]> git.mxchange.org Git - mailer.git/blobdiff - inc/libs/sponsor_functions.php
Added update_year.sh (still not fully flexible) and updated all years with it.
[mailer.git] / inc / libs / sponsor_functions.php
index ee59586f50d798230b1e80d1961af8d6f1b4672d..3de5472e7e07d6376be033ff00376408a0d100be 100644 (file)
  * $Date::                                                            $ *
  * $Tag:: 0.2.1-FINAL                                                 $ *
  * $Author::                                                          $ *
- * Needs to be in all Files and every File needs "svn propset           *
- * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
  * Copyright (c) 2003 - 2009 by Roland Haeder                           *
- * Copyright (c) 2009, 2010 by Mailer Developer Team                    *
- * For more information visit: http://www.mxchange.org                  *
+ * Copyright (c) 2009 - 2015 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
 // Some security stuff...
 if (!defined('__SECURITY')) {
        die();
-}
+} // END - if
 
 //
-function handlSponsorRequest (&$postData, $update=false, $messageArray=array(), $RET_STATUS=false) {
+function handleSponsorRequest ($postData, $update=false, $messageArray = array(), $RET_STATUS=false) {
        // Init a lot variables
-       $SAVE = true;
-       $UPDATE = false;
-       $skip = false;
-       $ALREADY = false;
-       $ret = "unused";
+       $SAVE = TRUE;
+       $UPDATE = FALSE;
+       $skip = FALSE;
+       $ALREADY = FALSE;
+       $ret = 'unused';
 
        // Skip these entries
        $SKIPPED = array(
@@ -66,62 +64,65 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
                foreach ($postData as $k => $v) {
                        if (!(array_search($k, $SKIPPED) > -1)) {
                                // Check only posted input entries not the submit button
-                               switch ($k)
-                               {
+                               switch ($k) {
                                        case 'email':
-                                               $ALREADY = false;
+                                               $ALREADY = FALSE;
                                                if (!isEmailValid($v)) {
                                                        // Email address is not valid
-                                                       $SAVE = false;
+                                                       $SAVE = FALSE;
                                                } else {
-                                                       // Do we want to add a new sponsor or update his data?
-                                                       $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_sponsor_data` WHERE email='%s' LIMIT 1",
-                                                       array($postData['email']), __FUNCTION__, __LINE__);
+                                                       // Add a new sponsor or update his data?
+                                                       $result = sqlQueryEscaped("SELECT `id` FROM `{?_MYSQL_PREFIX?}_sponsor_data` WHERE email='%s' LIMIT 1",
+                                                               array($postData['email']), __FUNCTION__, __LINE__);
 
                                                        // Is a sponsor alread in the db?
-                                                       if (SQL_NUMROWS($result) == 1) {
+                                                       if (sqlNumRows($result) == 1) {
                                                                // Yes, he is!
                                                                if ((getWhat() == 'add_sponsor') || ($update)) {
-                                                                       // Already found!
-                                                                       $ALREADY = true;
+                                                                       // Already found
+                                                                       $ALREADY = TRUE;
                                                                } else {
                                                                        // Update his data
-                                                                       $UPDATE = true;
+                                                                       $UPDATE = TRUE;
                                                                }
                                                        }
 
                                                        // Free memory
-                                                       SQL_FREERESULT($result);
+                                                       sqlFreeResult($result);
                                                }
                                                break;
 
-                                       case 'pass1':
+                                       case 'password1':
                                                $k = ''; $v = '';
                                                break;
 
-                                       case 'pass2':
+                                       case 'password2':
                                                $k = 'password'; $v = md5($v);
                                                break;
 
                                        case 'url':
-                                               if (!isUrlValid($v)) $SAVE = false;
+                                               if (!isUrlValid($v)) {
+                                                       // Don't save the URL
+                                                       $SAVE = FALSE;
+                                               } // END - if
                                                break;
 
                                        default:
                                                // Test if there is are time selections
-                                               convertSelectionsToTimestamp($postData, $DATA, $k, $skip);
+                                               convertSelectionsToEpocheTime($postData, $DATA, $k, $skip);
                                                break;
-                               }
+                               } // END - switch
 
-                               if ((!empty($k)) && ($skip == false)) {
+                               if ((!empty($k)) && ($skip == FALSE)) {
                                        // Add data
-                                       $DATA['keys'][] = $k; $DATA['values'][] = $v;
-                               }
-                       }
-               }
+                                       array_push($DATA['keys']  , $k);
+                                       array_push($DATA['values'], $v);
+                               } // END - if
+                       } // END - if
+               } // END - foreach
 
                // Save sponsor?
-               if ($SAVE === true) {
+               if ($SAVE === TRUE) {
                        // Default is no force even when a guest want to abuse this force switch
                        if ((empty($postData['force'])) || (!isAdmin())) $postData['force'] = '0';
 
@@ -134,50 +135,61 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
                                $sql = "UPDATE `{?_MYSQL_PREFIX?}_sponsor_data` SET ";
                                foreach ($DATA['keys'] as $k => $v) {
                                        $sql .= $v."='%s', ";
-                               }
+                               } // END - foreach
 
                                // Remove last ", " from SQL string
-                               $sql = substr($sql, 0, -2)." WHERE `id`='%s' LIMIT 1";
-                               $DATA['values'][] = bigintval(getRequestParameter('id'));
+                               $sql = substr($sql, 0, -2)." WHERE `id`=%s LIMIT 1";
+                               array_push($DATA['values'], bigintval(getRequestElement('id')));
 
                                // Generate message
-                               $message = getMessageFromIndexedArray(getMessage('ADMIN_SPONSOR_UPDATED'), 'updated', $messageArray);
-                               $ret = "updated";
-                       } elseif (($ALREADY === false) || (($postData['force'] == 1) && (isAdmin()))) {
+                               $message = getMessageFromIndexedArray('{--ADMIN_SPONSOR_UPDATED--}', 'updated', $messageArray);
+                               $ret = 'updated';
+                       } elseif (($ALREADY === FALSE) || (($postData['force'] == 1) && (isAdmin()))) {
                                // Add new sponsor, first add more data
-                               $DATA['keys'][] = 'sponsor_created'; $DATA['values'][] = time();
-                               $DATA['keys'][] = 'status';
-                               if (($update === true) && (isAdmin()) && (getWhat() == 'add_sponsor')) {
+                               array_push($DATA['keys'], 'status');
+                               if (($update === TRUE) && (isAdmin()) && (getWhat() == 'add_sponsor')) {
                                        // Only allowed for admin
-                                       $DATA['values'][] = 'PENDING';
+                                       array_push($DATA['values'], 'PENDING');
+
+                                       // Add remote IP address as well
+                                       array_push($DATA['keys'], 'remote_addr');
+                                       array_push($DATA['values'], detectRemoteAddr());
                                } else {
                                        // Guest area
-                                       $DATA['values'][] = 'UNCONFIRMED';
+                                       array_push($DATA['values'], 'UNCONFIRMED');
 
                                        // Generate hash code
-                                       $DATA['keys'][] = 'hash';
-                                       $DATA['values'][] = md5(session_id().':'.$postData['email'].':'.detectRemoteAddr().':'.detectUserAgent().':'.time());
-                                       $DATA['keys'][] = 'remote_addr';
-                                       $DATA['values'][] = detectRemoteAddr();
+                                       array_push($DATA['keys'], 'hash');
+                                       // @TODO Rewrite this to API function
+                                       array_push($DATA['values'], md5(session_id() . getEncryptSeparator() . $postData['email'] . getEncryptSeparator() . detectRemoteAddr() . getEncryptSeparator() . detectUserAgent() . getEncryptSeparator() . time()));
+                                       array_push($DATA['keys'], 'remote_addr');
+                                       array_push($DATA['values'], detectRemoteAddr());
                                }
 
+                               // Search the entry
+                               $key = array_search('force', $DATA['keys']);
+
+                               // Remove force from both arrays
+                               unset($DATA['keys'][$key]);
+                               unset($DATA['values'][$key]);
+
                                // Implode all data into strings
-                               $KEYS   = implode("`, `"  , $DATA['keys']);
-                               $valueS = str_repeat("%s', '", count($DATA['values']) - 1);
+                               $keyArray   = implode('`, `'  , $DATA['keys']);
+                               $valueArray = str_repeat("%s', '", count($DATA['values']) - 1);
 
                                // Generate string
-                               $sql = "INSERT INTO `{?_MYSQL_PREFIX?}_sponsor_data` (`".$KEYS."`) VALUES ('".$valueS."%s')";
+                               $sql = 'INSERT INTO `{?_MYSQL_PREFIX?}_sponsor_data` (`' . $keyArray . "`) VALUES ('" . $valueArray . "%s')";
 
                                // Generate message
-                               $message = getMessageFromIndexedArray(getMessage('ADMIN_SPONSOR_ADDED'), "added", $messageArray);
+                               $message = getMessageFromIndexedArray('{--ADMIN_SPONSOR_ADDED--}', 'added', $messageArray);
                                $ret = 'added';
-                       } elseif (($update === true) && (isAdmin())) {
+                       } elseif (($update === TRUE) && (isAdmin())) {
                                // Add all data as hidden data
                                $OUT = '';
                                foreach ($postData as $k => $v) {
                                        // Do not add 'force' !
                                        if ($k != 'force') {
-                                               $OUT .= '<input type="hidden" name="' . secureString($k) . '" value="' . SQL_ESCAPE($v) . '" />';
+                                               $OUT .= '<input type="hidden" name="' . secureString($k) . '" value="' . sqlEscapeString($v) . '" />';
                                        } // END - if
                                } // END - foreach
 
@@ -186,54 +198,52 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
                                $content['email']  = $postData['email'];
 
                                // Ask for adding a sponsor with same email address
-                               loadTemplate('admin_add_sponsor_already', false, $content);
+                               loadTemplate('admin_add_sponsor_already', FALSE, $content);
                                return;
                        } else {
                                // Already added!
-                               $message = getMaskedMessage('SPONSOR_ALREADY_FOUND', $postData['email']);
+                               $message = '{%message,SPONSOR_ALREADY_FOUND=' . $postData['email'] . '%}';
                                $ret = 'already';
                        }
 
                        if (!empty($sql)) {
                                // Run SQL command
-                               $result = SQL_QUERY_ESC($sql, $DATA['values'], __FUNCTION__, __LINE__);
-                       } // END - if
-
-                       // Output message
-                       if (($update === true) && (isAdmin())) {
-                               loadTemplate('admin_settings_saved', false, $message);
+                               $result = sqlQueryEscaped($sql, $DATA['values'], __FUNCTION__, __LINE__);
                        } // END - if
                } else {
-                       // Error found!
-                       $message = getMessageFromIndexedArray(getMessage('SPONSOR_DATA_NOT_SAVED'), 'failed', $messageArray);
-                       loadTemplate('admin_settings_saved', false, $message);
+                       // Error detected
+                       $message = getMessageFromIndexedArray('{--SPONSOR_DATA_NOT_SAVED--}', 'failed', $messageArray);
+                       displayMessage($message);
                }
 
-               // Shall we return the status?
-               if ($RET_STATUS === true) return $ret;
+       // Always return the status
+       return $ret;
 }
 
-//
-function sponsorTranslateUserStatus ($status) {
+// Translate the account status
+function translateSponsorStatus ($status) {
        // Construct constant name
-       $constantName = sprintf("ACCOUNT_%s", $status);
+       $constantName = sprintf("ACCOUNT_STATUS_%s", $status);
 
        // Is the constant there?
-       if (defined($constantName)) {
+       if (isMessageIdValid($constantName)) {
                // Then use it
-               $ret = constant($constantName);
+               $ret = getMessage($constantName);
        } else {
-               // Not found!
+               // Not found
+               //* DEBUG: */ reportBug(__FUNCTION__, __LINE__, sprintf("Unknown status %s detected.", $status));
                logDebugMessage(__FUNCTION__, __LINE__, sprintf("Unknown status %s detected.", $status));
-               $ret = getMaskedMessage('UNKNOWN_STATUS', $status);
+               $ret = '{%message,ACCOUNT_STATUS_UNKNOWN=' . $status . '%}';
        }
+
+       // Return status
        return $ret;
 }
 
 // Search for an email address in the database
 function isSponsorRegisteredWithEmail ($email) {
-       // Do we already have the provided email address in our DB?
-       $ret = (countSumTotalData($email, 'sponsor_data', 'id', 'email', true) == 1);
+       // Is there already the provided email address in database?
+       $ret = (countSumTotalData($email, 'sponsor_data', 'id', 'email', TRUE) == 1);
 
        // Return result
        return $ret;
@@ -241,29 +251,15 @@ function isSponsorRegisteredWithEmail ($email) {
 
 // Wether the current user is a sponsor
 function isSponsor () {
-       // Failed...
-       $ret = false;
-       if ((isSessionVariableSet('sponsorid')) && (isSessionVariableSet('sponsorpass'))) {
-               // Check cookies against database records...
-               $result = SQL_QUERY_ESC("SELECT
-       `id`
-FROM
-       `{?_MYSQL_PREFIX?}_sponsor_data`
-WHERE
-       `id`='%s' AND `password`='%s' AND `status`='CONFIRMED'
-LIMIT 1",
-                       array(
-                               bigintval(getSession('sponsorid')),
-                               getSession('sponsorpass')
-                       ), __FUNCTION__, __LINE__);
-               if (SQL_NUMROWS($result) == 1) {
-                       // All is fine
-                       $ret = true;
-               } // END - if
-
-               // Free memory
-               SQL_FREERESULT($result);
-       } // END - if
+       // Failed is default
+       $ret = FALSE;
+
+       // Determine it
+       $ret = (
+               (isSessionVariableSet('sponsor_id')) &&
+               (isSessionVariableSet('sponsor_pass')) &&
+               (fetchSponsorData(getSession('sponsor_id')))
+       );
 
        // Return status
        return $ret;
@@ -272,64 +268,68 @@ LIMIT 1",
 //
 function addSponsorMenu ($current) {
        $OUT = '';
-       $WHERE = " AND active='Y'";
+       $WHERE = " AND `active`='Y'";
        if (isAdmin()) $WHERE = '';
 
        // Load main menu entries
-       $result_main = SQL_QUERY("SELECT action AS main_action, title AS main_title FROM `{?_MYSQL_PREFIX?}_sponsor_menu`
-WHERE (`what`='' OR `what` IS NULL) ".$WHERE."
-ORDER BY `sort`", __FUNCTION__, __LINE__);
-       if (SQL_NUMROWS($result_main) > 0) {
+       $result_main = sqlQuery("SELECT
+       `action` AS `main_action`,
+       `title` AS `main_title`
+FROM
+       `{?_MYSQL_PREFIX?}_sponsor_menu`
+WHERE
+       (`what`='' OR `what` IS NULL)
+       " . $WHERE . "
+ORDER BY
+       `sort` ASC", __FUNCTION__, __LINE__);
+       if (!ifSqlHasZeroNums($result_main)) {
                // Load every menu and it's sub menus
-               while ($content = SQL_FETCHARRAY($result_main)) {
+               while ($content = sqlFetchArray($result_main)) {
                        // Load sub menus
-                       $result_sub = SQL_QUERY_ESC("SELECT what AS sub_what, title AS sub_title FROM `{?_MYSQL_PREFIX?}_sponsor_menu`
-WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ".$WHERE."
-ORDER BY `sort`",
+                       $result_sub = sqlQueryEscaped("SELECT
+       `what` AS `sub_what`,
+       `title` AS `sub_title`
+FROM
+       `{?_MYSQL_PREFIX?}_sponsor_menu`
+WHERE
+       `action`='%s' AND
+       `what` != '' AND
+       `what` IS NOT NULL
+       " . $WHERE . "
+ORDER BY
+       `sort` ASC",
                        array($content['main_action']), __FUNCTION__, __LINE__);
-                       if (SQL_NUMROWS($result_sub) > 0) {
+                       if (!ifSqlHasZeroNums($result_sub)) {
                                // Load sub menus
                                $SUB = '';
-                               while ($content2 = SQL_FETCHARRAY($result_sub)) {
-                                       // Merge both arrays
-                                       $content = merge_array($content, $content2);
-
+                               while ($content2 = sqlFetchArray($result_sub)) {
                                        // Check if current selected menu is matching the loaded one
-                                       if ($current == $content['sub_what']) $content['sub_title'] = '<strong>' . $content['sub_title'] . '</strong>';
-
-                                       // Prepare data for the sub template
-                                       $content = array(
-                                               'what'  => $content['sub_what'],
-                                               'title' => $content['sub_title']
-                                       );
+                                       if ($current == $content2['sub_what']) $content2['sub_title'] = '<strong>' . $content2['sub_title'] . '</strong>';
 
                                        // Load row template
-                                       $SUB .= loadTemplate('sponsor_what', true, $content);
-                               }
+                                       $SUB .= loadTemplate('sponsor_what', TRUE, $content2);
+                               } // END - while
 
                                // Prepare data for the main template
-                               $content = array(
-                                       'title' => $content['main_title'],
-                                       'menu'  => $SUB
-                               );
+                               $content['menu'] = $SUB;
 
                                // Load menu template
-                               $OUT .= loadTemplate('sponsor_action', true, $content);
+                               $OUT .= loadTemplate('sponsor_action', TRUE, $content);
                        } else {
                                // No sub menus active
-                               $OUT .= loadTemplate('admin_settings_saved', true, getMessage('SPONSOR_NO_SUB_MENUS_ACTIVE'));
+                               $OUT .= displayMessage('{--SPONSOR_NO_SUB_MENUS_ACTIVE--}', TRUE);
                        }
 
                        // Free memory
-                       SQL_FREERESULT($result_sub);
-               }
+                       sqlFreeResult($result_sub);
+               } // END - while
        } else {
                // No main menus active
-               $OUT .= loadTemplate('admin_settings_saved', true, getMessage('SPONSOR_NO_MAIN_MENUS_ACTIVE'));
+               $OUT .= displayMessage('{--SPONSOR_NO_MAIN_MENUS_ACTIVE--}', TRUE);
        }
 
        // Free memory
-       SQL_FREERESULT($result_main);
+       sqlFreeResult($result_main);
 
        // Return content
        return $OUT;
@@ -337,39 +337,47 @@ ORDER BY `sort`",
 
 //
 function addSponsorContent ($what) {
-       $OUT = '';
-       $INC = sprintf("inc/modules/sponsor/%s.php", $what);
+       // Init sponsor content
+       $GLOBALS['sponsor_output'] = '';
+
+       // Generate IFN (Include FileName)
+       $INC = sprintf('inc/modules/sponsor/%s.php', $what);
        if (isIncludeReadable($INC)) {
-               // Every sponsor action will output nothing directly. It will be written into $OUT!
+               // Every sponsor action will output nothing directly. It will be written into $GLOBALS['sponsor_output']!
                loadIncludeOnce($INC);
        } else {
-               // File not found!
-               $OUT .= loadTemplate('admin_settings_saved', true, getMaskedMessage('SPONSOR_CONTENT_404', $what));
+               // File not found
+               $GLOBALS['sponsor_output'] .= displayMessage('{%message,SPONSOR_CONTENT_404=' . $what . '%}', TRUE);
        }
 
        // Return content
-       return $OUT;
+       return $GLOBALS['sponsor_output'];
 }
 
 //
 function updateSponsorLogin () {
        // Failed by default
-       $login = false;
+       $login = FALSE;
 
        // Is sponsor?
        if (isSponsor()) {
                // Update last online timestamp
-               SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_sponsor_data`
-SET `last_online`=UNIX_TIMESTAMP()
-WHERE `id`='%s' AND `password`='%s' LIMIT 1",
+               sqlQueryEscaped("UPDATE
+       `{?_MYSQL_PREFIX?}_sponsor_data`
+SET
+       `last_online`=NOW()
+WHERE
+       `id`=%s AND
+       `password`='%s'
+LIMIT 1",
                        array(
-                               bigintval(getSession('sponsorid')),
-                               getSession('sponsorpass')
+                               bigintval(getSession('sponsor_id')),
+                               getSession('sponsor_pass')
                        ), __FUNCTION__, __LINE__);
 
                // This update went fine?
-               $login = (SQL_AFFECTEDROWS() == 1);
-       }
+               $login = (!ifSqlHasZeroAffectedRows());
+       } // END - if
 
        // Return status
        return $login;
@@ -377,22 +385,22 @@ WHERE `id`='%s' AND `password`='%s' LIMIT 1",
 
 // Saves sponsor's data
 function saveSponsorData ($postData, $content) {
-       $EMAIL = false;
+       $EMAIL = FALSE;
 
        // Unsecure data which we don't want
        $UNSAFE = array('password', 'id', 'remote_addr', 'sponsor_created', 'last_online', 'status', 'ref_count',
-                       'points_amount', 'points_used', 'refid', 'hash', 'last_pay', 'last_curr', 'pass_old',
-                       'ok', 'pass1', 'pass2');
+                       'points_amount', 'points_used', 'refid', 'hash', 'last_payment', 'last_currency',
+                       'pass_old', 'ok', 'password1', 'password2');
 
        // Set default message ("not saved")
-       $message = getMessage('SPONSOR_ACCOUNT_DATA_NOT_SAVED');
+       $message = '{--SPONSOR_ACCOUNT_DATA_NOT_SAVED--}';
 
        // Check for submitted passwords
-       if ((!empty($postData['pass1'])) && (!empty($postData['pass2']))) {
+       if ((!empty($postData['password1'])) && (!empty($postData['password2']))) {
                // Are both passwords the same?
-               if ($postData['pass1'] == $postData['pass2']) {
-                       // Okay, then set password and remove pass1 and pass2
-                       $postData['password'] = md5($postData['pass1']);
+               if ($postData['password1'] == $postData['password2']) {
+                       // Okay, then set password and remove password1 and password2
+                       $postData['password'] = md5($postData['password1']);
                } // END - if
        } // END - if
 
@@ -401,7 +409,7 @@ function saveSponsorData ($postData, $content) {
                unset($postData[$remove]);
        } // END - foreach
 
-       // This array is for the submitted data which we will use with the SQL_QUERY_ESC() function to
+       // This array is for the submitted data which we will use with the sqlQueryEscaped() function to
        // secure the data
        $DATA = array();
 
@@ -409,113 +417,108 @@ function saveSponsorData ($postData, $content) {
        $sql = "UPDATE `{?_MYSQL_PREFIX?}_sponsor_data` SET";
        foreach ($postData as $key => $value) {
                // Mmmmm, too less security here???
-               $sql   .= " `".secureString($key)."`='%s',";
+               $sql   .= " `" . secureString($key) . "`='%s',";
 
-               // We will secure this later inside the SQL_QUERY_ESC() function
-               $DATA[] = secureString($value);
+               // We will secure this later inside the sqlQueryEscaped() function
+               array_push($DATA, secureString($value));
        } // END - foreach
 
        // Check if email has changed
        if ((!empty($content['email'])) && (!empty($postData['email']))) {
                if ($content['email'] != $postData['email']) {
                        // Change email address
-                       $EMAIL = true;
+                       $EMAIL = TRUE;
 
                        // Okay, has changed then add status with UNCONFIRMED and new hash code
-                       $sql .= " `status`='EMAIL', `hash`='%s',";
+                       $sql .= " `status`='EMAIL',`hash`='%s',";
 
                        // Generate hash code
-                       $HASH = md5(session_id().':'.$postData['email'].':'.detectRemoteAddr().':'.detectUserAgent().':'.time());
-                       $DATA[] = $HASH;
+                       // @TODO Rewrite this to API function
+                       $HASH = md5(session_id() . getEncryptSeparator() . $postData['email'] . getEncryptSeparator() . detectRemoteAddr() . getEncryptSeparator() . detectUserAgent() . getEncryptSeparator() . time());
+                       array_push($DATA, $HASH);
                } // END - if
        } // END - if
-
        // Remove last commata
        $sql = substr($sql, 0, -1);
 
+       // Add last_change
+       $sql .= ',`last_change`=NOW()';
+
        // Add SQL tail data
-       $sql .= " WHERE `id`='%s' AND password='%s' LIMIT 1";
-       $DATA[] = bigintval(getSession('sponsorid'));
-       $DATA[] = getSession('sponsorpass');
+       $sql .= " WHERE `id`=%s AND `password`='%s' LIMIT 1";
+       array_push($DATA, bigintval(getSession('sponsor_id')), getSession('sponsor_pass'));
 
        // Saving data was completed... ufff...
-       switch (getWhat())
-       {
+       switch (getWhat()) {
                case 'account': // Change account data
-                       if ($EMAIL === true) {
-                               $message   = getMessage('SPONSOR_ACCOUNT_EMAIL_CHANGED');
-                               $templ = 'admin_sponsor_change_email';
-                               $subj  = getMessage('ADMIN_SPONSOR_ACC_EMAIL_SUBJ');
+                       if ($EMAIL === TRUE) {
+                               $message = '{--SPONSOR_ACCOUNT_EMAIL_CHANGED--}';
+                               $templ   = 'admin_sponsor_change_email';
+                               $subject    = '{--ADMIN_SPONSOR_ACC_EMAIL_SUBJECT--}';
                        } else {
-                               $message   = getMessage('SPONSOR_ACCOUNT_DATA_SAVED');
-                               $templ = 'admin_sponsor_change_data';
-                               $subj  = getMessage('ADMIN_SPONSOR_ACC_DATA_SUBJ');
+                               $message = '{--SPONSOR_ACCOUNT_DATA_SAVED--}';
+                               $templ   = 'admin_sponsor_change_data';
+                               $subject    = '{--ADMIN_SPONSOR_ACC_DATA_SUBJECT--}';
                        }
                        break;
 
                case 'settings': // Change settings
-                       // Translate some data
-                       $content['receive']  = translateYesNo($content['receive_warnings']);
-                       $content['interval'] = createFancyTime($content['warning_interval']);
-
                        // Set message template and subject for admin
-                       $message   = getMessage('SPONSOR_SETTINGS_SAVED');
-                       $templ = 'admin_sponsor_settings';
-                       $subj  = getMessage('ADMIN_SPONSOR_SETTINGS_SUBJ');
+                       $message = '{--SPONSOR_SETTINGS_SAVED--}';
+                       $templ   = 'admin_sponsor_settings';
+                       $subject    = '{--ADMIN_SPONSOR_SETTINGS_SUBJECT--}';
                        break;
 
                default: // Unknown sponsor what value!
                        logDebugMessage(__FUNCTION__, __LINE__, sprintf("Unknown sponsor module (what) %s detected.", getWhat()));
-                       $message = getMaskedMessage('SPONSOR_UNKNOWN_WHAT', getWhat());
-                       $templ = ''; $subj = '';
+                       $message = '{--SPONSOR_UNKNOWN_WHAT--}';
+                       $templ   = '';
+                       $subject    = '';
                        break;
-       }
+       } // END - switch
 
-       if (SQL_AFFECTEDROWS() == 1) {
-               if (!empty($templ) && !empty($subj)) {
+       // Has an entry updated?
+       if (!ifSqlHasZeroAffectedRows()) {
+               // Template and subject are set?
+               if (!empty($templ) && !empty($subject)) {
                        // Run SQL command and check for success
-                       $result = SQL_QUERY_ESC($sql, $DATA, __FUNCTION__, __LINE__);
+                       $result = sqlQueryEscaped($sql, $DATA, __FUNCTION__, __LINE__);
 
                        // Add all data to content
                        $content['new_data'] = $postData;
 
-                       // Change some data
-                       if (isset($content['gender']))             $content['gender']                  = translateGender($content['gender']);
-                       if (isset($content['new_data']['gender'])) $content['new_data']['gender']      = translateGender($content['new_data']['gender']);
-                       if (isset($content['receive_warnings']))   $content['new_data']['receive']     = translateYesNo($content['new_data']['receive_warnings']);
-                       if (isset($content['warning_interval']))   $content['new_data']['interval']    = createFancyTime($content['new_data']['warning_interval']);
-
                        // Send email to admins
-                       sendAdminNotification($subj, $templ, $content);
+                       sendAdminNotification($subject, $templ, $content);
 
                        // Shall we send mail to the sponsor's new email address?
                        if ($content['receive_warnings'] == 'Y') {
-                               // Okay send email with confirmation link to new address and with no confirmation link
-                               // to the old address
+                               /*
+                                * Okay send email with confirmation link to new address and with no confirmation link
+                                * to the old address.
+                                */
 
                                // First to old address
-                               switch (getWhat())
-                               {
+                               switch (getWhat()) {
                                        case 'account': // Change account data
                                                $email_msg = loadEmailTemplate('sponsor_change_data', $content);
-                                               sendEmail($content['email'], getMessage('SPONSOR_ACC_DATA_SUBJ'), $email_msg);
+                                               sendEmail($content['email'], '{--SPONSOR_ACC_DATA_SUBJECT--}', $email_msg);
 
-                                               if ($EMAIL === true) {
+                                               if ($EMAIL === TRUE) {
                                                        // Add hash code to content array
                                                        $content['hash'] = $HASH;
 
                                                        // Second mail goes to the new address
                                                        $email_msg = loadEmailTemplate('sponsor_change_email', $content);
-                                                       sendEmail($content['email'], getMessage('SPONSOR_ACC_EMAIL_SUBJ'), $email_msg);
-                                               }
+                                                       sendEmail($content['email'], '{--SPONSOR_ACC_EMAIL_SUBJECT--}', $email_msg);
+                                               } // END - if
                                                break;
 
                                        case 'settings': // Change settings
                                                // Send email
                                                $email_msg = loadEmailTemplate('sponsor_settings', $content);
-                                               sendEmail($content['email'], getMessage('SPONSOR_SETTINGS_SUBJ'), $email_msg);
+                                               sendEmail($content['email'], '{--SPONSOR_SETTINGS_SUBJECT--}', $email_msg);
                                                break;
-                               }
+                               } // END - switch
                        } // END - if
                } // END - if
        } // END - if
@@ -524,5 +527,341 @@ function saveSponsorData ($postData, $content) {
        return $message;
 }
 
+// Create email link to sponsor's account
+function generateSponsorEmailLink ($email, $mod = 'admin') {
+       // Show contact link only if sponsor is confirmed by default
+       $locked = " AND `status`='CONFIRMED'";
+
+       // But admins shall always see it
+       if (isAdmin()) $locked = '';
+
+       $result = sqlQueryEscaped("SELECT
+       `id`
+FROM
+       `{?_MYSQL_PREFIX?}_sponsor_data`
+WHERE
+       '%s' REGEXP `email`
+       " . $locked . "
+LIMIT 1",
+               array($email), __FUNCTION__, __LINE__);
+       if (sqlNumRows($result) == 1) {
+               // Load sponsor_id
+               list($sponsor_id) = sqlFetchRow($result);
+
+               // Rewrite email address to contact link
+               $email = '{%url=modules.php?module=' . $mod . '&amp;what=sponsor_contct&amp;sponsor_id=' . bigintval($sponsor_id) . '%}';
+       } // END - if
+
+       // Free memory
+       sqlFreeResult($result);
+
+       // Return rewritten (?) email address
+       return $email;
+}
+
+// Processes a sponsor request and handles it
+function doProcessSponsorFormRequest ($messageArray = array()) {
+       // Default message
+       $message = '';
+
+       // Handle the request
+       $status = handleSponsorRequest(postRequestArray(), TRUE, $messageArray, TRUE);
+
+       // Check the status of the registration process
+       switch ($status) {
+               case 'added': // Sponsor successfully added with account status = UNCONFIRMED!
+                       // Check for his id number
+                       $result = sqlQueryEscaped("SELECT `id`, `hash` FROM `{?_MYSQL_PREFIX?}_sponsor_data` WHERE '%s' REGEXP `email` LIMIT 1",
+                               array(postRequestElement('email')), __FUNCTION__, __LINE__);
+                       if (sqlNumRows($result) == 1) {
+                               // id found so let's load it for the confirmation email
+                               list($id, $hash) = sqlFetchRow($result);
+
+                               // Prepare data for the email template
+                               $content['id']        = $id;
+                               $content['hash']      = $hash;
+                               $content['email']     = postRequestElement('email');
+                               $content['surname']   = postRequestElement('surname');
+                               $content['family']    = postRequestElement('family');
+                               $content['timestamp'] = generateDateTime(time(), 0);
+                               $content['password']  = postRequestElement('password1');
+
+                               // Generate email and send it to the new sponsor
+                               $message = loadEmailTemplate('sponsor_confirm', $content, $id);
+                               sendEmail(postRequestElement('email'), '{--SPONSOR_PLEASE_CONFIRM_SUBJECT--}', $message);
+
+                               // Send mail to admin
+                               sendAdminNotification('{--ADMIN_NEW_SPONSOR--}', 'admin_sponsor_reg', $content);
+
+                               // Output message: DONE
+                               $message = $messageArray['added'];
+                       } else {
+                               // Sponsor account not found???
+                               $message = '{%message,SPONSOR_EMAIL_404=' . postRequestElement('email') . '%}';
+                       }
+
+                       // Free memory
+                       sqlFreeResult($result);
+                       break;
+
+               default:
+                       logDebugMessage(__FUNCTION__, __LINE__, sprintf("Unknown status %s detected.", $status));
+                       if (!isAdmin()) {
+                               // Message for testing admin
+                               $message = '{%message,ADMIN_SPONSOR_UNKNOWN_STATUS=' . $status . '%}';
+                       } else {
+                               // Message for the guest
+                               $message = '{%message,SPONSOR_UNKNOWN_STATUS=' . $status . '%}';
+                       }
+                       break;
+       } // END - switch
+
+       // Return message
+       return $message;
+}
+
+// Expression call-back function for fetching sponsor data
+function doExpressionSponsor ($data) {
+       // Use current sponsor_id by default
+       $functionName = 'getSponsorId()';
+
+       // Sponsor-related data, so is there a sponsor_id?
+       if (!empty($data['matches'][4][$data['key']])) {
+               // Is there a sponsor_id or $sponsor_id?
+               if ($data['matches'][4][$data['key']] == '$userid') {
+                       // Use dynamic call
+                       $functionName = "getFetchedSponsorData('id', \$userid, '" . $data['callback'] . "')";
+               } elseif (!empty($data['matches'][4][$data['key']])) {
+                       // Sponsor data found
+                       $functionName = "getFetchedSponsorData('id', " . $data['matches'][4][$data['key']] . ", '" . $data['callback'] . "')";
+               }
+       } elseif ((!empty($data['callback'])) && (isValidSponsorData())) {
+               // "Call-back" alias column for current logged in sponsor's data
+               $functionName = "getSponsorData('" . $data['callback'] . "')";
+       }
+
+       // Is there another function to run (e.g. translations)
+       if (!empty($data['extra_func'])) {
+               // Surround the original function call with it
+               $functionName = $data['extra_func'] . '(' . $functionName . ')';
+       } // END - if
+
+       // Generate replacer
+       $replacer = '{DQUOTE} . ' . $functionName . ' . {DQUOTE}';
+
+       // Now replace the code
+       $code = replaceExpressionCode($data, $replacer);
+
+       // Return replaced code
+       return $code;
+}
+
+// Fetch sponsor data for given sponsor id
+function fetchSponsorData ($sponsor_id, $column = 'id') {
+       // If we should look for sponsor_id secure&set it here
+       if ($column == 'id') {
+               // Secure sponsor_id
+               $sponsor_id = bigintval($sponsor_id);
+
+               // Set it here
+               setCurrentSponsorId($sponsor_id);
+
+               // Don't look for invalid sponsor_ids...
+               if (!isValidId($sponsor_id)) {
+                       // Invalid, so abort here
+                       reportBug(__FUNCTION__, __LINE__, 'Sponsor id ' . $sponsor_id . ' is invalid.');
+               } elseif (isValidSponsorData()) {
+                       // Use cache, so it is fine
+                       return TRUE;
+               }
+       } elseif (isValidSponsorData()) {
+               // Use cache, so it is fine
+               return TRUE;
+       }
+
+       // By default none was found
+       $found = FALSE;
+
+       // Extra statements
+       $ADD = '';
+
+       // Query for the sponsor
+       $result = sqlQueryEscaped("SELECT *".$ADD." FROM `{?_MYSQL_PREFIX?}_sponsor_data` WHERE `%s`='%s' LIMIT 1",
+               array($column, $sponsor_id), __FUNCTION__, __LINE__);
+
+       // Is there a record?
+       if (sqlNumRows($result) == 1) {
+               // Load data from cookies
+               $data = sqlFetchArray($result);
+
+               // Set the sponsor_id for later use
+               setCurrentSponsorId($data['id']);
+               $GLOBALS['sponsor_data'][getCurrentSponsorId()] = $data;
+
+               // Rewrite 'last_failure' if found
+               if (isset($GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure'])) {
+                       // Backup the raw one and zero it
+                       $GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure_raw'] = $GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure'];
+                       $GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure'] = NULL;
+
+                       // Is it not zero?
+                       if (!is_null($GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure_raw'])) {
+                               // Seperate data/time
+                               $array = explode(' ', $GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure_raw']);
+
+                               // Seperate data and time again
+                               $array['date'] = explode('-', $array[0]);
+                               $array['time'] = explode(':', $array[1]);
+
+                               // Now pass it to mktime()
+                               $GLOBALS['sponsor_data'][getCurrentSponsorId()]['last_failure'] = mktime(
+                                       $array['time'][0],
+                                       $array['time'][1],
+                                       $array['time'][2],
+                                       $array['date'][1],
+                                       $array['date'][2],
+                                       $array['date'][0]
+                               );
+                       } // END - if
+               } // END - if
+
+               // Found, but valid?
+               $found = isValidSponsorData();
+       } // END - if
+
+       // Free memory
+       sqlFreeResult($result);
+
+       // Return result
+       return $found;
+}
+
+// Wrapper for fetchSponsorData() and getSponsorData() calls
+function getFetchedSponsorData ($keyColumn, $sponsor_id, $valueColumn) {
+       // Zero ids are not valid
+       if (!isValidId($sponsor_id)) {
+               // Abort here
+               reportBug(__FUNCTION__, __LINE__, 'Zero sponsor_id provided');
+       } // END - if
+
+       // Is it cached?
+       if (!isset($GLOBALS['sponsor_data_cache'][$sponsor_id][$keyColumn][$valueColumn])) {
+               // Default is empty
+               $data = '';
+
+               // Can we fetch the sponsor data?
+               if ((isValidId($sponsor_id)) && (fetchSponsorData($sponsor_id, $keyColumn))) {
+                       // Now get the data back
+                       $data = getSponsorData($valueColumn);
+               } // END - if
+
+               // Cache it
+               /* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'cached:id=' . $sponsor_id . ',keyColumn=' . $keyColumn . ',valueColumn=' . $valueColumn . ',data=' . $data);
+               $GLOBALS['sponsor_data_cache'][$sponsor_id][$keyColumn][$valueColumn] = $data;
+       } // END - if
+
+       // Return it
+       return $GLOBALS['sponsor_data_cache'][$sponsor_id][$keyColumn][$valueColumn];
+}
+
+// Checks if the sponsor data is valid, this may indicate that the sponsor has logged
+// in, but you should use isMember() if you want to find that out.
+function isValidSponsorData () {
+       // Sponsor id should not be zero so abort here
+       if (!isCurrentSponsorIdSet()) return FALSE;
+
+       // Is it cached?
+       if (!isset($GLOBALS['is_sponsor_data_valid'][getCurrentSponsorId()])) {
+               // Determine it
+               $GLOBALS['is_sponsor_data_valid'][getCurrentSponsorId()] = ((isset($GLOBALS['sponsor_data'][getCurrentSponsorId()])) && (count($GLOBALS['sponsor_data'][getCurrentSponsorId()]) > 1));
+       } // END - if
+
+       // Return the result
+       return $GLOBALS['is_sponsor_data_valid'][getCurrentSponsorId()];
+}
+
+// Setter for current sponsor_id
+function setCurrentSponsorId ($sponsor_id) {
+       // Set sponsor_id
+       $GLOBALS['current_sponsor_id'] = bigintval($sponsor_id);
+
+       // Unset it to re-determine the actual state
+       unset($GLOBALS['is_sponsor_data_valid'][$sponsor_id]);
+}
+
+// Getter for current sponsor_id
+function getCurrentSponsorId () {
+       // Sponsorid must be set before it can be used
+       if (!isCurrentSponsorIdSet()) {
+               // Not set
+               reportBug(__FUNCTION__, __LINE__, 'Sponsor id is not set.');
+       } // END - if
+
+       // Return the sponsor_id
+       return $GLOBALS['current_sponsor_id'];
+}
+
+// Checks if current sponsor_id is set
+function isCurrentSponsorIdSet () {
+       return ((isset($GLOBALS['current_sponsor_id'])) && (isValidId($GLOBALS['current_sponsor_id'])));
+}
+
+// Getter for sponsor data
+function getSponsorData ($column) {
+       // Sponsor id should not be zero
+       if (!isValidId(getCurrentSponsorId())) {
+               reportBug(__FUNCTION__, __LINE__, 'Sponsor id is zero.');
+       } // END - if
+
+       // Return the value
+       return $GLOBALS['sponsor_data'][getCurrentSponsorId()][$column];
+}
+
+// Determines the country of the given sponsor id
+function determineSponsorCountry ($sponsor_id) {
+       // Then handle it over
+       $country = getSponsorData('country');
+
+       // Return it
+       return $country;
+}
+
+// Destroy sponsor session
+function destroySponsorSession () {
+       // Remove all user data from session
+       return (
+               (setSession('sponsor_id', '')) &&
+               (setSession('sponsor_pass', '')) &&
+               (
+                       ((isExtensionActive('theme')) && (setMailerTheme(''))) ||
+                       (!isExtensionActive('theme'))
+               )
+       );
+}
+
+// Getter for sponsor_min_points
+function getSponsorMinPoints () {
+       // Is there cache?
+       if (!isset($GLOBALS[__FUNCTION__])) {
+               // Determine it
+               $GLOBALS[__FUNCTION__] = getConfig('sponsor_min_points');
+       } // END - if
+
+       // Return cache
+       return $GLOBALS[__FUNCTION__];
+}
+
+// Getter for sponsor_ref_points
+function getSponsorRefPoints () {
+       // Is there cache?
+       if (!isset($GLOBALS[__FUNCTION__])) {
+               // Determine it
+               $GLOBALS[__FUNCTION__] = getConfig('sponsor_ref_points');
+       } // END - if
+
+       // Return cache
+       return $GLOBALS[__FUNCTION__];
+}
+
 // [EOF]
 ?>