Security line in all includes changed

[mailer.git] / inc / modules / guest / what-stats.php

diff --git a/inc/modules/guest/what-stats.php b/inc/modules/guest/what-stats.php
index 3fa8d6f720b41ef322a508824d810110f9233e3d..73833a016b1bccff95fbf828c7c1b3e9d271a9fa 100644 (file)
--- a/inc/modules/guest/what-stats.php
+++ b/inc/modules/guest/what-stats.php
@@ -32,11 +32,11 @@
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if (!defined('__SECURITY')) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
+
 // Add description as navigation point
 ADD_DESCR("guest", basename(__FILE__));
 
@@ -48,7 +48,6 @@ switch ($_GET['mode'])
        case "modules": $_CONFIG['guest_stats'] = "MODULES"; $lmode = "members"; $ltitle = GUEST_STATS_MEMBERS; break;
 }
 
-OPEN_TABLE("100%", "guest_content", "center", "top");
 switch ($_CONFIG['guest_stats'])
 {
 case "MEMBERS": // Statistics about your members
@@ -61,8 +60,8 @@ case "MEMBERS": // Statistics about your members
        $treg = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE joined >= ".START_TDAY, __FILE__, __LINE__));
 
        // Only males / females
-       $male   = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE sex='M' AND status='CONFIRMED'", __FILE__, __LINE__));
-       $female = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE sex='F' AND status='CONFIRMED'", __FILE__, __LINE__));
+       $male   = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE gender='M' AND status='CONFIRMED'", __FILE__, __LINE__));
+       $female = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE gender='F' AND status='CONFIRMED'", __FILE__, __LINE__));
 
        // Unconfirmed accounts
        $unconfirmed = SQL_NUMROWS(SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE status != 'CONFIRMED'", __FILE__, __LINE__));
@@ -75,7 +74,7 @@ case "MEMBERS": // Statistics about your members
        for ($idx = 1; $idx < 13; $idx++)
        {
                $month = $idx; if ($idx < 10) $month = "0".$idx;
-               $months[$month] = SQL_NUMROWS(SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE birth_month=%d AND status='CONFIRMED'",
+               $months[$month] = SQL_NUMROWS(SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE birth_month=%s AND status='CONFIRMED'",
                 array(bigintval($month)), __FILE__, __LINE__));
        }
 
@@ -91,10 +90,10 @@ case "MEMBERS": // Statistics about your members
        }
 
        // Now we have all categories loaded, count members
-       foreach ($cats as $id=>$dummy)
+       foreach ($cats as $id => $dummy)
        {
                // We only need id and nothing more to count...
-               $cat_cnt[$id] = SQL_NUMROWS(SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE cat_id=%d",
+               $cat_cnt[$id] = SQL_NUMROWS(SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE cat_id=%s",
                 array(bigintval($id)), __FILE__, __LINE__));
        }
 
@@ -112,7 +111,7 @@ case "MEMBERS": // Statistics about your members
 
        // Generate monthly stats
        $SW = 2; $r2 = " right2"; $l = "ll"; $r = "lr"; $OUT = "";
-       foreach ($months as $month=>$cnt)
+       foreach ($months as $month => $cnt)
        {
                if ($SW == 2) $OUT .= "<TR>\n";
 
@@ -145,7 +144,7 @@ case "MEMBERS": // Statistics about your members
 
        // Generate category stats
        $SW = 2; $OUT = "";
-       foreach ($cat_cnt as $id=>$cnt)
+       foreach ($cat_cnt as $id => $cnt)
        {
                // Prepare data for the template
                $content = array(
@@ -224,6 +223,6 @@ case "INACTIVE": // Deactivated stats
        LOAD_TEMPLATE("admin_settings_saved", false, "<STRONG>".GUEST_STATS_DEACTIVATED."</STRONG>");
        break;
 }
-CLOSE_TABLE();
+
 //
 ?>