Reset rewritten, SQL fixed, zeros are now numeric

[mailer.git] / inc / libs / sponsor_functions.php

diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php
index ac2324e567f05bb68cf33bf4a7f66003e5d37b96..fdf4eb9f43b4bded1bc1104cc22545c38181eeb5 100644 (file)
--- a/inc/libs/sponsor_functions.php
+++ b/inc/libs/sponsor_functions.php
@@ -39,7 +39,6 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
 //
 function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_STATUS=false)
 {
-       global $HTTP_GET_VARS, $_SERVER, $_COOKIE;
        $SAVE = true; $UPDATE = false; $skip = false; $ALREADY = false;
        $ret = "unused";
 
@@ -55,7 +54,7 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
        );
 
        // Check if sponsor already exists
-       foreach ($POST as $k=>$v)
+       foreach ($POST as $k => $v)
        {
                if (!(array_search($k, $SKIPPED) > -1))
                {
@@ -82,7 +81,7 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
                                                SQL_FREERESULT($result);
 
                                                // Yes, he is!
-                                               if (($HTTP_GET_VARS['what'] == "add_sponsor") || ($NO_UPDATE))
+                                               if (($_GET['what'] == "add_sponsor") || ($NO_UPDATE))
                                                {
                                                        // Already found!
                                                        $ALREADY = true;
@@ -154,7 +153,7 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
        if ($SAVE)
        {
                // Default is no force even when a guest want to abuse this force switch
-               if ((empty($POST['force'])) || (!IS_ADMIN())) $POST['force'] = "0";
+               if ((empty($POST['force'])) || (!IS_ADMIN())) $POST['force'] = 0;
 
                // SQL and message string is empty by default
                $SQL = ""; $MSG = "";
@@ -164,14 +163,14 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
                {
                        // Update his data
                        $SQL = "UPDATE "._MYSQL_PREFIX."_sponsor_data SET ";
-                       foreach ($DATA['keys'] as $k=>$v)
+                       foreach ($DATA['keys'] as $k => $v)
                        {
                                $SQL .= $v."='%s', ";
                        }
 
                        // Remove last ", " from SQL string
                        $SQL = substr($SQL, 0, -2)." WHERE id='%s' LIMIT 1";
-                       $DATA['values'][] = bigintval($HTTP_GET_VARS['id']);
+                       $DATA['values'][] = bigintval($_GET['id']);
 
                        // Generate message
                        $MSG = SPONSOR_SET_MESSAGE(ADMIN_SPONSOR_UPDATED, "updated", $MSGs);
@@ -182,7 +181,7 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
                        // Add new sponsor, first add more data
                        $DATA['keys'][] = "sponsor_created"; $DATA['values'][] = time();
                        $DATA['keys'][] = "status";
-                       if ((!$NO_UPDATE) && (IS_ADMIN()) && ($HTTP_GET_VARS['what'] == "add_sponsor"))
+                       if ((!$NO_UPDATE) && (IS_ADMIN()) && ($_GET['what'] == "add_sponsor"))
                        {
                                // Only allowed for admin
                                $DATA['values'][] = "PENDING";
@@ -214,7 +213,7 @@ function SPONSOR_HANDLE_SPONSOR(&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_ST
                {
                        // Add all data as hidden data
                        $OUT = "";
-                       foreach ($POST as $k=>$v)
+                       foreach ($POST as $k => $v)
                        {
                                // Do not add 'force' !
                                if ($k != "force")
@@ -357,7 +356,7 @@ function GENERATE_SPONSOR_MENU($current)
 
        // Load main menu entries
        $result_main = SQL_QUERY("SELECT action, title FROM "._MYSQL_PREFIX."_sponsor_menu
-WHERE what='' ".$WHERE."
+WHERE (what='' OR what IS NULL) ".$WHERE."
 ORDER BY sort", __FILE__, __LINE__);
        if (SQL_NUMROWS($result_main) > 0)
        {
@@ -421,16 +420,13 @@ ORDER BY sort", array($action), __FILE__, __LINE__);
 //
 function GENERATE_SPONSOR_CONTENT($what)
 {
-       global $HTTP_POST_VARS, $HTTP_GET_VARS, $CONFIG;
-       $FILE = PATH."inc/modules/sponsor/".$what.".php";
+       global $HTTP_POST_VARS, $_GET, $CONFIG;
        $OUT = "";
-       if (@file_exists($FILE))
-       {
+       $FILE = sprintf("%sinc/modules/sponsor/%s.php", PATH, $what);
+       if (FILE_READABLE($FILE)) {
                // Every sponsor action will output nothing directly. It will be written into $OUT!
                require_once($FILE);
-       }
-        else
-       {
+       } else {
                // File not found!
                $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_CONTENT_404_1.$what.SPONSOR_CONTENT_404_2);
        }
@@ -470,7 +466,7 @@ WHERE id='%s' AND password='%s' LIMIT 1",
 //
 function SPONSOR_SAVE_DATA($POST, $content)
 {
-       global $_COOKIE, $_SERVER, $HTTP_GET_VARS;
+       global $_COOKIE, $_SERVER, $_GET;
        $EMAIL = false;
 
        // Unsecure data which we don't want
@@ -482,13 +478,13 @@ function SPONSOR_SAVE_DATA($POST, $content)
        $MSG = SPONSOR_ACCOUNT_DATA_NOT_SAVED;
 
        // Check for submitted passwords
-       if ((!empty($HTTP_POST_VARS['pass1'])) && (!empty($HTTP_POST_VARS['pass2'])))
+       if ((!empty($_POST['pass1'])) && (!empty($_POST['pass2'])))
        {
                // Are both passwords the same?
-               if ($HTTP_POST_VARS['pass1'] == $HTTP_POST_VARS['pass2'])
+               if ($_POST['pass1'] == $_POST['pass2'])
                {
                        // Okay, then set password and remove pass1 and pass2
-                       $HTTP_POST_VARS['password'] = md5($HTTP_POST_VARS['pass1']);
+                       $_POST['password'] = md5($_POST['pass1']);
                }
        }
 
@@ -504,7 +500,7 @@ function SPONSOR_SAVE_DATA($POST, $content)
 
        // Prepare SQL string
        $SQL = "UPDATE "._MYSQL_PREFIX."_sponsor_data SET";
-       foreach ($POST as $key=>$value)
+       foreach ($POST as $key => $value)
        {
                // Mmmmm, too less security here???
                $SQL   .= " ".strip_tags($key)."='%s',";
@@ -542,7 +538,7 @@ function SPONSOR_SAVE_DATA($POST, $content)
        $DATA[] = $_COOKIE['sponsorpass'];
 
        // Saving data was completed... ufff...
-       switch ($HTTP_GET_VARS['what'])
+       switch ($_GET['what'])
        {
        case "account": // Change account data
                if ($EMAIL)
@@ -571,7 +567,7 @@ function SPONSOR_SAVE_DATA($POST, $content)
                break;
 
        default: // Unknown sponsor what value!
-               $MSG = SPONSOR_UNKNOWN_WHAT_1.$HTTP_GET_VARS['what'].SPONSOR_UNKNOWN_WHAT_2;
+               $MSG = SPONSOR_UNKNOWN_WHAT_1.$_GET['what'].SPONSOR_UNKNOWN_WHAT_2;
                $templ = ""; $subj = "";
                break;
        }
@@ -594,17 +590,7 @@ function SPONSOR_SAVE_DATA($POST, $content)
                        if (isset($content['warning_interval'])) $DATA['interval']    = CREATE_FANCY_TIME($POST['warning_interval']);
 
                        // Send email to admins
-                       if (GET_EXT_VERSION("admins") < "0.4.1")
-                       {
-                               // Use old method to send out
-                               $msg = LOAD_EMAIL_TEMPLATE($templ, $content);
-                               SEND_ADMIN_EMAILS($subj, $msg);
-                       }
-                        else
-                       {
-                               // Use new system to send out
-                               SEND_ADMIN_EMAILS_PRO($subj, $templ, $content);
-                       }
+                       SEND_ADMIN_NOTIFICATION($subj, $templ, $content);
 
                        // Shall we send mail to the sponsor's new email address?
                        if ($content['receive_warnings'] == "Y")
@@ -613,7 +599,7 @@ function SPONSOR_SAVE_DATA($POST, $content)
                                // to the old address
 
                                // First to old address
-                               switch ($HTTP_GET_VARS['what'])
+                               switch ($_GET['what'])
                                {
                                case "account": // Change account data
                                        $email_msg = LOAD_EMAIL_TEMPLATE("sponsor_change_data", $content);