<?php
/************************************************************************
 * Mailer v0.2.1-FINAL                                Start: 01/09/2005 *
 * ===================                          Last change: 01/09/2005 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : beg.php                                          *
 * -------------------------------------------------------------------- *
 * Short description : Beg link for members                             *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Bettel-Link fuer Mitglieder                      *
 * -------------------------------------------------------------------- *
 * $Revision::                                                        $ *
 * $Date::                                                            $ *
 * $Tag:: 0.2.1-FINAL                                                 $ *
 * $Author::                                                          $ *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2009 by Roland Haeder                           *
 * Copyright (c) 2009 - 2012 by Mailer Developer Team                   *
 * For more information visit: http://mxchange.org                      *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Load security stuff here
require('inc/libs/security_functions.php');

// Init start time
$GLOBALS['__start_time'] = microtime(TRUE);

// Set module and output mode (HTML)
$GLOBALS['__module']      = 'beg';
$GLOBALS['__output_mode'] = '0';
$errorCode = NULL;

// Load the required file(s)
require('inc/config-global.php');

// Set content type
setContentType('text/html');

// Is the 'beg' extension active?
redirectOnUninstalledExtension('beg');

// Check for userid
if (isGetRequestElementSet('userid')) {
	// Init variables
	$points = '0';

	// Don't pay is the default...
	$pay = FALSE;

	// Validate if it is not a number
	if ((isExtensionActive('nickname')) && (isNicknameUsed(getRequestElement('userid')))) {
		// Maybe we have found a nickname?
		fetchUserData(getRequestElement('userid'), 'nickname');
	} elseif (isNicknameUsed(getRequestElement('userid'))) {
		// Nickname entered but nickname is not active
		$errorCode = getCode('EXTENSION_PROBLEM');
	} else {
		// Direct userid
		fetchUserData(getRequestElement('userid'));
	}

	// Check if locked in so don't pay points
	$status = 'failed';

	// Check if account was found
	if ((isUserDataValid()) && (getUserData('status') == 'CONFIRMED')) {
		/*
		 * Multiply configured values with 100000 and divide with 100000 so we can also handle small values
		 * If we need more number behind the decimal dot then we just need to increase all these three
		 * numbers matching to the numbers behind the decimal dot. Simple! ;-)
		 */
		$points = mt_rand((getBegPoints() * 100000), (getBegPointsMax() * 100000)) / 100000;

		// Set nickname / userid for template
		$content['userid']        = getRequestElement('userid');
		$content['clicks']        = (getUserData('beg_clicks') + 1);
		$content['header_banner'] = loadTemplate('beg_header_banner', TRUE);
		$content['footer_banner'] = loadTemplate('beg_footer_banner', TRUE);
		$content['points']        = $points;
	} // END - if

	// User id valid and not webmaster's id?
	if ((isValidUserId(getUserData('userid'))) && (getBegUserid() != getUserData('userid'))) {
		// Update counter
		SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `beg_clicks`=`beg_clicks`+1 WHERE `userid`=%s LIMIT 1",
			array(getUserData('userid')), __FILE__, __LINE__);

		// Check for last entry for userid w/o IP number                            12              33                               2    23              44            3                                          21     1                              1
		$result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_beg_ips` WHERE ((UNIX_TIMESTAMP() - `timeout`) >= {?beg_timeout?} OR ((UNIX_TIMESTAMP() - `timeout`) >= {?beg_userid_timeout?} AND `userid`=%s)) AND (`remote_ip`='%s' OR `sid`='%s') LIMIT 1",
			array(
				getUserData('userid'),
				detectRemoteAddr(),
				session_id()
			), __FILE__, __LINE__);

		// Entry not found, points set and not logged in?
		//* DEBUG: */ logDebugMessage(__FILE__, __LINE__, 'SQL_HASZERONUMS()=' . intval(SQL_HASZERONUMS($result)) . ',isAdmin()=' . intval(isAdmin()) . ',points=' . $points . ',isMember()=' . intval(isMember()) . ',getBegPayMode()=' . getBegPayMode());
		if ((SQL_HASZERONUMS($result)) && ($points > 0) && (getBegPayMode() == 'NONE') && ((!isMember()) || (isAdmin()))) {
			// Default is result from isAdmin(), mostly false
			$pay = isAdmin();

			// Admin is testing?
			if (!isAdmin()) {
				/*
				 * Remember remote address, userid and timestamp for next click
				 * but only when there is no admin begging.
				 * Admins shall be able to test it!
				 */
				SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_beg_ips` (`userid`, `remote_ip`, `sid`, `timeout`) VALUES ('%s','%s','%s', UNIX_TIMESTAMP())",
					array(
						getUserData('userid'),
						detectRemoteAddr(),
						session_id()
					), __FILE__, __LINE__);

				// Was is successfull?
				$pay = (!SQL_HASZEROAFFECTED());
			} // END - if

			// Pay points?
			//* DEBUG: */ logDebugMessage(__FILE__, __LINE__, 'pay=' . intval($pay));
			if ($pay === TRUE) {
				// Add points to user or begging rallye account
				if (addPointsBeg(getUserData('userid'), $points)) {
					// Set 'done' message
					$content['message'] = loadTemplate('beg_done', TRUE, $content);
				} else {
					// Error!
					$content['message'] = loadTemplate('beg_failed', TRUE, $content);
				}
			} else {
				// Error!
				$content['message'] = loadTemplate('beg_failed', TRUE, $content);
			}
		} elseif (isMember()) {
			// Logged in user found
			$content['message'] = loadTemplate('beg_login', TRUE, $content);
		} elseif (getBegPayMode() != 'NONE') { // Other pay-mode active!
			// Load message template depending on pay-mode
			$content['message'] = loadTemplate('beg_pay_mode_' . strtolower(getBegPayMode()), TRUE, $content);
			$pay = TRUE;
		} else {
			// Clicked received while reload lock is active
			$content['message'] = loadTemplate('beg_failed', TRUE, $content);
		}

		// Free memory
		SQL_FREERESULT($result);

		// Include header
		loadIncludeOnce('inc/header.php');

		// Load final template
		loadTemplate('beg_link', FALSE, $content);

		// Tracker code enabled? (We don't track users here!
		if ((getBegPayMode() != 'NONE') && ($pay === TRUE)) {
			// Prepare content for template
			// @TODO Opps, what is missing here???
			$content = array(
			);

			// Include config-depending template
			loadTemplate('beg_pay_code_' . strtolower(getBegPayMode()), FALSE, $content);
		} elseif (($pay === FALSE) && (!isset($content['message']))) {
			// Cannot pay! :-(
			$content['message'] = loadTemplate('beg_failed', TRUE);
		}

		// Include footer
		loadIncludeOnce('inc/footer.php');
	} elseif ((getUserData('status') != 'CONFIRMED') && (getUserData('status') != 'failed')) {
		// Maybe locked/unconfirmed account?
		$errorCode = generateErrorCodeFromUserStatus();
	} elseif ((getUserData('userid') == '0') || (getUserData('status') == 'failed')) {
		// Inalid or locked account, so let's find out
		if (fetchUserData(getRequestElement('userid'), 'nickname')) {
			// Locked account
			$errorCode = getCode('ACCOUNT_LOCKED');
		} else {
			// Invalid nickname! (404)
			$errorCode = getCode('USER_404');
		}
	} elseif (getUserData('userid') == getBegUserid()) {
		// Webmaster's id cannot beg for points!
		$errorCode = getCode('BEG_SAME_AS_OWN');
	}

	// Reload to index module if an error happens
	if (!is_null($errorCode)) {
		redirectToUrl('modules.php?module=index&amp;code=' . $errorCode . '&amp;ext=beg');
	} // END - if
} else {
	// No userid entered
	redirectToUrl('modules.php?module=index');
}

// Really all done here... ;-)
doShutdown();

// [EOF]
?>