<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 11/14/2003 *
 * ===============                              Last change: 11/25/2004 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : mailid.php                                       *
 * -------------------------------------------------------------------- *
 * Short description : Confirmation file for emails                     *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Bestaetigung von Mails                           *
 * -------------------------------------------------------------------- *
 * $Revision::                                                        $ *
 * $Date::                                                            $ *
 * $Tag:: 0.2.1-FINAL                                                 $ *
 * $Author::                                                          $ *
 * Needs to be in all Files and every File needs "svn propset           *
 * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Load security stuff here
require('inc/libs/security_functions.php');

// Init "action" and "what"
$GLOBALS['what'] = '';
$GLOBALS['action'] = '';

// Tell everyone we are in this module
$GLOBALS['module'] = 'mailid';
$GLOBALS['output_mode'] = -1;

// Load the required file(s)
require('inc/config-global.php');

if (isInstalled()) {
	// Is the extension active?
	redirectOnUninstalledExtension('mailid');

	// Init
	$url_uid = 0; $url_bid = 0; $url_mid = 0;

	// Secure all data
	if (REQUEST_ISSET_GET('uid'))     $url_uid = bigintval(REQUEST_GET('uid'));
	if (REQUEST_ISSET_GET('mailid'))  $url_mid = bigintval(REQUEST_GET('mailid'));
	if (REQUEST_ISSET_GET('bonusid')) $url_bid = bigintval(REQUEST_GET('bonusid'));

	// 01        1        12            3    32           21    1                   22     10
	if (($url_uid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (getTotalFatalErrors() == 0)) {
		// Maybe he wants to confirm an email?
		if ($url_mid > 0) {
			// Normal-Mails
			$result = SQL_QUERY_ESC("SELECT link_type FROM `{!_MYSQL_PREFIX!}_user_links` WHERE stats_id=%s AND `userid`=%s LIMIT 1",
			array($url_mid, $url_uid), __FILE__, __LINE__);
			$type = 'mailid'; $urlId = $url_mid;
		} elseif ($url_bid > 0) {
			// Bonus-Mail
			$result = SQL_QUERY_ESC("SELECT link_type FROM `{!_MYSQL_PREFIX!}_user_links` WHERE bonus_id=%s AND `userid`=%s LIMIT 1",
			array($url_bid, $url_uid), __FILE__, __LINE__);
			$type = 'bonusid'; $urlId = $url_bid;
		} else {
			// Problem: No ID entered
			redirectToUrl('index.php');
		}

		if (SQL_NUMROWS($result) == 1) {
			// Load the entry
			list($ltype) = SQL_FETCHROW($result);

			// Clean result
			SQL_FREERESULT($result);

			switch ($ltype)
			{
				case 'NORMAL':
					// Is the stats ID valid?
					$result = SQL_QUERY_ESC("SELECT pool_id, url, subject FROM `{!_MYSQL_PREFIX!}_user_stats` WHERE `id`=%s LIMIT 1",
					array($url_mid), __FILE__, __LINE__);
					break;

				case 'BONUS':
					// Is the bonus extension active?
					redirectOnUninstalledExtension('bonus');

					// Bonus-Mails
					$result = SQL_QUERY_ESC("SELECT id, url, subject FROM `{!_MYSQL_PREFIX!}_bonus` WHERE `id`=%s LIMIT 1",
					array($url_bid), __FILE__, __LINE__);
					break;
			}

			if (SQL_NUMROWS($result) == 1) {
				// Load data
				list($pool, $URL, $title) = SQL_FETCHROW($result);

				// Free result
				SQL_FREERESULT($result);

				// Compile extra title
				$title = COMPILE_CODE($title);

				// Set it
				setExtraTitle($title);

				// Is the user's ID unlocked?
				$result = SQL_QUERY_ESC("SELECT status, gender, surname, family FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
				array($url_uid), __FILE__, __LINE__);
				if (SQL_NUMROWS($result) == 1) {
					list($status, $gender, $sname, $fname) = SQL_FETCHROW($result);
					SQL_FREERESULT($result);
					if ($status == 'CONFIRMED') {
						// User has confirmed his account so we can procede...
						switch ($ltype)
						{
							case 'NORMAL':
								$result = SQL_QUERY_ESC("SELECT payment_id FROM `{!_MYSQL_PREFIX!}_user_stats` WHERE pool_id=%s LIMIT 1",
								array(bigintval($pool)), __FILE__, __LINE__);
								if (SQL_NUMROWS($result) == 1) {
									list($pay) = SQL_FETCHROW($result);
									$time      = getPaymentPoints($pay, 'time');
									$payment   = getPaymentPoints($pay, 'payment');
									$isValid   = true;
								}

								// Free memory
								SQL_FREERESULT($result);
								break;

							case 'BONUS':
								$result = SQL_QUERY_ESC("SELECT points, time FROM `{!_MYSQL_PREFIX!}_bonus` WHERE `id`=%s LIMIT 1",
								array($url_bid), __FILE__, __LINE__);
								if (SQL_NUMROWS($result) == 1) {
									list($points, $time) = SQL_FETCHROW($result);
									$payment = '0.00000';
									$isValid = true;
								}

								// Free memory
								SQL_FREERESULT($result);
								break;
						}

						// Add header
						loadIncludeOnce('inc/header.php');

						// Was that mail a valid one?
						if ($isValid === true) {
							// If time is zero seconds we have a sponsor mail. 1 Second shall be set to avoid problems
							if (($time == '0') && ($payment > 0)) { $URL = constant('URL'); $time = '1'; }
							if (($time > 0) && (($payment > 0) || ($points > 0))) {
								// He can confirm this mail!
								// Export data into constants for the template
								define('_UID_VALUE' , $url_uid);
								define('_TYPE_VALUE', $type);
								define('_DATA_VALUE', $urlId);
								define('_URL_VALUE' , DEREFERER($URL));

								// Load template
								LOAD_TEMPLATE('mailid_frames');
							} else {
								$msg = getCode('DATA_INVALID');
							}
						} else {
							$msg = getCode('POSSIBLE_INVALID');
						}
					} else {
						$msg = getCode('ACCOUNT_LOCKED');
					}
				} else {
					SQL_FREERESULT($result);
					$msg = getCode('USER_404');
				}
			} else {
				SQL_FREERESULT($result);
				$msg = getCode('STATS_404');
			}
		} else {
			SQL_FREERESULT($result);
			$msg = getCode('ALREADY_CONFIRMED');
		}
	} else {
		// Nothing entered
		$msg = getCode('ERROR_MAILID');
	}

	// Error code is set?
	if (!empty($msg)) {
		switch (getConfig('mailid_error_redirect')) {
			case 'INDEX': // Redirect to index page
				redirectToUrl('modules.php?module=index&amp;msg='.$msg.'&amp;ext=mailid');
				break;

			case 'REJECT': // Redirect to rejection page
				redirectToConfiguredUrl('reject_url');
				break;

			default:
				DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown status %s detected in mailid_error_redirect.", getConfig('mailid_error_redirect')));
				redirectToUrl('modules.php?module=index&amp;msg=' . getCode('UNKNOWN_STATUS') . '&amp;ext=mailid');
				break;
		}
	} else {
		// Include footer
		loadIncludeOnce('inc/footer.php');
	}
} else {
	// You have to install first!
	redirectToUrl('install.php');
}

// Shutdown
shutdown();

//
?>