- obsolete templates/scripts removed
[mailer.git] / 0.2.1 / mailid_top.php
index a653e8e42799e739812d46c7aa2d4c8cc05ae718..8338d98aaeb9329d8fe82adc6a32a88769c2fac3 100644 (file)
@@ -37,8 +37,8 @@ require_once("inc/libs/security_functions.php");
 // Init "action" and "what"\r
 global $what, $action;\r
 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";\r
-if (!empty($_GET['action'])) $GLOBALS['action'] = trim(strip_tags($_GET['action']));\r
-if (!empty($_GET['what'])) $GLOBALS['what'] = trim(strip_tags($_GET['what']));\r
+if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']);\r
+if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);\r
 \r
 // Tell everyone we are in this module\r
 $GLOBALS['module'] = "mailid";  $CSS = "0";\r
@@ -214,7 +214,7 @@ if (defined('mxchange_installed') && (mxchange_installed))
                                                                        if (bigintval($_POST['gfx_check']) == $img_code)\r
                                                                        {\r
                                                                                // Right code entered add points and remove entry\r
-                                                                               if (($ref_pay > 0) && ($CONFIG['direct_pay'] == "N"))\r
+                                                                               if (($ref_pay > 0) && ($CONFIG['allow_direct_pay'] == "N"))\r
                                                                                {\r
                                                                                        // Don't add points over the referral system\r
                                                                                        $locked = true;\r