<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 10/29/2003 *
 * ===============                              Last change: 01/06/2006 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : order.php                                        *
 * -------------------------------------------------------------------- *
 * Short description : Submits your order to the administrators         *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Sendet die Buchung an die Administratoren        *
 * -------------------------------------------------------------------- *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Some security stuff...
$URL = "";
if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
{
	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
	require($INC);
}
 elseif ((!EXT_IS_ACTIVE("order")) && (!IS_ADMIN()))
{
	ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE, "order");
	return;
}
 elseif (!IS_LOGGED_IN())
{
	// Sorry, no guest access!
	$URL = URL."/modules.php?module=index";
}
 elseif (empty($_GET['order']))
{
	// You cannot call this module directly!
	$URL = URL."/modules.php?module=login&amp;what=order";
}

// When URL is empty nothing bad happend here
if (empty($URL))
{
	// Is the auto-send mechanism active or inactive?
	if ($_CONFIG['autosend_active'] == 'Y')
	{
		// Auto-send is active
		define('ADMIN_AUTOSEND',  COMPILE_CODE(ADMIN_AUTOSEND_ACTIVE));
		define('MEMBER_AUTOSEND', COMPILE_CODE(MEMBER_AUTOSEND_ACTIVE));
		$type = "NEW";
	}
	 else
	{
		// Auto-send is inactive
		define('ADMIN_AUTOSEND',  COMPILE_CODE(ADMIN_AUTOSEND_INACTIVE));
		define('MEMBER_AUTOSEND', COMPILE_CODE(MEMBER_AUTOSEND_INACTIVE));
		$type = "ADMIN";
	}

	// Update sending pool
	$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET data_type='%s' WHERE id=%d AND sender=%d AND data_type='TEMP' LIMIT 1",
	 array($type, bigintval($_GET['order']), $GLOBALS['userid']), __FILE__, __LINE__);

	// Finally is the entry valid?
	if (SQL_AFFECTEDROWS($link) == 1)
	{
		// Update his login data
		UPDATE_LOGIN_DATA();

		// Load personal data...
		$result = SQL_QUERY_ESC("SELECT sex, surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
		 array($GLOBALS['userid']), __FILE__, __LINE__);
		list($sex, $sname, $fname, $email) = SQL_FETCHROW($result);
		SQL_FREERESULT($result);

		// Load mail again...              0       1        2           3          4      5      6         7
		$result = SQL_QUERY_ESC("SELECT subject, text, receivers, payment_id, timestamp, url, cat_id, target_send FROM "._MYSQL_PREFIX."_pool WHERE id=%d AND sender=%d LIMIT 1",
		 array(bigintval($_GET['order']), $GLOBALS['userid']), __FILE__, __LINE__);
		$DATA = SQL_FETCHROW($result);
		SQL_FREERESULT($result);
		if (empty($DATA[0])) $DATA[0] = DEFAULT_SUBJECT_LINE;

		// Calculate used points
		$USED = $DATA[7] * GET_PAY_POINTS($DATA[3]);

		// Update used points
		$ADD = "";
		if ($_CONFIG['order_max'] == "ORDER") $ADD = ", mail_orders=mail_orders+1";
		$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s".$ADD." WHERE userid=%d LIMIT 1",
		 array($USED, $GLOBALS['userid']), __FILE__, __LINE__);

		// Update mediadata as well
		if (GET_EXT_VERSION("mediadata") >= "0.0.4")
		{
			// Update database
			MEDIA_UPDATE_ENTRY(array("total_points"), "sub", $USED);
		}

		// Send an email to the user
		$msg_mem = LOAD_EMAIL_TEMPLATE("order-member", "", $GLOBALS['userid']);
		SEND_EMAIL($email, MEMBER_NEW_QUEUE, $msg_mem);

		// Notify admins about this
		if (GET_EXT_VERSION("admins") >= "0.4.1")
		{
			SEND_ADMIN_EMAILS_PRO(ADMIN_NEW_QUEUE, "order-admin", "", $GLOBALS['userid']);
		}
		 else
		{
			$msg_admin = LOAD_EMAIL_TEMPLATE("order-admin", "", $GLOBALS['userid']);
			SEND_ADMIN_EMAILS(ADMIN_NEW_QUEUE, $msg_admin);
		}

		// Output back bottom
		LOAD_TEMPLATE("member_order-back", false);
	}
	 else
	{
		// Matching line not found or already "placed" in send queue
		$URL = URL."/modules.php?module=login";
		LOAD_URL($URL);
	}
}
 else
{
	// Redirect...
	LOAD_URL($URL);
}
//
?>