Security line in all includes changed

[mailer.git] / inc / modules / admin / what-list_sponsor_pays.php

diff --git a/inc/modules/admin/what-list_sponsor_pays.php b/inc/modules/admin/what-list_sponsor_pays.php
index 5c183d69a7ba882a29f5db881952867e99b1a602..b696ee532a49b9185cffef751d1f91da2f87d2d9 100644 (file)
--- a/inc/modules/admin/what-list_sponsor_pays.php
+++ b/inc/modules/admin/what-list_sponsor_pays.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 04/24/2005 *
- * ===============                              Last change: 05/18/2008 *
+ * M-XChange v0.2.1                                   Start: 04/24/2005 *
+ * ================                             Last change: 05/19/2008 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : what-list_sponsor_pays.php                       *
@@ -31,8 +31,7 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!is_admin()))
-{
+if ((!defined('__SECURITY')) || (!is_admin())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php";
        require($INC);
 }
@@ -40,25 +39,19 @@ if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!is_admin()))
 // Add description as navigation point
 ADD_DESCR("admin", basename(__FILE__));
 
-if (!empty($HTTP_GET_VARS['id']))
-{
+if (!empty($_GET['id'])) {
        // Check for selected sponsor
        $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_sponsor_data WHERE id='%s' LIMIT 1",
-        array(bigintval($HTTP_GET_VARS['id'])), __FILE__, __LINE__);
-       if (SQL_NUMROWS($result) == 1)
-       {
+        array(bigintval($_GET['id'])), __FILE__, __LINE__);
+       if (SQL_NUMROWS($result) == 1) {
                // ...
                // Free memory
                SQL_FREERESULT($result);
-       }
-        else
-       {
+       } else {
                // Sponsor not found!
-               LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SPONSOR_404_1.$HTTP_GET_VARS['id'].ADMIN_SPONSOR_404_2);
+               LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SPONSOR_404_1.bigintval($_GET['id']).ADMIN_SPONSOR_404_2);
        }
-}
- else
-{
+} else {
        // Not called by what-list_sponsor.php
        LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_CALL_NOT_DIRECTLY);
 }