Fixes for stripped HTML tags, and false warnings in debug log

[mailer.git] / inc / modules / admin / what-lock_sponsor.php

diff --git a/inc/modules/admin/what-lock_sponsor.php b/inc/modules/admin/what-lock_sponsor.php
index a4aebb3c8b3dd0fe8fc2abf78bb116c7565cf45e..f20b9a7e1308cea8d25499ba482a7c6888286b90 100644 (file)
--- a/inc/modules/admin/what-lock_sponsor.php
+++ b/inc/modules/admin/what-lock_sponsor.php
@@ -41,10 +41,10 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 ADD_DESCR("admin", __FILE__);
 $MSG = "";
 
-if (!empty($_GET['id'])) {
+if (REQUEST_ISSET_GET(('id'))) {
        // Check for selected sponsor
-       $result = SQL_QUERY_ESC("SELECT gender, surname, family, email, status FROM "._MYSQL_PREFIX."_sponsor_data WHERE id='%s' LIMIT 1",
-        array(bigintval($_GET['id'])), __FILE__, __LINE__);
+       $result = SQL_QUERY_ESC("SELECT gender, surname, family, email, status FROM `{!_MYSQL_PREFIX!}_sponsor_data` WHERE id='%s' LIMIT 1",
+        array(bigintval(REQUEST_GET('id'))), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) == 1) {
                // Get sponsor's current status and let only confirmed and locked status pass
                list($gender, $sname, $fname, $email, $status) = SQL_FETCHROW($result);
@@ -55,68 +55,69 @@ if (!empty($_GET['id'])) {
                        define('__GENDER'  , TRANSLATE_GENDER($gender));
                        define('__SURNAME', $sname);
                        define('__FAMILY' , $fname);
-                       define('__ID'     , bigintval($_GET['id']));
+                       define('__ID'     , bigintval(REQUEST_GET('id')));
 
-                       if (isset($_POST['ok'])) {
+                       if (IS_FORM_SENT()) {
                                // Create messages
                                if ($status == "CONFIRMED") {
                                        // Message when sponsor's account got lock
-                                       define('__EMAIL_MSG', SPONSOR_ACCOUNT_LOCKED);
-                                       $subject = SPONSOR_SUBJECT_LOCKED;
+                                       define('__EMAIL_MSG', getMessage('SPONSOR_ACCOUNT_LOCKED'));
+                                       $subject = getMessage('SPONSOR_SUBJECT_LOCKED');
                                        $status = "LOCKED";
                                } else {
                                        // Message when sponsor's account got unlock
-                                       define('__EMAIL_MSG', SPONSOR_ACCOUNT_UNLOCKED);
-                                       $subject = SPONSOR_SUBJECT_UNLOCKED;
+                                       define('__EMAIL_MSG', getMessage('SPONSOR_ACCOUNT_UNLOCKED'));
+                                       $subject = getMessage('SPONSOR_SUBJECT_UNLOCKED');
                                        $status = "CONFIRMED";
                                }
 
                                // Load email message
-                               $msg = LOAD_EMAIL_TEMPLATE("lock_sponsor", $_POST['reason'], bigintval($_GET['id']));
+                               $msg = LOAD_EMAIL_TEMPLATE("lock_sponsor", REQUEST_POST('reason'), bigintval(REQUEST_GET('id')));
 
                                // And send it away
                                SEND_EMAIL($email, $subject, $msg);
 
                                // Update sponsor's account
-                               SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_sponsor_data SET status='".$status."' WHERE id='%s' LIMIT 1",
-                                       array(bigintval($_GET['id'])), __FILE__, __LINE__);
-                       } elseif (!empty($_POST['no'])) {
+                               SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET `status`='".$status."' WHERE id='%s' LIMIT 1",
+                                       array(bigintval(REQUEST_GET('id'))), __FILE__, __LINE__);
+                       } elseif (REQUEST_ISSET_POST(('no'))) {
                                // No don't lock / unlock now!
-                               LOAD_URL(URL."/modules.php?module=admin&what=list_sponsor&id=".bigintval($_GET['id']));
+                               LOAD_URL("modules.php?module=admin&what=list_sponsor&id=".bigintval(REQUEST_GET('id')));
                        } else {
                                // Create header and text messages
                                if ($status == "CONFIRMED") {
                                        // Messages when sponsor's account is confirmed
-                                       define('__HEADER_MESSAGE', SPONSOR_LOCK_SPONSOR_HEADER);
-                                       define('__TEXT_MESSAGE'  , SPONSOR_LOCK_SPONSOR_TEXT);
+                                       define('__HEADER_MESSAGE', getMessage('SPONSOR_LOCK_SPONSOR_HEADER'));
+                                       define('__TEXT_MESSAGE'  , getMessage('SPONSOR_LOCK_SPONSOR_TEXT'));
                                } else {
                                        // Messages when sponsor's account is locked
-                                       define('__HEADER_MESSAGE', SPONSOR_UNLOCK_SPONSOR_HEADER);
-                                       define('__TEXT_MESSAGE'  , SPONSOR_UNLOCK_SPONSOR_TEXT);
+                                       define('__HEADER_MESSAGE', getMessage('SPONSOR_UNLOCK_SPONSOR_HEADER'));
+                                       define('__TEXT_MESSAGE'  , getMessage('SPONSOR_UNLOCK_SPONSOR_TEXT'));
                                }
 
                                // Create email link
-                               define('__EMAIL_LINK', "<A href=\"mailto:".$email."\">".__GENDER." ".__SURNAME." ".__FAMILY."</A>");
+                               define('__EMAIL_LINK', "<a href=\"mailto:".$email."\">{!__GENDER!} {!__SURNAME!} {!__FAMILY!}</a>");
 
                                // Display form
                                LOAD_TEMPLATE("admin_lock_sponsor");
                        }
                } else {
                        // Cannot change status on unconfirmed or pending accounts!
-                       $MSG = ADMIN_SPONSPOR_CANNOT_LOCK_PENDING_UNCINFIRMED_ACCOUNTS;
+                       $MSG = getMessage('ADMIN_SPONSPOR_CANNOT_LOCK_PENDING_UNCINFIRMED_ACCOUNTS');
                }
        } else {
                // Sponsor not found!
-               $MSG = ADMIN_SPONSOR_404_1.bigintval($_GET['id']).ADMIN_SPONSOR_404_2;
+               $MSG = sprintf(getMessage('ADMIN_SPONSOR_404'), bigintval(REQUEST_GET('id')));
        }
 } else {
        // Not called by what-list_sponsor.php
-       $MSG = ADMIN_CALL_NOT_DIRECTLY;
+       $MSG = getMessage('ADMIN_CALL_NOT_DIRECTLY');
 }
 
 if (!empty($MSG)) {
        // Output message
        LOAD_TEMPLATE("admin_settings_saved", false, $MSG);
 }
+
 //
 ?>