All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-edit_sponsor.php

diff --git a/inc/modules/admin/what-edit_sponsor.php b/inc/modules/admin/what-edit_sponsor.php
index 9081221758cf789938acd5872cacf61924cd689f..2d122ace4885cd8a13a80e9254dcb2484f1a4d6e 100644 (file)
--- a/inc/modules/admin/what-edit_sponsor.php
+++ b/inc/modules/admin/what-edit_sponsor.php
@@ -15,9 +15,10 @@
  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
  * For more information visit: http://www.mxchange.org                  *
  *                                                                      *
- * This program is free software. You can redistribute it and/or modify *
+ * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
- * the Free Software Foundation; either version 2 of the License.       *
+ * the Free Software Foundation; either version 2 of the License, or    *
+ * (at your option) any later version.                                  *
  *                                                                      *
  * This program is distributed in the hope that it will be useful,      *
  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
@@ -31,17 +32,17 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!is_admin())) {
+if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php";
        require($INC);
 }
 
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
 if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
        // Check for selected sponsor
-       $result = SQL_QUERY_ESC("SELECT company, position, salut, surname, family, street_nr1, street_nr2, zip, city, country, phone, fax, cell, email, url, tax_ident, receive_warnings, warning_interval FROM "._MYSQL_PREFIX."_sponsor_data WHERE id='%s' LIMIT 1",
+       $result = SQL_QUERY_ESC("SELECT company, position, gender, surname, family, street_nr1, street_nr2, zip, city, country, phone, fax, cell, email, url, tax_ident, receive_warnings, warning_interval FROM `{!MYSQL_PREFIX!}_sponsor_data` WHERE id='%s' LIMIT 1",
         array(bigintval($_GET['id'])), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) == 1) {
                // Load sponsor details
@@ -56,24 +57,24 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                define('__POSITION'   , $DATA['position']);
                define('__TAX_IDENT'  , $DATA['tax_ident']);
                //  Personal data
-               switch ($DATA['salut'])
+               switch ($DATA['gender'])
                {
                case "M":
-                       define('__SALUT_M', " selected");
-                       define('__SALUT_F', "");
-                       define('__SALUT_C', "");
+                       define('__GENDER_M', " selected=\"selected\"");
+                       define('__GENDER_F', "");
+                       define('__GENDER_C', "");
                        break;
 
                case "F":
-                       define('__SALUT_M', "");
-                       define('__SALUT_F', " selected");
-                       define('__SALUT_C', "");
+                       define('__GENDER_M', "");
+                       define('__GENDER_F', " selected=\"selected\"");
+                       define('__GENDER_C', "");
                        break;
 
                case "C":
-                       define('__SALUT_M', "");
-                       define('__SALUT_F', "");
-                       define('__SALUT_C', " selected");
+                       define('__GENDER_M', "");
+                       define('__GENDER_F', "");
+                       define('__GENDER_C', " selected=\"selected\"");
                        break;
                }
                define('__SURNAME'    , $DATA['surname']);
@@ -105,11 +106,11 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                        case "add_points": // Add points
                                if (strval($_POST['points']) > 0) {
                                        // Replace german decimal comma with computer's decimal dot
-                                       $POINTS = strval(str_replace(",", ".", $_POST['points']));
+                                       $POINTS = strval(REVERT_COMMA($_POST['points']));
 
                                        // Add points to account
-                                       $result_add = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_sponsor_data SET points_amount=points_amount+%s WHERE id='%s' LIMIT 1",
-                                        array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__);
+                                       SQL_QUERY_ESC("UPDATE `{!MYSQL_PREFIX!}_sponsor_data` SET points_amount=points_amount+%s WHERE id='%s' LIMIT 1",
+                                               array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__);
 
                                        // Remember points /reason for the template
                                        define('__POINTS' , TRANSLATE_COMMA($POINTS));
@@ -128,11 +129,11 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                        case "sub_points": // Subtract points
                                if (strval($_POST['points']) > 0) {
                                        // Replace german decimal comma with computer's decimal dot
-                                       $POINTS = strval(str_replace(",", ".", $_POST['points']));
+                                       $POINTS = strval(REVERT_COMMA($_POST['points']));
 
                                        // Add points to account
-                                       $result_add = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_sponsor_data SET points_used=points_used+%s WHERE id='%s' LIMIT 1",
-                                        array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__);
+                                       SQL_QUERY_ESC("UPDATE `{!MYSQL_PREFIX!}_sponsor_data` SET points_used=points_used+%s WHERE id='%s' LIMIT 1",
+                                               array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__);
 
                                        // Remember points /reason for the template
                                        define('__POINTS' , TRANSLATE_COMMA($POINTS));
@@ -156,10 +157,16 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                                        unset($_POST['pass2']);
                                        $PASS = false;
                                }
+
+                               // Convert time selection
+                               $DATA = array(); $id = "warning_interval_ye"; $skip = false;
+                               CONVERT_SELECTIONS_TO_TIMESTAMP($_POST, $DATA, $id, $skip);
+
+                               // Save the sponsor
                                SPONSOR_HANDLE_SPONSOR($_POST);
 
                                // Convert some data for the email template
-                               $_POST['salut'] = TRANSLATE_SEX($_POST['salut']);
+                               $_POST['gender'] = TRANSLATE_GENDER($_POST['gender']);
                                $_POST['warning_interval'] = CREATE_FANCY_TIME($_POST['warning_interval']);
                                if (!$PASS) $_POST['pass1'] = SPONSOR_PASS_UNCHANGED;
 
@@ -169,6 +176,7 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                                break;
 
                        default: // Unknown mode
+                               DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown mode %s detected.", $_GET['mode']));
                                $MSG = ADMIN_INVALID_MODE_1.SQL_ESCAPE($_GET['mode']).ADMIN_INVALID_MODE_2;
                                break;
                        }
@@ -179,7 +187,7 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) {
                        } // END - if
                } elseif (FILE_READABLE(sprintf("%stemplates/%s/html/admin/%s.tpl", PATH, GET_LANGUAGE(), $TPL))) {
                        // Create mailto link
-                       define('__SPONSOR_VALUE', "<A href=\"mailto:".__EMAIL."\">".__SURNAME." ".__FAMILY."</A>");
+                       define('__SPONSOR_VALUE', "<a href=\"mailto:".__EMAIL."\">".__SURNAME." ".__FAMILY."</a>");
 
                        // Load mode template
                        LOAD_TEMPLATE($TPL);