]> git.mxchange.org Git - mailer.git/blobdiff - inc/modules/admin/what-list_rallyes.php
Fixes for stripped HTML tags, and false warnings in debug log
[mailer.git] / inc / modules / admin / what-list_rallyes.php
index d4e61658fa286837de54baa8440820531e89ed66..98b6f61d1785faa8541c81c7dc32c15cf8861ca3 100644 (file)
@@ -38,56 +38,56 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 }
 
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
-if (empty($_GET['sub'])) $_GET['sub'] = "";
+if (!REQUEST_ISSET_GET(('sub'))) REQUEST_SET_GET('sub', "");
 $MSG = "";
 
 // Quick actions on a rallye
-if (isset($_GET['rallye']))
+if (REQUEST_ISSET_GET(('rallye')))
 {
        // Activate / deactivate
        $SQL = "";
-       if (isset($_GET['activate']))
+       if (REQUEST_ISSET_GET(('activate')))
        {
-               switch ($_GET['activate'])
+               switch (REQUEST_GET('activate'))
                {
                case "1": // Activate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET is_active='Y' WHERE id=%s AND is_active='N' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET is_active='Y' WHERE id=%s AND is_active='N' LIMIT 1";
                        break;
 
                case "0": // Deactivate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET is_active='N' WHERE id=%s AND is_active='Y' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET is_active='N' WHERE id=%s AND is_active='Y' LIMIT 1";
                        break;
                }
        }
 
        // Automatic notification
-       if (isset($_GET['notify']))
+       if (REQUEST_ISSET_GET(('notify')))
        {
-               switch ($_GET['notify'])
+               switch (REQUEST_GET('notify'))
                {
                case "1": // Activate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET send_notify='Y' WHERE id=%s AND send_notify='N' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET send_notify='Y' WHERE id=%s AND send_notify='N' LIMIT 1";
                        break;
 
                case "0": // Deactivate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET send_notify='N' WHERE id=%s AND send_notify='Y' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET send_notify='N' WHERE id=%s AND send_notify='Y' LIMIT 1";
                        break;
                }
        }
 
        // Automatic adding of new members
-       if (isset($_GET['auto']))
+       if (REQUEST_ISSET_GET(('auto')))
        {
-               switch ($_GET['auto'])
+               switch (REQUEST_GET('auto'))
                {
                case "1": // Activate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET auto_add_new_user='Y' WHERE id=%s AND auto_add_new_user='N' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET auto_add_new_user='Y' WHERE id=%s AND auto_add_new_user='N' LIMIT 1";
                        break;
 
                case "0": // Deactivate
-                       $SQL = "UPDATE "._MYSQL_PREFIX."_rallye_data SET auto_add_new_user='N' WHERE id=%s AND auto_add_new_user='Y' LIMIT 1";
+                       $SQL = "UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET auto_add_new_user='N' WHERE id=%s AND auto_add_new_user='Y' LIMIT 1";
                        break;
                }
        }
@@ -95,25 +95,25 @@ if (isset($_GET['rallye']))
        // Run SQL command
        if (!empty($SQL))
        {
-               $result = SQL_QUERY_ESC($SQL, array(bigintval($_GET['rallye'])), __FILE__, __LINE__);
+               $result = SQL_QUERY_ESC($SQL, array(bigintval(REQUEST_GET('rallye'))), __FILE__, __LINE__);
        }
 }
- elseif (isset($_POST['remove']))
+ elseif (REQUEST_ISSET_POST(('remove')))
 {
        // Delete rallyes
-       $SEL = SELECTION_COUNT($_POST['sel']);
+       $SEL = SELECTION_COUNT(REQUEST_POST('sel'));
        if ($SEL > 0)
        {
                // Delete selected rallyes and all it's data
-               foreach ($_POST['sel'] as $id => $sel)
+               foreach (REQUEST_POST('sel') as $id => $sel)
                {
                        // Remove selected rallye entirely...
-                       $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_rallye_data WHERE id=%s LIMIT 1",
-                        array(bigintval($id)), __FILE__, __LINE__);
-                       $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_rallye_prices WHERE rallye_id=%s",
-                        array(bigintval($id)), __FILE__, __LINE__);
-                       $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_rallye_users WHERE rallye_id=%s",
-                        array(bigintval($id)), __FILE__, __LINE__);
+                       SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_rallye_data` WHERE id=%s LIMIT 1",
+                               array(bigintval($id)), __FILE__, __LINE__);
+                       SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE rallye_id=%s",
+                               array(bigintval($id)), __FILE__, __LINE__);
+                       SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_rallye_users` WHERE rallye_id=%s",
+                               array(bigintval($id)), __FILE__, __LINE__);
                }
 
                // Output message
@@ -125,24 +125,24 @@ if (isset($_GET['rallye']))
                $MSG = RALLYE_DELETE_NOTHING_SELECTED;
        }
 }
- elseif (isset($_POST['change']))
+ elseif (REQUEST_ISSET_POST(('change')))
 {
        // Change rallye
-       $SEL = SELECTION_COUNT($_POST['title']);
+       $SEL = SELECTION_COUNT(REQUEST_POST('title'));
        if ($SEL > 0)
        {
                // Change selected rallyes and all it's data
-               foreach ($_POST['title'] as $id => $title)
+               foreach (REQUEST_POST('title') as $id => $title)
                {
                        // Secure ID number
                        $id = bigintval($id);
 
                        // Generate timestamps
-                       $START = mktime($_POST['start_hour'][$id], $_POST['start_min'][$id], $_POST['start_sec'][$id], $_POST['start_month'][$id], $_POST['start_day'][$id], $_POST['start_year'][$id]);
-                       $END   = mktime($_POST['end_hour'][$id]  , $_POST['end_min'][$id]  , $_POST['end_sec'][$id]  , $_POST['end_month'][$id]  , $_POST['end_day'][$id]  , $_POST['end_year'][$id]  );
+                       $START = mktime(REQUEST_POST('start_hour', $id), REQUEST_POST('start_min', $id), REQUEST_POST('start_sec', $id), REQUEST_POST('start_month', $id), REQUEST_POST('start_day', $id), REQUEST_POST('start_year', $id));
+                       $END   = mktime(REQUEST_POST('end_hour', $id)  , REQUEST_POST('end_min', $id)  , REQUEST_POST('end_sec', $id)  , REQUEST_POST('end_month', $id)  , REQUEST_POST('end_day', $id)  , REQUEST_POST('end_year', $id)  );
 
                        // Update entry
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_rallye_data SET
+                       SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_rallye_data` SET
 title='%s',
 descr='%s',
 template='%s',
@@ -151,8 +151,16 @@ end_time='%s',
 min_users='%s',
 min_prices='%s'
 WHERE id='".$id."' LIMIT 1",
- array($title, $_POST['descr'][$id], $_POST['templ'][$id], bigintval($START), bigintval($END), bigintval($_POST['min_users'][$id]), bigintval($_POST['min_prices'][$id]), $id),
- __FILE__, __LINE__);
+                               array(
+                                       $title,
+                                       REQUEST_POST('descr', $id),
+                                       REQUEST_POST('templ', $id),
+                                       bigintval($START),
+                                       bigintval($END),
+                                       bigintval(REQUEST_POST('min_users', $id)),
+                                       bigintval(REQUEST_POST('min_prices', $id)),
+                                       $id
+                               ), __FILE__, __LINE__);
                }
 
                // Output message
@@ -160,18 +168,15 @@ WHERE id='".$id."' LIMIT 1",
        }
 }
 
-if (isset($_POST['edit']))
-{
+if (REQUEST_ISSET_POST(('edit'))) {
        // Check for selections
-       $SEL = SELECTION_COUNT($_POST['sel']);
-       if ($SEL > 0)
-       {
+       $SEL = SELECTION_COUNT(REQUEST_POST('sel'));
+       if ($SEL > 0) {
                // Make all selected and deactivated rallyes editable
                $SW = 2; $OUT = "";
-               foreach ($_POST['sel'] as $id => $sel)
-               {
+               foreach (REQUEST_POST('sel') as $id => $sel) {
                        // Load rallye basic data
-                       $result = SQL_QUERY_ESC("SELECT title, descr, template, start_time, end_time, min_users, min_prices FROM "._MYSQL_PREFIX."_rallye_data WHERE id=%s LIMIT 1",
+                       $result = SQL_QUERY_ESC("SELECT title, descr, template, start_time, end_time, min_users, min_prices FROM `{!_MYSQL_PREFIX!}_rallye_data` WHERE id=%s LIMIT 1",
                         array(bigintval($id)), __FILE__, __LINE__);
                        list($title, $descr, $templ, $start, $end, $min_users, $min_prices) = SQL_FETCHROW($result);
                        SQL_FREERESULT($result);
@@ -207,43 +212,42 @@ if (isset($_POST['edit']))
                        // Color switching
                        $SW = 3 - $SW;
                }
+
                // Remember rows in constant
                define('__RALLYE_ROWS', $OUT);
 
                // Load final template
                LOAD_TEMPLATE("admin_edit_rallyes");
-       }
-        else
-       {
+       } else {
                // Nothing selected to edit
                LOAD_TEMPLATE("admin_settings_saved", false, LOAD_TEMPLATE("admin_list_rallye_noselect", true));
        }
-} elseif (($_GET['sub'] == "users") && ($_GET['rallye'] > 0)) {
+} elseif ((REQUEST_GET('sub') == "users") && (REQUEST_GET('rallye') > 0)) {
        // List users and their refs before start and current
-       $result = SQL_QUERY_ESC("SELECT userid, refs, curr_points FROM "._MYSQL_PREFIX."_rallye_users WHERE rallye_id=%s ORDER BY userid",
-        array(bigintval($_GET['rallye'])), __FILE__, __LINE__);
+       $result = SQL_QUERY_ESC("SELECT userid, refs, curr_points FROM `{!_MYSQL_PREFIX!}_rallye_users` WHERE rallye_id=%s ORDER BY userid",
+        array(bigintval(REQUEST_GET('rallye'))), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) > 0)
        {
                $SW = 2; $OUT = "";
-               define('__RALLYE_VALUE', $_GET['rallye']);
+               define('__RALLYE_VALUE', REQUEST_GET('rallye'));
                while (list($uid, $old, $opoints) = SQL_FETCHROW($result))
                {
-                       // Check for referral count
+                       // Check for referal count
                        $cnt = RALLYE_GET_REFCOUNT($uid, $old);
 
                        // Output row
                        $Bl = ""; $Br = "";
-                       if (($opoints > 0) && ($cnt > 0)) { $Bl = "<STRONG>"; $Br = "</STRONG>"; }
-                       if (($old > 0) || ($cnt > 0))
-                       {
-                               // Insert link to referral list
+                       if (($opoints > 0) && ($cnt > 0)) { $Bl = "<strong>"; $Br = "</strong>"; }
+                       if (($old > 0) || ($cnt > 0)) {
+                               // Insert link to referal list
                                //* DEBUG: */ echo "-".$uid."/".$cnt."/".$old."-<br />";
                                $cnt = ADMIN_USER_PROFILE_LINK($uid, $cnt, "list_refs");
                                $old = ADMIN_USER_PROFILE_LINK($uid, $old, "list_refs");
                        }
 
                        // Get user points
-                       $points = GET_TOTAL_DATA($uid, "user_points", "points")  - GET_TOTAL_DATA($uid, "user_data", "used_points");
+                       $points = GET_TOTAL_DATA($uid, "user_points", "points", "userid", false, " AND ref_depth=1 LIMIT 1");
+                       //* DEBUG: */ echo basename(__FILE__).":uid={$uid},points={$points},opoints={$opoints}<br />\n";
                        $content = array(
                                'sw'      => $SW ,
                                'uid'     => $uid,
@@ -263,43 +267,36 @@ if (isset($_POST['edit']))
 
                // Load template
                LOAD_TEMPLATE("admin_list_rallye_usr");
-       }
-        else
-       {
+       } else {
                // No entries found?
                LOAD_TEMPLATE("admin_settings_saved", false, RALLYE_ADMIN_USERS_404);
        }
-}
- else
-{
+} else {
        // Start listing rallyes
        $result = SQL_QUERY("SELECT id, admin_id, title, descr, template, start_time, end_time, auto_add_new_user, is_active, send_notify, notified, min_users, min_prices
-FROM "._MYSQL_PREFIX."_rallye_data
+FROM `{!_MYSQL_PREFIX!}_rallye_data`
 ORDER BY start_time DESC",
  __FILE__, __LINE__);
-       if (SQL_NUMROWS($result) > 0)
-       {
+       if (SQL_NUMROWS($result) > 0) {
                // List found rallyes
                $SW = 2; $OUT = "";
-               while (list($id, $aid, $title, $descr, $templ, $start, $end, $auto_add, $active, $notify, $notified, $min_users, $min_prices) = SQL_FETCHROW($result))
-               {
+               while (list($id, $aid, $title, $descr, $templ, $start, $end, $auto_add, $active, $notify, $notified, $min_users, $min_prices) = SQL_FETCHROW($result)) {
                        // Load admin login
                        $alogin = GET_ADMIN_LOGIN($aid);
 
                        // Count assigned prices
-                       $result_prices = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_rallye_prices WHERE rallye_id=%s",
+                       $result_prices = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_rallye_prices` WHERE rallye_id=%s",
                         array(bigintval($id)), __FILE__, __LINE__);
 
                        // Count joined userids
-                       $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_rallye_users WHERE rallye_id=%s",
+                       $result_user = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_rallye_users` WHERE rallye_id=%s",
                         array($id), __FILE__, __LINE__);
                        $joined = SQL_NUMROWS($result_user);
 
                        // Did some users joined this rallye?
-                       if ($joined > 0)
-                       {
+                       if ($joined > 0) {
                                // List joined users
-                               $joined = "<A href=\"".URL."/modules.php?module=admin&amp;what=list_rallyes&amp;sub=users&amp;rallye=".$id."\" title=\"".RALLYE_LIST_USERS."\">".$joined."</A>";
+                               $joined = "<a href=\"{!URL!}/modules.php?module=admin&amp;what=list_rallyes&amp;sub=users&amp;rallye=".$id."\" title=\"".RALLYE_LIST_USERS."\">".$joined."</a>";
                        }
 
                        // Alter some variables
@@ -309,7 +306,7 @@ ORDER BY start_time DESC",
 
                        // Transfer data into array for the template
                        $content = array(
-                               'select'     => "<INPUT type=\"checkbox\" name=\"sel[".$id."]\" class=\"admin_normal\" value=\"1\">",
+                               'select'     => "<input type=\"checkbox\" name=\"sel[".$id."]\" class=\"admin_normal\" value=\"1\" />",
                                'aid'        => $aid,
                                'email_link' => CREATE_EMAIL_LINK($aid),
                                'alogin'     => $alogin,
@@ -337,14 +334,14 @@ ORDER BY start_time DESC",
                        // Is the rallye active or not?
                        switch ($active)
                        {
-                       case 'Y':
+                       case "Y":
                                // Rallye is active so do not edit it!
-                               $content['select'] = "<STRONG class=\"big\">".$id."</STRONG>";
+                               $content['select'] = "<div class=\"big\">".$id."</strong>";
                                $content['active_title'] = RALLYE_DEACTIVATE_NOW;
                                $content['active'] = 0;
                                break;
 
-                       case 'N':
+                       case "N":
                                $content['active_title'] = RALLYE_ACTIVATE_NOW;
                                $content['active'] = "1";
                                break;
@@ -353,12 +350,12 @@ ORDER BY start_time DESC",
                        // Notification to members?
                        switch ($notify)
                        {
-                       case 'Y':
+                       case "Y":
                                $content['notify_title'] = RALLYE_STOP_NOTIFY_NOW;
                                $content['notify'] = 0;
                                break;
 
-                       case 'N':
+                       case "N":
                                $content['notify_title'] = RALLYE_START_NOTIFY_NOW;
                                $content['notify'] = "1";
                                break;
@@ -367,12 +364,12 @@ ORDER BY start_time DESC",
                        // Auto-add of new joined members?
                        switch ($auto_add)
                        {
-                       case 'Y':
+                       case "Y":
                                $content['auto_title'] = RALLYE_STOP_AUTO_ADD_NOW;
                                $content['auto'] = 0;
                                break;
 
-                       case 'N':
+                       case "N":
                                $content['auto_title'] = RALLYE_START_AUTO_ADD_NOW;
                                $content['auto'] = "1";
                                break;
@@ -389,12 +386,11 @@ ORDER BY start_time DESC",
 
                // Load template
                LOAD_TEMPLATE("admin_list_rallyes");
-       }
-        else
-       {
+       } else {
                // No rallyes setup so far
                LOAD_TEMPLATE("admin_settings_saved", false, RALLYE_NO_RALLYES_SETUP);
        }
 }
+
 //
 ?>