More fixes for surfbar, SQL_QUERY_ESC() now escapes zeros
[mailer.git] / surfbar.php
1 <?php
2 /************************************************************************
3  * MXChange v0.2.1                                    Start: 09/05/2008 *
4  * ===============                              Last change: 09/05/2008 *
5  *                                                                      *
6  * -------------------------------------------------------------------- *
7  * File              : surfbar.php                                      *
8  * -------------------------------------------------------------------- *
9  * Short description : The surfbar itself                               *
10  * -------------------------------------------------------------------- *
11  * Kurzbeschreibung  : Die Surfbar selbst                               *
12  * -------------------------------------------------------------------- *
13  *                                                                      *
14  * -------------------------------------------------------------------- *
15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
16  * For more information visit: http://www.mxchange.org                  *
17  *                                                                      *
18  * This program is free software; you can redistribute it and/or modify *
19  * it under the terms of the GNU General Public License as published by *
20  * the Free Software Foundation; either version 2 of the License, or    *
21  * (at your option) any later version.                                  *
22  *                                                                      *
23  * This program is distributed in the hope that it will be useful,      *
24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
26  * GNU General Public License for more details.                         *
27  *                                                                      *
28  * You should have received a copy of the GNU General Public License    *
29  * along with this program; if not, write to the Free Software          *
30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
31  * MA  02110-1301  USA                                                  *
32  ************************************************************************/
33
34 // Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
35 require_once("inc/libs/security_functions.php");
36
37 // Init "action" and "what"
38 global $what, $action, $startTime, $SURFBAR_CACHE;
39 $SURFBAR_CACHE = array();
40 $GLOBALS['startTime'] = microtime(true);
41 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
42
43 // Set module
44 $GLOBALS['module'] = "surfbar";
45 $GLOBALS['refid']  = 0;
46 $CSS = 0;
47 $msg = null;
48
49 // Load the required file(s)
50 require ("inc/config.php");
51
52 // Is the script installed?
53 if (defined('mxchange_installed') && (isBooleanConstantAndTrue('mxchange_installed'))) {
54         // Only logged in users may use this surfbar!
55         if (!IS_LOGGED_IN()) {
56                 // Redirect
57                 LOAD_URL(URL."/modules.php?module=index");
58         } // END - if
59
60         // Is there a check value?
61         if (SURFBAR_CHECK_RELOAD_FULL()) {
62                 // Reload-lock is full, surfbar stopped so...
63                 // Load header
64                 require_once(PATH."inc/header.php");
65
66                 // Load template
67                 if (((isset($_GET['frame'])) && ($_GET['frame'] == "stop")) || (!isset($_GET['frame']))) {
68                         // Load template for "start" page
69                         LOAD_TEMPLATE("surfbar_frame_start");
70
71                         // Load banner
72                         OUTPUT_HTML("<br />");
73                         LOAD_TEMPLATE("surfbar_start_banner");
74
75                         // This makes the footer appear again
76                         unset($_GET['frame']);
77                 } else {
78                         // Prepare content
79                         $content = array(
80                                 'restart' => $_CONFIG['surfbar_restart_time'],
81                                 'start'   => str_repeat("X", strlen($_CONFIG['surfbar_restart_time']))
82                         );
83
84                         // Load template for stopped surfbar
85                         LOAD_TEMPLATE("surfbar_stopped", false, $content);
86                 }
87         } elseif ((isset($_GET['check'])) && (isset($_GET['id'])) && (isset($_GET['salt']))) {
88                 // Dummy next id get
89                 SURFBAR_GET_NEXT_ID($_GET['id']);
90
91                 // Check reload lock and validation code
92                 if ((!SURFBAR_CHECK_RELOAD_LOCK($_GET['id'])) && (SURFBAR_CHECK_VALIDATION_CODE($_GET['id'], $_GET['check'], $_GET['salt']))) {
93                         // Lock the URL (id) down
94                         SURFBAR_LOCKDOWN_ID($_GET['id']);
95
96                         // Code is valid so pay points here
97                         SURFBAR_PAY_POINTS($_GET['id']);
98
99                         // Check if reload is full
100                         if (SURFBAR_CHECK_RELOAD_FULL()) {
101                                 // Then load waiting page
102                                 LOAD_URL("surfbar.php?frame=stop");
103                         } // END - if
104                 } else {
105                         // Reload to stop frame!
106                         LOAD_URL("surfbar.php?frame=stop");
107                 }
108
109                 // All done, so fix notice for footer.php
110                 $footer = 1;
111         } else {
112                 // Prepare content
113                 $content = "";
114
115                 // Determine template name
116                 $templateName = SURFBAR_DETERMINE_TEMPLATE_NAME();
117
118                 // Frame "top" set?
119                 if ((isset($_GET['frame'])) && ($_GET['frame'] == "top")) {
120                         // Determine next id
121                         $nextId = SURFBAR_GET_NEXT_ID();
122
123                         // Is there a valid id?
124                         if ($nextId > 0) {
125                                 // Then prepare other content
126                                 $content = array(
127                                         'id'          => $nextId,
128                                         'check'       => SURFBAR_GENERATE_VALIDATION_CODE($nextId),
129                                         'salt'        => SURFBAR_GET_SALT(),
130                                         'reward'      => TRANSLATE_COMMA(SURFBAR_GET_REWARD($nextId)),
131                                         'url'         => SURFBAR_GET_URL($nextId),
132                                         'curr_reload' => SURFBAR_GET_USER_RELOAD_LOCK(),
133                                         'max_urls'    => SURFBAR_GET_TOTAL_URLS(),
134                                         'reload'      => SURFBAR_GET_RELOAD_TIME($nextId)
135                         );
136
137                                 // Update salt (double-call lock!)
138                                 SURFBAR_UPDATE_SALT();
139                         } else {
140                                 // Change template name
141                                 $templateName = "surfbar_stopped";
142                         }
143                 } else {
144                         // Load header in frameset mode
145                         $isFrameset = true;
146                 }
147
148                 // Load header
149                 require_once(PATH."inc/header.php");
150
151                 // Load that template
152                 LOAD_TEMPLATE($templateName, false, $content);
153         }
154
155         // Load footer
156         require_once(PATH."inc/footer.php");
157 } else {
158         // You have to configure first!
159         LOAD_URL("install.php");
160 }
161
162 // Close any open database connection here
163 SQL_CLOSE($link, __FILE__, __LINE__);
164
165 // Really all done here... ;-)
166 ?>