Security line in all includes changed

[mailer.git] / inc / modules / admin / what-unlock_surfbar_urls.php

diff --git a/inc/modules/admin/what-unlock_surfbar_urls.php b/inc/modules/admin/what-unlock_surfbar_urls.php
index c1d2d52c98fd0935bf1a747cc36bb450f846445e..707d238077c1cbf3bfc88be8892494e36c013e80 100644 (file)
--- a/inc/modules/admin/what-unlock_surfbar_urls.php
+++ b/inc/modules/admin/what-unlock_surfbar_urls.php
@@ -32,13 +32,61 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!is_admin())) {
+if ((!defined('__SECURITY')) || (!is_admin())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
-}
+} // END - if
 
 // Add description as navigation point
 ADD_DESCR("admin", basename(__FILE__));
 
+// Is the form sent?
+if ((isset($_POST['unlock'])) && (is_array($_POST['id'])) && (count($_POST['id']) > 0)) {
+       // Unlock selected URLs
+       if (SURFBAR_ADMIN_UNLOCK_URL_IDS($_POST['id'])) {
+               // Unlock done! :-)
+               LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SURFBAR_UNLOCK_DONE);
+       } else {
+               // Unlock failed!
+               LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SURFBAR_UNLOCK_FAILED);
+       }
+} // END - if
+
+// List all URLs
+$result = SQL_QUERY("SELECT id, userid, url, reward, costs, UNIX_TIMESTAMP(registered) AS registered
+FROM "._MYSQL_PREFIX."_surfbar_urls
+WHERE status='PENDING'
+ORDER BY id ASC", __FILE__, __LINE__);
+
+// Do we have some URLs left?
+if (SQL_NUMROWS($result) > 0) {
+       // List all URLs
+       $OUT = ""; $SW = 2;
+       while ($content = SQL_FETCHARRAY($result)) {
+               // "Translate"/add content
+               $content['sw']         = $SW;
+               $content['userid']     = ADMIN_USER_PROFILE_LINK($content['userid']);
+               $content['url']        = FRAMETESTER($content['url']);
+               $content['costs']      = TRANSLATE_COMMA($content['costs']);
+               $content['reward']     = TRANSLATE_COMMA($content['reward']);
+               $content['registered'] = MAKE_DATETIME($content['registered'], 2);
+
+               // Load row template
+               $OUT .= LOAD_TEMPLATE("admin_unlock_surfbar_urls_row", true, $content);
+
+               // Switch color
+               $SW = 3 - $SW;
+       } // END - while
+
+       // Load main template
+       LOAD_TEMPLATE("admin_unlock_surfbar_urls", false, $OUT);
+} else {
+       // No URLs in surfbar
+       LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SURFBAR_NO_URLS_FOUND);
+}
+
+// Free result
+SQL_FREERESULT($result);
+
 //
 ?>