Even more rewrites/fixes from EL branch (please report any broken part after you...
[mailer.git] / inc / modules / admin / what-sub_points.php
index 9c6cc1d8fe11bd209594a2348302d72ba483bf38..4b72569767e18fde12ad0aea6819e9559d2029b5 100644 (file)
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 11/23/2003 *
- * ===============                              Last change: 09/23/2004 *
+ * Mailer v0.2.1-FINAL                                Start: 11/23/2003 *
+ * ===================                          Last change: 09/23/2004 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : what-sub_points.php                              *
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Manuell einem Mitglied Punkte gutschreiben       *
  * -------------------------------------------------------------------- *
- *                                                                      *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
+ * $Tag:: 0.2.1-FINAL                                                 $ *
+ * $Author::                                                          $ *
+ * Needs to be in all Files and every File needs "svn propset           *
+ * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009, 2010 by Mailer Developer Team                    *
  * For more information visit: http://www.mxchange.org                  *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN()))
-{
-       $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
-       require($INC);
+if ((!defined('__SECURITY')) || (!isAdmin())) {
+       die();
 }
+
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+addMenuDescription('admin', __FILE__);
 
-// Fix a notice
-if (!isset($_GET['u_id'])) $_GET['u_id'] = "";
+if (getRequestParameter('userid') == 'all') {
+       // Is the form sent?
+       if ((isFormSent()) && (postRequestParameter('points') > 0)) {
+               // Add points to all accounts
+               $content['points'] = bigintval(postRequestParameter('points'));
 
-OPEN_TABLE("100%", "admin_content admin_content_align", "");
-if ($_GET['u_id'] == "all")
-{
-       // Add points to all accounts
-       define('__POINTS_VALUE', $_POST['points']);
-       if ((isset($_POST['ok'])) && ($_POST['points'] > 0))
-       {
-               $result_main = SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE status='CONFIRMED' ORDER BY userid", __FILE__, __LINE__);
-               while (list($uid) = SQL_FETCHROW($result_main))
-               {
-                       // User ID found in URL so we use this give him some credits
-                       $result = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
-                        array(bigintval($uid)), __FILE__, __LINE__);
-                       if (SQL_NUMROWS($result) == 1)
-                       {
-                               // Selected user does exist
-                               list($sname, $fname, $email) = SQL_FETCHROW($result);
-                               SQL_FREERESULT($result);
+               // Load userid
+               $result_main = SQL_QUERY("SELECT userid, email FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `status`='CONFIRMED' ORDER BY `userid` ASC",
+                       __FILE__, __LINE__);
+               while ($row = SQL_FETCHARRAY($result_main)) {
+                       // Merge both arrays
+                       $content = merge_array($content, $row);
 
-                               if ((isset($_POST['ok'])) && (!empty($_POST['points'])))
-                               {
-                                       // Ok, add points to used points and send an email to him...
-                                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s WHERE userid=%d LIMIT 1",
-                                        array(bigintval($_POST['points'], bigintval($uid))), __FILE__, __LINE__);
+                       // Ok, add points to used points and send an email to him...
+                       subtractPoints('admin_all', $content['userid'], postRequestParameter('points'));
+
+                       // Add more content
+                       $content['text']   = SQL_ESCAPE(postRequestParameter('reason'));
+                       $content['points'] = bigintval(postRequestParameter('points'));
+
+                       // Load message and send it away
+                       $message = loadEmailTemplate('sub-points', $content, bigintval($content['userid']));
+                       sendEmail($content['email'], getMessage('ADMIN_SUB_SUBJ'), $message);
+               } // END - while
 
-                                       // Load message and send it away
-                                       $msg = LOAD_EMAIL_TEMPLATE("sub-points", $_POST['reason'], $uid);
-                                       SEND_EMAIL($email, ADMIN_SUB_SUBJ, $msg);
-                               }
-                       }
-               }
                // Free memory
                SQL_FREERESULT($result_main);
 
                // Output message
-               LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_ALL_POINTS_SUBTRACTED);
-       }
-        else
-       {
+               loadTemplate('admin_settings_saved', false, getMessage('ADMIN_ALL_POINTS_SUBTRACTED'));
+       } else {
                // Display form add points
-               LOAD_TEMPLATE("admin_sub_points_all");
+               loadTemplate('admin_sub_points_all');
        }
-}
- elseif (!empty($_GET['u_id']))
-{
-       // User ID found in URL so we use this give him some credits
-       $result = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
-        array(bigintval($_GET['u_id'])),__FILE__, __LINE__);
-       if (SQL_NUMROWS($result) == 1)
-       {
+} elseif (isGetRequestParameterSet('userid')) {
+       // User id found in URL so we use this give him some credits
+       if (fetchUserData(getRequestParameter('userid'))) {
                // Selected user does exist
-               list($sname, $fname, $email) = SQL_FETCHROW($result);
-               SQL_FREERESULT($result);
+               $content = getUserDataArray();
 
-               if ((isset($_POST['ok'])) && (!empty($_POST['points'])))
-               {
+               if ((isFormSent()) && (isPostRequestParameterSet('points'))) {
                        // Ok, add to used points and send an email to him...
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s WHERE userid=%d LIMIT 1",
-                        array(bigintval($_POST['points']), bigintval($_GET['u_id'])), __FILE__, __LINE__);
+                       subtractPoints('admin_single', bigintval(getRequestParameter('userid')), postRequestParameter('points'));
 
-                       // Update mediadata as well
-                       if (GET_EXT_VERSION("mediadata") >= "0.0.4")
-                       {
-                               // Update database
-                               MEDIA_UPDATE_ENTRY(array("total_points"), "sub", bigintval($_POST['points']));
-                       }
-
-                       // Remember points in template
-                       define('__POINTS_VALUE', bigintval($_POST['points']));
+                       // Add more content
+                       $content['text']   = SQL_ESCAPE(postRequestParameter('reason'));
+                       $content['points'] = bigintval(postRequestParameter('points'));
 
                        // Load email and send it away
-                       $msg = LOAD_EMAIL_TEMPLATE("sub-points", $_POST['reason'], $_GET['u_id']);
-                       SEND_EMAIL($email, ADMIN_SUB_SUBJ, $msg);
+                       $message = loadEmailTemplate('sub-points', $content, bigintval(getRequestParameter('userid')));
+                       sendEmail($content['email'], getMessage('ADMIN_SUB_SUBJ'), $message);
 
                        // Output message
-                       LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_POINTS_SUBTRACTED);
-               }
-                else
-               {
-                       // Opps, missing form here
-                       define('__USER_VALUE', "<A href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".$sname." ".$fname."</A>");
-                       define('__UID_VALUE', $_GET['u_id']);
-                       LOAD_TEMPLATE("admin_sub_points");
+                       loadTemplate('admin_settings_saved', false, getMessage('ADMIN_POINTS_SUBTRACTED'));
+               } else {
+                       // Prepare content
+                       $content['user']   = '<a href="' . generateEmailLink($content['email'], 'user_data') . '">' . $content['surname'] . ' ' . $content['family'] . '</a>';
+                       $content['userid'] = bigintval(getRequestParameter('userid'));
+
+                       // Load form
+                       loadTemplate('admin_sub_points', false, $content);
                }
-       }
-        else
-       {
+       } else {
                // User not found!
-               OUTPUT_HTML("<STRONG class=\"admin_failed\">".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2."</STRONG>");
+               loadTemplate('admin_settings_saved', false, '<div class="admin_failed">' . getMaskedMessage('ADMIN_MEMBER_404', bigintval(getRequestParameter('userid'))) . '</div>');
        }
-}
- else
-{
+} else {
        // Output selection form with all confirmed user accounts listed
-       ADD_MEMBER_SELECTION_BOX(true);
+       addMemberSelectionBox(0, true);
 }
-CLOSE_TABLE();
-//
+
+// [EOF]
 ?>