = "<tr>
 352   <td colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
 353     ".LOAD_TEMPLATE("admin_settings_saved", true, $NOTHING)."
 354   </td>
 355 </tr>";
 356         }
 357
 358         // ... and add them to a constant for the template
 359         // @TODO Rewrite these constants
 360         define('__TRANSFER_ROWS', $OUT);
 361
 362         // Remeber total amount
 363         define('__TRANSFER_TOTAL_VALUE', $total);
 364
 365         // Load final template
 366         LOAD_TEMPLATE("member_transfer_list");
 367         break;
 368
 369 case "list_all": // List all transactions
 370         // We fill a temporary table with data from both tables. This is much easier
 371         // to code and unstand by you as sub-SELECT queries. I know this is not the
 372         // fastest way but it shall be fine for now.
 373         //
 374         // First of all create the temporary table
 375         $result = SQL_QUERY("CREATE TEMPORARY TABLE `{!_MYSQL_PREFIX!}_transfers_tmp` (
 376 trans_id VARCHAR(12) NOT NULL DEFAULT '',
 377 party_uid BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
 378 points BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
 379 reason VARCHAR(255) NOT NULL DEFAULT '',
 380 time_trans VARCHAR(10) NOT NULL DEFAULT '0',
 381 trans_type ENUM('IN','OUT') NOT NULL DEFAULT 'IN',
 382 KEY(party_uid)
 383 ) TYPE=HEAP", __FILE__, __LINE__);
 384
 385         // Let's begin with the incoming list
 386         $result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s ORDER BY `id` LIMIT %s",
 387 array($GLOBALS['userid'], getConfig('transfer_max')), __FILE__, __LINE__);
 388         while ($DATA = SQL_FETCHROW($result)) {
 389                 $DATA[] = "IN";
 390                 $DATA = implode("','", $DATA);
 391                 $res_temp = SQL_QUERY("INSERT INTO `{!_MYSQL_PREFIX!}_transfers_tmp` (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
 392         }
 393
 394         // Free memory
 395         SQL_FREERESULT($result);
 396
 397         // As the last table transfer data from outgoing table to temporary
 398         $result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s ORDER BY `id` LIMIT %s",
 399 array($GLOBALS['userid'], getConfig('transfer_max')), __FILE__, __LINE__);
 400         while ($DATA = SQL_FETCHROW($result)) {
 401                 $DATA[] = "OUT";
 402                 $DATA = implode("','", $DATA);
 403                 $res_temp = SQL_QUERY("INSERT INTO `{!_MYSQL_PREFIX!}_transfers_tmp` (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
 404         }
 405
 406         // Free memory
 407         SQL_FREERESULT($result);
 408
 409         $total = 0;
 410         if (SQL_NUMROWS($result) > 0) {
 411                 // Search for entries
 412                 $result = SQL_QUERY("SELECT party_uid, trans_id, points, reason, time_trans, trans_type FROM `{!_MYSQL_PREFIX!}_transfers_tmp` ORDER BY time_trans DESC",
 413                         __FILE__, __LINE__);
 414
 415                 // Output rows
 416                 $OUT = ""; $SW = 2;
 417                 while ($content = SQL_FETCHARRAY($result)) {
 418                         // Rewrite points
 419                         if ($content['trans_type'] == "OUT") $content['points'] = "-".$content['points']."";
 420
 421                         // Prepare content for template
 422                         $content['sw']     = $SW;
 423                         $content['time']   = MAKE_DATETIME($content['time_trans'], "3");
 424                         $content['points'] = TRANSLATE_COMMA($content['points']);
 425
 426                         // Load row template
 427                         $OUT .= LOAD_TEMPLATE("member_transfer_row", true, $content);
 428
 429                         // Add points and switch color
 430                         $total += $content['points'];
 431                         $SW = 3 - $SW;
 432                 }
 433
 434                 // Free memory
 435                 SQL_FREERESULT($result);
 436         } else {
 437                 // Nothing for in and out
 438                 $OUT = "<tr>
 439   <td colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
 440     ".LOAD_TEMPLATE("admin_settings_saved", true, getMessage('TRANSFER_NO_INOUT_TRANSFERS'))."
 441   </td>
 442 </tr>";
 443         }
 444
 445         // ... and add them to a constant for the template
 446         // @TODO Rewrite all these constants
 447         define('__TRANSFER_ROWS', $OUT);
 448
 449         // Remeber total amount
 450         define('__TRANSFER_TOTAL_VALUE', $total);
 451
 452         // Set title
 453         define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_ALL'));
 454
 455         // Set "balance" word
 456         define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_BALANCE'));
 457
 458         // Load final template
 459         LOAD_TEMPLATE("member_transfer_list");
 460
 461         // At the end we don't need a temporary table in memory
 462         $result = SQL_QUERY("DROP TABLE IF EXISTS `{!_MYSQL_PREFIX!}_transfers_tmp`", __FILE__, __LINE__);
 463
 464         // Free some memory...
 465         SQL_FREERESULT($result);
 466         break;
 467
 468 case "": // Overview page
 469         // Check incoming transfers
 470         $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 471         list($dmy) = SQL_FETCHROW($result);
 472         SQL_FREERESULT($result);
 473
 474         $total=$dmy;
 475         if ($dmy > 0) {
 476                 define('__TRANSFER_IN_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_in\">".$dmy."</a>");
 477         } else {
 478                 define('__TRANSFER_IN_LINK', $dmy);
 479         }
 480
 481         // Check outgoing transfers
 482         $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s", array($GLOBALS['userid']), __FILE__, __LINE__);
 483         list($dmy) = SQL_FETCHROW($result);
 484         SQL_FREERESULT($result);
 485
 486         $total+=$dmy;
 487         if ($dmy > 0) {
 488                 define('__TRANSFER_OUT_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_out\">".$dmy."</a>");
 489         } else {
 490                 define('__TRANSFER_OUT_LINK', $dmy);
 491         }
 492
 493         // Total transactions
 494         if ($total > 0) {
 495                 define('__TRANSFER_ALL_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_all\">".$total."</a>");
 496         } else {
 497                 define('__TRANSFER_ALL_LINK', $total);
 498         }
 499
 500         if (IS_FORM_SENT()) {
 501                 // Save settings
 502                 SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET opt_in='%s' WHERE userid=%s LIMIT 1",
 503                         array(REQUEST_POST('opt_in'), $GLOBALS['userid']), __FILE__, __LINE__);
 504
 505                 // Rember for next switch() command
 506                 $opt_in = REQUEST_POST('opt_in');
 507
 508                 // "Settings saved..."
 509                 LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"member_done\">{--SETTINGS_SAVED--}</div>");
 510         }
 511
 512         switch ($opt_in)
 513         {
 514         case "Y":
 515                 define('__TRANSFER_ALLOW_Y', " checked=\"checked\"");
 516                 define('__TRANSFER_ALLOW_N', "");
 517                 define('__TRANSFER_NEW_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=new\">{--TRANSFER_NOW_LINK--}</a>");
 518                 break;
 519
 520         case "N":
 521                 define('__TRANSFER_ALLOW_Y', "");
 522                 define('__TRANSFER_ALLOW_N', " checked=\"checked\"");
 523                 define('__TRANSFER_NEW_LINK', getMessage('TRANSFER_PLEASE_ALLOW_OPT_IN'));
 524                 break;
 525         }
 526
 527         // Check for latest out-transfers
 528         $result = SQL_QUERY_ESC("SELECT time_trans
 529 FROM `{!_MYSQL_PREFIX!}_user_transfers_out`
 530 WHERE time_trans > (UNIX_TIMESTAMP() - %s) AND userid=%s
 531 ORDER BY time_trans DESC
 532 LIMIT 1", array(getConfig('transfer_timeout'), $GLOBALS['userid']), __FILE__, __LINE__);
 533         if (SQL_NUMROWS($result) == 0) {
 534                 // Load template
 535                 define('__TRANSFER_SETTINGS_CONTENT', LOAD_TEMPLATE("member_transfer_settings", true));
 536         } else {
 537                 // Load newest transaction
 538                 list($newest) = SQL_FETCHROW($result);
 539                 SQL_FREERESULT($result);
 540                 define('__TRANSFER_SETTINGS_CONTENT', sprintf(getMessage('TRANSFER_LATEST_IS'), MAKE_DATETIME($newest, "3")));
 541         }
 542
 543         // Load template
 544         LOAD_TEMPLATE("member_transfer_overview");
 545         break;
 546 }
 547 //
 548 ?>