A *lot* more code-cleanups, errors in CSS fixed (missing brackets) and frameset suppo...
[mailer.git] / mailid_top.php
1 <?php
2 /************************************************************************
3  * MXChange v0.2.1                                    Start: 11/14/2003 *
4  * ===============                              Last change: 11/13/2004 *
5  *                                                                      *
6  * -------------------------------------------------------------------- *
7  * File              : mailid_top.php                                   *
8  * -------------------------------------------------------------------- *
9  * Short description : Confirmation file for emails                     *
10  * -------------------------------------------------------------------- *
11  * Kurzbeschreibung  : Bestaetigung von Mails                           *
12  * -------------------------------------------------------------------- *
13  *                                                                      *
14  * -------------------------------------------------------------------- *
15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
16  * For more information visit: http://www.mxchange.org                  *
17  *                                                                      *
18  * This program is free software; you can redistribute it and/or modify *
19  * it under the terms of the GNU General Public License as published by *
20  * the Free Software Foundation; either version 2 of the License, or    *
21  * (at your option) any later version.                                  *
22  *                                                                      *
23  * This program is distributed in the hope that it will be useful,      *
24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
26  * GNU General Public License for more details.                         *
27  *                                                                      *
28  * You should have received a copy of the GNU General Public License    *
29  * along with this program; if not, write to the Free Software          *
30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
31  * MA  02110-1301  USA                                                  *
32  ************************************************************************/
33
34 // Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
35 require_once("inc/libs/security_functions.php");
36
37 // Init "action" and "what"
38 global $what, $action;
39 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
40
41 // Tell everyone we are in this module
42 $GLOBALS['module'] = "mailid";  $CSS = "0";
43
44 // Load the required file(s)
45 require ("inc/config.php");
46
47 if (defined('mxchange_installed') && (mxchange_installed))
48 {
49         // Is the extension active
50         if (!EXT_IS_ACTIVE("mailid", true)) {
51                 // Is not activated/installed yet!
52                 ADD_FATAL(sprintf(EXTENSION_PROBLEM_NOT_INSTALLED, "register"));
53         }
54
55         // Secure all data
56         $url_uid = "0"; $url_bid = "0"; $url_mid = "0"; $code = "0"; $mode = "";
57         if (!empty($_GET['uid']))     $url_uid = bigintval($_GET['uid']);
58         if (!empty($_GET['mailid']))  $url_mid = bigintval($_GET['mailid']);
59         if (!empty($_GET['bonusid'])) $url_bid = bigintval($_GET['bonusid']);
60         if (!empty($_GET['code']))    $code    = bigintval($_GET['code']);
61         if (!empty($_GET['mode']))    $mode    = $_GET['mode'];
62
63         // 01        1        12            2    2            21    1     2      2     10
64         if (($url_uid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (count($FATAL) == 0))
65         {
66                 if ($mode != "img") require_once(PATH."inc/header.php");
67
68                 // Maybe he wants to confirm an email?
69                 if ($url_mid > 0)
70                 {
71                         $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE stats_id=%d AND userid=%d LIMIT 1",
72                          array($url_mid, $url_uid), __FILE__, __LINE__);
73                         $type = "mailid"; $DATA = $url_mid;
74                 }
75                  elseif ($url_bid > 0)
76                 {
77                         $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE bonus_id=%d AND userid=%d LIMIT 1",
78                          array($url_bid, $url_uid), __FILE__, __LINE__);
79                         $type = "bonusid"; $DATA = $url_bid;
80                 }
81                 if (SQL_NUMROWS($result) == 1)
82                 {
83                         // Is the stats ID valid?
84                         list($link_id, $ltype) = SQL_FETCHROW($result);
85                         SQL_FREERESULT($result);
86                         switch ($ltype)
87                         {
88                         case "NORMAL":
89                                 $result_mailid = SQL_QUERY_ESC("SELECT pool_id, userid, id FROM "._MYSQL_PREFIX."_user_stats WHERE id=%d LIMIT 1",
90                                  array($url_mid), __FILE__, __LINE__);
91                                 break;
92
93                         case "BONUS":
94                                 $result_mailid = SQL_QUERY_ESC("SELECT id, id, is_notify FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1",
95                                  array($url_bid), __FILE__, __LINE__);
96                                 break;
97                         }
98                         if (SQL_NUMROWS($result_mailid) == 1)
99                         {
100                                 list($pool, $sender, $notify) = SQL_FETCHROW($result_mailid);
101
102                                 // Correct notification switch in non-bonus mails
103                                 if (($notify != 'Y') && ($notify != 'N')) $notify = 'N';
104
105                                 // Free some memory
106                                 SQL_FREERESULT($result_mailid);
107
108                                 // Set sender to 0 when we have a bonus mail
109                                 if ($ltype == "BONUS") $sender = 0;
110
111                                 // Is the user's ID unlocked?
112                                 $result = SQL_QUERY_ESC("SELECT status, sex, surname, family, ref_payout FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
113                                  array($url_uid), __FILE__, __LINE__);
114                                 if (SQL_NUMROWS($result) == 1)
115                                 {
116                                         // Load data
117                                         list($status, $sex, $sname, $fname, $ref_pay) = SQL_FETCHROW($result);
118                                         SQL_FREERESULT($result);
119
120                                         if ($status == "CONFIRMED")
121                                         {
122                                                 // Update last activity
123                                                 $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_online=UNIX_TIMESTAMP(), last_module='mailid_top' WHERE userid=%d LIMIT 1",
124                                                  array($url_uid), __FILE__, __LINE__);
125
126                                                 // User has confirmed his account so we can procede...
127                                                 switch ($ltype)
128                                                 {
129                                                 case "NORMAL":
130                                                         $result = SQL_QUERY_ESC("SELECT payment_id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%d LIMIT 1",
131                                                          array(bigintval($pool)), __FILE__, __LINE__);
132                                                         if (SQL_NUMROWS($result) == 1)
133                                                         {
134                                                                 list($pay) = SQL_FETCHROW($result);
135                                                                 $time      = GET_PAY_POINTS($pay, "time");
136                                                                 $payment   = GET_PAY_POINTS($pay, "payment");
137                                                                 $VALID     = true;
138                                                         }
139
140                                                         // Free memory...
141                                                         SQL_FREERESULT($result);
142                                                         break;
143
144                                                 case "BONUS":
145                                                         $result = SQL_QUERY_ESC("SELECT time, points FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1",
146                                                          array(bigintval($pool)), __FILE__, __LINE__);
147                                                         if (SQL_NUMROWS($result) == 1)
148                                                         {
149                                                                 list($time, $payment) = SQL_FETCHROW($result);
150                                                                 $VALID = true;
151                                                         }
152
153                                                         // Free memory...
154                                                         SQL_FREERESULT($result);
155                                                         break;
156                                                 }
157                                                 if ($VALID)
158                                                 {
159                                                         if (($time == "0") && ($payment >0)) $time = "1";
160                                                         if (($time > 0) && ($payment > 0))
161                                                         {
162                                                                 if (!empty($code))
163                                                                 {
164                                                                         // Generate code
165                                                                         $img_code = GEN_RANDOM_CODE($CONFIG['code_length'], $code, $url_uid, $DATA);
166                                                                 }
167
168                                                                 switch ($mode)
169                                                                 {
170                                                                 case "add":
171                                                                         // Count clicks
172                                                                         switch ($ltype)
173                                                                         {
174                                                                         case "NORMAL":
175                                                                                 $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_stats SET clicks=clicks+1 WHERE id=%d LIMIT 1",
176                                                                                  array($url_mid), __FILE__, __LINE__);
177
178                                                                                 // Update mediadata as well
179                                                                                 if (GET_EXT_VERSION("mediadata") >= "0.0.4")
180                                                                                 {
181                                                                                         // Update database
182                                                                                         MEDIA_UPDATE_ENTRY(array("total_clicks", "normal_clicks"), "add", 1);
183                                                                                 }
184                                                                                 break;
185
186                                                                         case "BONUS":
187                                                                                 $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET clicks=clicks+1 WHERE id=%d LIMIT 1",
188                                                                                  array($url_bid), __FILE__, __LINE__);
189
190                                                                                 // Update mediadata as well
191                                                                                 if (GET_EXT_VERSION("mediadata") >= "0.0.4")
192                                                                                 {
193                                                                                         // Update database
194                                                                                         MEDIA_UPDATE_ENTRY(array("total_clicks", "bonus_clicks"), "add", 1);
195                                                                                 }
196                                                                                 break;
197                                                                         }
198
199                                                                         // Export data into constants for the template
200                                                                         define('_POINTS_VALUE'   , TRANSLATE_COMMA($payment));
201                                                                         define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));
202
203                                                                         // Only when user extension = v0.1.2: Update mails-confirmed counter
204                                                                         if (GET_EXT_VERSION("user") >= "0.1.2")
205                                                                         {
206                                                                                 // Update counter
207                                                                                 $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET mails_confirmed=mails_confirmed+1 WHERE userid=%d LIMIT 1",
208                                                                                  array($url_uid), __FILE__, __LINE__);
209                                                                         }
210
211                                                                         // Right code entered?
212                                                                         if (bigintval($_POST['gfx_check']) == $img_code)
213                                                                         {
214                                                                                 // Right code entered add points and remove entry
215                                                                                 if (($ref_pay > 0) && ($CONFIG['allow_direct_pay'] == 'N'))
216                                                                                 {
217                                                                                         // Don't add points over the referral system
218                                                                                         $locked = true;
219                                                                                         $template = "mailid_points_locked";
220                                                                                 }
221                                                                                  else
222                                                                                 {
223                                                                                         // Add points over referral system
224                                                                                         $locked = false;
225                                                                                         $template = "mailid_points_done";
226                                                                                 }
227
228                                                                                 // Count down ref_payout value
229                                                                                 $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_payout=ref_payout-1 WHERE userid=%d AND ref_payout > 0 LIMIT 1",
230                                                                                  array($url_uid), __FILE__, __LINE__);
231
232                                                                                 // Add points
233                                                                                 ADD_POINTS_REFSYSTEM($url_uid, $payment, false, "0", $locked);
234
235                                                                                 // Shall I add bonus points for "turbo clickers" ?
236                                                                                 if ((GET_EXT_VERSION("bonus") >= "0.2.2") && (function_exists('BONUS_ADD_TURBO_POINTS')))
237                                                                                 {
238                                                                                         // Is an active-rallye running and this is not a notification mail?
239                                                                                         if (($CONFIG['bonus_active'] == 'Y') && ($notify == 'N'))
240                                                                                         {
241                                                                                                 // Shall I exclude the webmaster's own userid from the active-rallye?
242                                                                                                 if (((($CONFIG['bonus_uid'] == $url_uid) && ($CONFIG['bonus_include_own'] == 'Y')) || ($CONFIG['bonus_uid'] != $url_uid)) && ($CONFIG['def_refid'] != $url_uid))
243                                                                                                 {
244                                                                                                         // Add points and remember ranking are done in this function....
245                                                                                                         BONUS_ADD_TURBO_POINTS($DATA, $url_uid, $type);
246
247                                                                                                         // Set template to mailid_points_done2 which contains a link to the ranking list
248                                                                                                         $template = "mailid_points_done2";
249                                                                                                         if ($locked) $template = "mailid_points_locked2";
250                                                                                                         define('_UID_VALUE' , $url_uid);
251                                                                                                         define('_TYPE_VALUE', $type);
252                                                                                                         define('_DATA_VALUE', TRANSLATE_COMMA($DATA));
253                                                                                                 }
254                                                                                         }
255                                                                                 }
256
257                                                                                 // Remove link from table
258                                                                                 $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%d LIMIT 1",
259                                                                                  array(bigintval($link_id)), __FILE__, __LINE__);
260
261                                                                                 // Load total points
262                                                                                 define('__TOTAL_POINTS', TRANSLATE_COMMA(
263                                                                                         GET_TOTAL_DATA($url_uid, "user_points", "points") -
264                                                                                         GET_TOTAL_DATA($url_uid, "user_data", "used_points"))
265                                                                                 );
266
267                                                                                 // Load template
268                                                                                 LOAD_TEMPLATE($template);
269                                                                         }
270                                                                          else
271                                                                         {
272                                                                                 // Wrong image code! So add points to sender's account
273                                                                                 ADD_POINTS_REFSYSTEM($sender, $payment);
274
275                                                                                 // Remove link from table
276                                                                                 $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%d LIMIT 1",
277                                                                                  array(bigintval($link_id)), __FILE__, __LINE__);
278
279                                                                                 // Load template
280                                                                                 LOAD_TEMPLATE("mailid_points_failed");
281                                                                         }
282                                                                         break;
283
284                                                                 case "img":
285                                                                         GENERATE_IMAGE($img_code);
286                                                                         break;
287
288                                                                 case "confirm":
289                                                                         if ($code > 0)
290                                                                         {
291                                                                                 // Export data into constants for the template
292                                                                                 define('_CODE_VALUE', $code);
293                                                                                 define('_UID_VALUE' , $url_uid );
294                                                                                 define('_TYPE_VALUE', $type);
295                                                                                 define('_DATA_VALUE', $DATA);
296                                                                                 define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));
297                                                                                 if ($CONFIG['code_length'] > 0)
298                                                                                 {
299                                                                                         // Generate Code
300                                                                                         define('_IMAGE_CODE', IMG_CODE($code, $type, $DATA, $url_uid));
301                                                                                         $templ = "mailid_enter_code";
302                                                                                 }
303                                                                                  else
304                                                                                 {
305                                                                                         // Disabled code
306                                                                                         define('__GFX_CODE', $img_code);
307                                                                                         $templ = "mailid_confirm_buttom";
308                                                                                 }
309
310                                                                                 // Load template
311                                                                                 LOAD_TEMPLATE($templ);
312                                                                         }
313                                                                         break;
314
315                                                                 case "":
316                                                                         // Ok, all data is valid and loaded. Finally let's output the timer... :-)
317                                                                         // Export data into constants for the template
318                                                                         define('_TIME_VALUE', $time);
319                                                                         define('_TIM2_VALUE', strlen($time));
320                                                                         define('_UID_VALUE' , $url_uid );
321                                                                         define('_TYPE_VALUE', $type);
322                                                                         define('_DATA_VALUE', $DATA);
323                                                                         define('_RAND_VALUE', rand(0, 99999));
324                                                                         define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true));
325
326                                                                         // Load template
327                                                                         LOAD_TEMPLATE("mailid_timer");
328                                                                         break;
329                                                                 }
330                                                         }
331                                                          else OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (6)</STRONG>");
332                                                 }
333                                                  else OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (5)</STRONG>");
334                                         }
335                                          else OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (4)</STRONG>");
336                                 }
337                                  else
338                                 {
339                                         SQL_FREERESULT($result);
340                                         OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (3)</STRONG>");
341                                 }
342                         }
343                          else
344                         {
345                                 SQL_FREERESULT($result);
346                                 OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (2)</STRONG>");
347                         }
348                 }
349                  else
350                 {
351                         SQL_FREERESULT($result);
352                         OUTPUT_HTML("<STRONG class=\"member_failed\">".MAIL_ALREADY_CONFIRMED." (1)</STRONG>");
353                 }
354                 if ($mode != "img")
355                 {
356                         // Write footer
357                         require_once(PATH."inc/footer.php");
358                 }
359         }
360 }
361  elseif ($mode != "img")
362 {
363         // You have to configure first!
364         LOAD_URL("install.php");
365 }
366
367 // Really all done here... ;-)
368 ?>