All, except security block, include()/require() rewritten to own LOAD_INC()/LOAD_INC_...
[mailer.git] / doubler.php
index 34c7c7380cba253ff4d136a053006bf235ab1e98..2b0d5c6dd7f262e0ca038f3cdc805fc155d9cc52 100644 (file)
@@ -46,12 +46,12 @@ $GLOBALS['refid'] = 0;
 $CSS = 0;
 
 // Load the required file(s)
-require("inc/config.php");
+require_once("inc/config.php");
 
 // Is the "doubler" extension active?
 if (!EXT_IS_ACTIVE("doubler")) {
        // Redirect to index
-       LOAD_URL("modules.php?module=index&msg=".CODE_EXTENSION_PROBLEM."&ext=doubler");
+       LOAD_URL("modules.php?module=index&msg={!CODE_EXTENSION_PROBLEM!}&ext=doubler");
 } // END - if
 
 // Is the script installed?
@@ -59,24 +59,31 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
        // Probe for referal ID
        if (!empty($_GET['refid'])) $GLOBALS['refid'] = SQL_ESCAPE($_GET['refid']);
 
-       // Probe for nickname extension and if a nickname was supplied by URL
-       $probe_nickname = ((EXT_IS_ACTIVE("nickname")) && (("".round($GLOBALS['refid'])."") != $GLOBALS['refid']));
-       if ($probe_nickname) {
-               // Nickname in URL, so load the ID
-               $result = SQL_QUERY_ESC("SELECT userid, status FROM `"._MYSQL_PREFIX."_user_data` WHERE nickname='%s' LIMIT 1",
-                array(bigintval($GLOBALS['refid'])), __FILE__, __LINE__);
-       } else {
-               // Direct userid entered
-               $result = SQL_QUERY_ESC("SELECT userid, status FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
-                array(bigintval($GLOBALS['refid'])), __FILE__, __LINE__);
-       }
+       // Only check this if refid is provided!
+       if ($GLOBALS['refid'] > 0) {
+               // Probe for nickname extension and if a nickname was supplied by URL
+               $probe_nickname = ((EXT_IS_ACTIVE("nickname")) && (("".round($GLOBALS['refid'])."") != $GLOBALS['refid']));
+
+               // Do we have nickname or userid set?
+               if ($probe_nickname) {
+                       // Nickname in URL, so load the ID
+                       $result = SQL_QUERY_ESC("SELECT userid, status FROM `{!_MYSQL_PREFIX!}_user_data` WHERE nickname='%s' LIMIT 1",
+                               array(bigintval($GLOBALS['refid'])), __FILE__, __LINE__);
+               } else {
+                       // Direct userid entered
+                       $result = SQL_QUERY_ESC("SELECT userid, status FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
+                               array(bigintval($GLOBALS['refid'])), __FILE__, __LINE__);
+               }
 
-       // Load data
-       list($rid, $status_ref) = SQL_FETCHROW($result);
-       $GLOBALS['refid'] = bigintval($rid);
+               // Load data
+               list($rid, $status_ref) = SQL_FETCHROW($result);
+               $GLOBALS['refid'] = bigintval($rid);
+
+               // Free memory
+               SQL_FREERESULT($result);
+       } // END - if
 
-       // Free memory
-       SQL_FREERESULT($result);
+       // Init userid
        $uid = 0;
 
        // If no account was found set default refid and status to CONFIRMED
@@ -96,12 +103,12 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
                        $probe_nickname = ((EXT_IS_ACTIVE("nickname")) && (("".round($_POST['userid'])."") != $_POST['userid']));
                        if ($probe_nickname) {
                                // Nickname in URL, so load the ID
-                               $result = SQL_QUERY_ESC("SELECT userid, status, password FROM `"._MYSQL_PREFIX."_user_data` WHERE nickname='%s' LIMIT 1",
-                                array($_POST['userid']), __FILE__, __LINE__);
+                               $result = SQL_QUERY_ESC("SELECT userid, status, password FROM `{!_MYSQL_PREFIX!}_user_data` WHERE nickname='%s' LIMIT 1",
+                                       array($_POST['userid']), __FILE__, __LINE__);
                        } else {
                                // Direct userid entered
-                               $result = SQL_QUERY_ESC("SELECT userid, status, password FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
-                                array(bigintval($_POST['userid'])), __FILE__, __LINE__);
+                               $result = SQL_QUERY_ESC("SELECT userid, status, password FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
+                                       array(bigintval($_POST['userid'])), __FILE__, __LINE__);
                        }
 
                        // Load data
@@ -126,12 +133,11 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
                                $points = GET_TOTAL_DATA($uid, "user_points", "points") - GET_TOTAL_DATA($uid, "user_data", "used_points");
 
                                // So let's continue with probing his points amount
-                               if (($points - getConfig('doubler_left') - $_POST['points'] * getConfig('doubler_charge')) >= 0)
-                               {
+                               if (($points - getConfig('doubler_left') - $_POST['points'] * getConfig('doubler_charge')) >= 0) 
                                        // Enough points are left so let's continue with the doubling process
                                        // Create doubling "account" width *DOUBLED* points
-                                       $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_doubler (userid, refid, points, remote_ip, timemark, completed, is_ref) VALUES ('%s','%s','%s','".GET_REMOTE_ADDR()."', UNIX_TIMESTAMP(), 'N','N')",
-                                        array($uid, bigintval($GLOBALS['refid']), bigintval($_POST['points'] * 2)), __FILE__, __LINE__);
+                                       SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_doubler` (userid, refid, points, remote_ip, timemark, completed, is_ref) VALUES ('%s','%s','%s','".GET_REMOTE_ADDR()."', UNIX_TIMESTAMP(), 'N','N')",
+                                               array($uid, bigintval($GLOBALS['refid']), bigintval($_POST['points'] * 2)), __FILE__, __LINE__);
 
                                        // Subtract entered points
                                        SUB_POINTS("doubler", $uid, $_POST['points']);
@@ -139,58 +145,61 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
                                        // Add points to "total payed" including charge
                                        $points = $_POST['points'] - $_POST['points'] * getConfig('doubler_charge');
                                        UPDATE_CONFIG("doubler_points", $points, "+");
-                                       getConfig('doubler_points') += $points;
+                                       incrementConfigEntry('doubler_points', $points);
 
                                        // Add second line for the referal but only when uid != refid
                                        if (($GLOBALS['refid'] > 0) && ($GLOBALS['refid'] != $uid)) {
                                                // Okay add a refid line and apply refid percents
-                                               $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_doubler (userid,refid,points,remote_ip,timemark,completed,is_ref) VALUES ('%s',0,'%s','".GET_REMOTE_ADDR()."',UNIX_TIMESTAMP(),'N','Y')",
-                                                       array(bigintval($GLOBALS['refid']), bigintval($_POST['points'] * 2 * getConfig('doubler_ref'))), __FILE__, __LINE__);
+                                               SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_doubler` (userid, refid, points, remote_ip, timemark, completed, is_ref) VALUES ('%s',0,'%s','".GET_REMOTE_ADDR()."',UNIX_TIMESTAMP(),'N','Y')",
+                                                       array(
+                                                               bigintval($GLOBALS['refid']),
+                                                               bigintval($_POST['points'] * 2 * getConfig('doubler_ref'))
+                                                       ), __FILE__, __LINE__);
 
-                                               // And that's why we dont't want to you more than one referal level of doubler-points. ^^^
+                                               // And that's why we don't want to you more than one referal level of doubler-points. ^^^
                                        } // END - if
 
                                        // Update usage counter
                                        UPDATE_CONFIG("doubler_counter", 1, "+");
-                                       $_CONFIG['doubler_counter']++;
+                                       incrementCondigEntry('doubler_counter');
 
                                        // Set constant
                                        define('__DOUBLER_MSG', LOAD_TEMPLATE("doubler_reflink", true, $_POST['userid']));
                                } else {
                                        // Not enougth points left
-                                       define('__ERROR_MSG', DOUBLER_FORM_NO_POINTS_LEFT);
+                                       define('__ERROR_MSG', getMessage('DOUBLER_FORM_NO_POINTS_LEFT'));
                                }
                        } elseif ($status == "CONFIRMED") {
                                // Account is unconfirmed!
-                               define('__ERROR_MSG', DOUBLER_FORM_WRONG_PASS);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_WRONG_PASS'));
                        } elseif ($status == "UNCONFIRMED") {
                                // Account is unconfirmed!
-                               define('__ERROR_MSG', DOUBLER_FORM_STATUS_UNCONFIRMED);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_STATUS_UNCONFIRMED'));
                        } elseif ($status == "LOCKED") {
                                // Account is locked by admin / holiday!
-                               define('__ERROR_MSG', DOUBLER_FORM_STATUS_LOCKED);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_STATUS_LOCKED'));
                        } elseif ($_POST['points'] < getConfig('doubler_min')) {
                                // Not enougth points entered
-                               define('__ERROR_MSG', DOUBLER_FORM_POINTS_MIN);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_POINTS_MIN'));
                        } elseif ($_POST['points'] > getConfig('doubler_max')) {
                                // Too much points entered
-                               define('__ERROR_MSG', DOUBLER_FORM_POINTS_MAX);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_POINTS_MAX'));
                        } elseif ($probe_nickname) {
                                // Cannot resolv nickname -> userid
-                               define('__ERROR_MSG', DOUBLER_FORM_404_NICKNAME);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_404_NICKNAME'));
                        } else {
                                // Wrong password or account not found
-                               define('__ERROR_MSG', DOUBLER_FORM_404_MEMBER);
+                               define('__ERROR_MSG', getMessage('DOUBLER_FORM_404_MEMBER'));
                        }
                } elseif (empty($_POST['userid'])) {
                        // Login not entered
-                       define('__ERROR_MSG', DOUBLER_FORM_404_LOGIN);
+                       define('__ERROR_MSG', getMessage('DOUBLER_FORM_404_LOGIN'));
                } elseif (empty($_POST['pass'])) {
                        // Password not entered
-                       define('__ERROR_MSG', DOUBLER_FORM_404_PASSWORD);
+                       define('__ERROR_MSG', getMessage('DOUBLER_FORM_404_PASSWORD'));
                } elseif (empty($_POST['points'])) {
                        // points not entered
-                       define('__ERROR_MSG', DOUBLER_FORM_404_POINTS);
+                       define('__ERROR_MSG', getMessage('DOUBLER_FORM_404_POINTS'));
                }
        }
 
@@ -199,10 +208,10 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
        if (!defined('__ERROR_MSG'))   define('__ERROR_MSG'  , "");
 
        // Shall I check for points immediately?
-       if (getConfig('doubler_send_mode') == "DIRECT") require(PATH."inc/doubler_send.php");
+       if (getConfig('doubler_send_mode') == "DIRECT") LOAD_INC("inc/doubler_send.php");
 
        // Output header
-       include(PATH."inc/header.php");
+       LOAD_INC("inc/header.php");
 
        // Banner in text
        define('__DOUBLER_BANNER', LOAD_TEMPLATE("doubler_banner", true));
@@ -229,21 +238,21 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
        // Text "Enter login"
        if (EXT_IS_ACTIVE("nickname")) {
                // Choose login/nickname
-               define('DOUBLER_ENTER_LOGIN', GUEST_ENTER_LOGIN_NICKNAME);
+               define('DOUBLER_ENTER_LOGIN', getMessage('GUEST_ENTER_LOGIN_NICKNAME'));
        } else {
                // Simple login ID
-               define('DOUBLER_ENTER_LOGIN', GUEST_ENTER_LOGIN);
+               define('DOUBLER_ENTER_LOGIN', getMessage('GUEST_ENTER_LOGIN'));
        }
 
        // Which mail-send-mode did the admin setup?
        switch (getConfig('doubler_send_mode'))
        {
        case "DIRECT":
-               define('DOUBLER_PAYOUT_TIME', DOUBLER_PAYOUT_TIME_DIRECT);
+               define('DOUBLER_PAYOUT_TIME', getMessage('DOUBLER_PAYOUT_TIME_DIRECT'));
                break;
 
        case "RESET":
-               define('DOUBLER_PAYOUT_TIME', DOUBLER_PAYOUT_TIME_RESET);
+               define('DOUBLER_PAYOUT_TIME', getMessage('DOUBLER_PAYOUT_TIME_RESET'));
                break;
        }
 
@@ -263,9 +272,9 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
        LOAD_TEMPLATE("doubler_index");
 
        // Output footer
-       include(PATH."inc/footer.php");
+       LOAD_INC("inc/footer.php");
 } else {
-       // You have to configure first!
+       // You have to install first!
        LOAD_URL("install.php");
 }