also prevent it in .htacces. You may want to add this to one of your files in /etc...
[mailer.git] / doubler.php
index 5fd52022b57b6bb2268b91ea14f27ac76513e772..c1b3b91a6ede2251280abda4083589d942a6fec9 100644 (file)
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 02/13/2005 *
- * ===============                              Last change: 02/13/2005 *
+ * Mailer v0.2.1-FINAL                                Start: 02/13/2005 *
+ * ===================                          Last change: 02/13/2005 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : doubler.php                                      *
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Punkteverdoppler                                 *
  * -------------------------------------------------------------------- *
- * $Revision::                                                        $ *
- * $Date::                                                            $ *
- * $Tag:: 0.2.1-FINAL                                                 $ *
- * $Author::                                                          $ *
- * Needs to be in all Files and every File needs "svn propset           *
- * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
- * -------------------------------------------------------------------- *
  * Copyright (c) 2003 - 2009 by Roland Haeder                           *
- * For more information visit: http://www.mxchange.org                  *
+ * Copyright (c) 2009 - 2016 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
 require('inc/libs/security_functions.php');
 
 // Init start time
-$GLOBALS['startTime'] = microtime(true);
+$GLOBALS['__start_time'] = microtime(TRUE);
 
-// Set module
-$GLOBALS['module'] = 'doubler';
-$GLOBALS['output_mode'] = 0;
+// Set module and output mode
+$GLOBALS['__module']      = 'doubler';
+$GLOBALS['__output_mode'] = '0';
 
-// Load the required file(s)
-require('inc/config-global.php');
+// Initialize application
+require('inc/init.php');
 
 // Set content type
 setContentType('text/html');
@@ -55,39 +49,6 @@ setContentType('text/html');
 // Is the 'doubler' extension active?
 redirectOnUninstalledExtension('doubler');
 
-// Probe for referal ID
-if (isGetRequestElementSet('refid')) $GLOBALS['refid'] = getRequestElement('refid');
-
-// Only check this if refid is provided!
-if (determineReferalId() > 0) {
-       // Do we have nickname or userid set?
-       if (isNicknameUsed(determineReferalId())) {
-               // Nickname in URL, so load the ID
-               $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `nickname`='%s' LIMIT 1",
-                       array(determineReferalId()), __FILE__, __LINE__);
-       } else {
-               // Direct userid entered
-               $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `userid`=%s LIMIT 1",
-                       array(determineReferalId()), __FILE__, __LINE__);
-       }
-
-       // Load data
-       list($rid, $status_ref) = SQL_FETCHROW($result);
-       $GLOBALS['refid'] = bigintval($rid);
-
-       // Free memory
-       SQL_FREERESULT($result);
-} // END - if
-
-// Init userid
-$userid = 0;
-
-// If no account was found set default refid and status to CONFIRMED
-if (empty($GLOBALS['refid'])) {
-       $GLOBALS['refid'] = getConfig('def_refid');
-       $status = 'CONFIRMED';
-} // END - if
-
 // Init content array
 $content = array(
        'message' => '',
@@ -96,166 +57,151 @@ $content = array(
 // Begin with doubler script...
 if (isFormSent()) {
        // Secure points (so only integer/double values are allowed
-       setRequestPostElement('points', bigintval(postRequestElement('points')));
+       setPostRequestElement('points', bigintval(postRequestElement('points')));
 
        // Begin with doubling process
-       if ((isPostRequestElementSet('userid')) && (isPostRequestElementSet('pass')) && (isPostRequestElementSet('points'))) {
+       if ((isPostRequestElementSet('userid')) && (isPostRequestElementSet('password')) && (isPostRequestElementSet('points'))) {
                // Probe for nickname extension and if a nickname was entered
-               if (isNickNameUsed(postRequestElement('userid'))) {
-                       // Nickname in URL, so load the ID
-                       $result = SQL_QUERY_ESC("SELECT `userid`, `status`, `password` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `nickname`='%s' LIMIT 1",
-                               array(postRequestElement('userid')), __FILE__, __LINE__);
+               if (isNicknameUsed(postRequestElement('userid'))) {
+                       // Nickname in URL, so load the id
+                       fetchUserData(postRequestElement('userid'), 'nickname');
                } else {
                        // Direct userid entered
-                       $result = SQL_QUERY_ESC("SELECT `userid`, `status, `password` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `userid`=%s LIMIT 1",
-                               array(bigintval(postRequestElement('userid'))), __FILE__, __LINE__);
+                       fetchUserData(postRequestElement('userid'));
                }
 
-               // Load data
-               list($userid, $status, $password) = SQL_FETCHROW($result);
-               $userid = bigintval($userid);
-
-               // Free result
-               SQL_FREERESULT($result);
+               // Is the data valid?
+               if (!isValidUserData()) {
+                       // Output message that the userid is not okay
+                       displayMessage('{--DOUBLER_USERID_INVALID--}');
+               } // END - if
 
                // Remove any dots and unwanted chars from the points
-               setRequestPostElement('points', bigintval(round(convertCommaToDot(postRequestElement('points')))));
+               setPostRequestElement('points', bigintval(round(convertCommaToDot(postRequestElement('points')))));
 
                // Probe for enough points
-               $probe_points = ((postRequestElement('points') >= getConfig('doubler_min')) && (postRequestElement('points') <= getConfig('doubler_max')));
+               $probe_points = ((postRequestElement('points') >= getDoublerMin()) && (postRequestElement('points') <= getDoublerMax()));
 
                // Check all together
-               if ((!empty($userid)) && ($password == generateHash(postRequestElement('pass'), substr($password, 0, -40))) && ($status == 'CONFIRMED') && ($probe_points)) {
+               if ((isValidUserData()) && (getUserData('password') == generateHash(postRequestElement('password'), substr(getUserData('password'), 0, -40))) && (getUserData('status') == 'CONFIRMED') && ($probe_points)) {
                        // Nickname resolved to a unique userid or direct userid entered by the member
-                       $GLOBALS['doubler_userid'] = $userid;
+                       $GLOBALS['local_doubler_userid'] = getUserData('userid');
 
                        // Calulcate points
-                       $points = countSumTotalData($userid, 'user_points', 'points') - countSumTotalData($userid, 'user_data', 'used_points');
+                       $points = getTotalPoints(getUserData('userid'));
 
                        // So let's continue with probing his points amount
-                       if (($points - getConfig('doubler_left') - postRequestElement('points') * getConfig('doubler_charge')) >= 0) {
+                       if (($points - getConfig('doubler_left') - postRequestElement('points') * getDoublerCharge() / 100) >= 0) {
                                // Enough points are left so let's continue with the doubling process
-                               // Create doubling "account" width *DOUBLED* points
-                               SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_doubler` (`userid`, `refid`, `points`, `remote_ip`, `timemark`, `completed`, `is_ref`) VALUES ('%s','%s','%s','".detectRemoteAddr()."', UNIX_TIMESTAMP(), 'N','N')",
-                                       array($userid, determineReferalId(), bigintval(postRequestElement('points') * 2)), __FILE__, __LINE__);
-
-                               // Subtract entered points
-                               subtractPoints('doubler', $userid, postRequestElement('points'));
+                               // Create doubling "account" with *DOUBLED* points
+                               sqlQueryEscaped("INSERT INTO `{?_MYSQL_PREFIX?}_doubler` (`userid`, `refid`, `points`, `remote_ip`, `timemark`, `completed`, `is_ref`) VALUES (%s,%s,%s,'%s', UNIX_TIMESTAMP(), 'N','N')",
+                                       array(
+                                               getUserData('userid'),
+                                               convertZeroToNull(determineReferralId()),
+                                               bigintval(postRequestElement('points') * 2),
+                                               determineRealRemoteAddress()
+                                       ), __FILE__, __LINE__);
+
+                               // Subtract entered points and ignore return status
+                               subtractPoints('doubler', getUserData('userid'), postRequestElement('points'));
 
                                // Add points to "total payed" including charge
-                               $points = postRequestElement('points') - postRequestElement('points') * getConfig('doubler_charge');
+                               $points = postRequestElement('points') - postRequestElement('points') * getDoublerCharge() / 100;
                                updateConfiguration('doubler_points', $points, '+');
                                incrementConfigEntry('doubler_points', $points);
 
-                               // Add second line for the referal but only when userid != refid
-                               if ((determineReferalId() > 0) && (determineReferalId() != $userid)) {
+                               // Add second line for the referral but only when userid != refid
+                               if ((isValidId(determineReferralId())) && (determineReferralId() != getUserData('userid'))) {
                                        // Okay add a refid line and apply refid percents
-                                       SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_doubler` (`userid`, `refid`, `points`, `remote_ip`, `timemark`, `completed`, `is_ref`) VALUES ('%s',0,'%s','".detectRemoteAddr()."',UNIX_TIMESTAMP(),'N','Y')",
+                                       sqlQueryEscaped("INSERT INTO `{?_MYSQL_PREFIX?}_doubler` (`userid`, `refid`, `points`, `remote_ip`, `timemark`, `completed`, `is_ref`) VALUES (%s,0,%s,'%s',UNIX_TIMESTAMP(),'N','Y')",
                                                array(
-                                                       determineReferalId(),
-                                                       bigintval(postRequestElement('points') * 2 * getConfig('doubler_ref'))
+                                                       convertZeroToNull(determineReferralId()),
+                                                       (postRequestElement('points') * 2 * getDoublerRef() / 100),
+                                                       determineRealRemoteAddress()
                                                ), __FILE__, __LINE__);
 
-                                       // And that's why we don't want to you more than one referal level of doubler-points. ^^^
+                                       // And that's why we don't want to you more than one referral level of doubler-points. ^^^
                                } // END - if
 
                                // Update usage counter
                                updateConfiguration('doubler_counter', 1, '+');
 
                                // Set constant
-                               $content['message'] = loadTemplate('doubler_reflink', true, postRequestElement('userid'));
+                               $content['message'] = loadTemplate('doubler_reflink', TRUE, postRequestElement('userid'));
                        } else {
                                // Not enougth points left
-                               $content['message'] = getMessage('DOUBLER_FORM_NO_POINTS_LEFT');
+                               $content['message'] = '{--DOUBLER_FORM_NO_POINTS_LEFT--}';
                        }
-               } elseif ($status == 'CONFIRMED') {
+               } elseif (getUserData('status') == 'CONFIRMED') {
                        // Account is unconfirmed!
-                       $content['message'] = getMessage('DOUBLER_FORM_WRONG_PASS');
-               } elseif ($status == 'UNCONFIRMED') {
+                       $content['message'] = '{--DOUBLER_FORM_WRONG_PASS--}';
+               } elseif (getUserData('status') == 'UNCONFIRMED') {
                        // Account is unconfirmed!
-                       $content['message'] = getMessage('DOUBLER_FORM_STATUS_UNCONFIRMED');
-               } elseif ($status == 'LOCKED') {
+                       $content['message'] = '{--DOUBLER_FORM_STATUS_UNCONFIRMED--}';
+               } elseif (getUserData('status') == 'LOCKED') {
                        // Account is locked by admin / holiday!
-                       $content['message'] = getMessage('DOUBLER_FORM_STATUS_LOCKED');
-               } elseif (postRequestElement('points') < getConfig('doubler_min')) {
+                       $content['message'] = '{--DOUBLER_FORM_STATUS_LOCKED--}';
+               } elseif (postRequestElement('points') < getDoublerMin()) {
                        // Not enougth points entered
-                       $content['message'] = getMessage('DOUBLER_FORM_POINTS_MIN');
-               } elseif (postRequestElement('points') > getConfig('doubler_max')) {
+                       $content['message'] = '{--DOUBLER_FORM_POINTS_MIN--}';
+               } elseif (postRequestElement('points') > getDoublerMax()) {
                        // Too much points entered
-                       $content['message'] = getMessage('DOUBLER_FORM_POINTS_MAX');
-               } elseif (isNickNameUsed(postRequestElement('userid'))) {
+                       $content['message'] = '{--DOUBLER_FORM_POINTS_MAX--}';
+               } elseif (isNicknameUsed(postRequestElement('userid'))) {
                        // Cannot resolv nickname -> userid
-                       $content['message'] = getMessage('DOUBLER_FORM_404_NICKNAME');
+                       $content['message'] = '{--DOUBLER_FORM_404_NICKNAME--}';
                } else {
                        // Wrong password or account not found
-                       $content['message'] = getMessage('DOUBLER_FORM_404_MEMBER');
+                       $content['message'] = '{--DOUBLER_FORM_404_MEMBER--}';
                }
        } elseif (!isPostRequestElementSet('userid')) {
                // Login not entered
-               $content['message'] = getMessage('DOUBLER_FORM_404_LOGIN');
-       } elseif (!isPostRequestElementSet('pass')) {
+               $content['message'] = '{--DOUBLER_FORM_404_LOGIN--}';
+       } elseif (!isPostRequestElementSet('password')) {
                // Password not entered
-               $content['message'] = getMessage('DOUBLER_FORM_404_PASSWORD');
+               $content['message'] = '{--DOUBLER_FORM_404_PASSWORD--}';
        } elseif (!isPostRequestElementSet('points')) {
                // points not entered
-               $content['message'] = getMessage('DOUBLER_FORM_404_POINTS');
+               $content['message'] = '{--DOUBLER_FORM_404_POINTS--}';
        }
-}
+} // END - if (isFormSet())
 
 // Shall I check for points immediately?
-if (getConfig('doubler_send_mode') == 'DIRECT') loadInclude('inc/mails/doubler_mails.php');
+if (getDoublerSendMode() == 'DIRECT') {
+       loadInclude('inc/mails/doubler_mails.php');
+} // END - if
 
 // Output header
-loadIncludeOnce('inc/header.php');
-
-// Banner in text
-$content['banner'] = loadTemplate('doubler_banner', true);
+loadPageHeader();
 
-// Load header/footer templates
-$content['header'] = loadTemplate('doubler_header', true);
-$content['footer'] = loadTemplate('doubler_footer', true);
-
-if (!empty($userid)) {
+if (isValidUserData()) {
        // Transfer userid/nickname to constant
-       $content['refid'] = $userid;
+       $content['refid'] = getUserData('userid');
 } else {
        // Transfer userid/nickname to constant
-       $content['refid'] = determineReferalId();
+       $content['refid'] = determineReferralId();
 }
 
-// Percent values etc.
-$content['charge'] = translateComma(getConfig('doubler_charge') * 100);
-$content['ref']    = translateComma(getConfig('doubler_ref') * 100);
-$content['total']  = translateComma(getConfig('doubler_points'));
-$content['min']    = translateComma(getConfig('doubler_min'));
-$content['max']    = translateComma(getConfig('doubler_max'));
-
 // Text "Enter login"
 if (isExtensionActive('nickname')) {
        // Choose login/nickname
-       $content['enter_login'] = getMessage('GUEST_ENTER_LOGIN_NICKNAME');
+       $content['enter_login'] = '{--GUEST_ENTER_LOGIN_NICKNAME--}';
 } else {
-       // Simple login ID
-       $content['enter_login'] = getMessage('GUEST_ENTER_LOGIN');
+       // Simple login id
+       $content['enter_login'] = '{--GUEST_ENTER_LOGIN--}';
 }
 
 // Which mail-send-mode did the admin setup?
-$content['payout_time'] = getMessage('DOUBLER_PAYOUT_TIME_' . getConfig('doubler_send_mode'));
+$content['payout_time'] = '{--DOUBLER_PAYOUT_TIME_' . getDoublerSendMode() . '--}';
 
 // Generate table with already payed out doubles
 $content['payout_history'] = generateDoublerTable(0, 'Y', 'N', 'DESC');
 
-// Generate timemark
-$content['timeout_mark'] = createFancyTime(getConfig('doubler_timeout'));
-
-// Points left to doubler
-$content['left'] = translateComma(DOUBLER_GET_TOTAL_POINTS_LEFT());
-
 // Output neccessary form for this
-loadTemplate('doubler_index', false, $content);
+loadTemplate('doubler_index', FALSE, $content);
 
 // Output footer
-loadIncludeOnce('inc/footer.php');
+loadPageFooter();
 
 // [EOF]
 ?>