Reset rewritten, SQL fixed, zeros are now numeric

[mailer.git] / inc / modules / member / what-payout.php

diff --git a/inc/modules/member/what-payout.php b/inc/modules/member/what-payout.php
index d85b830acae8fde6d0aca23b5d2db8d1bb9133d5..1983bb7171fa9b53334fe02cd5ec8a7ff3d70111 100644 (file)
--- a/inc/modules/member/what-payout.php
+++ b/inc/modules/member/what-payout.php
@@ -36,9 +36,9 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
        // Don't call this directly!
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
-} elseif (!IS_LOGGED_IN()) {
+} elseif (!IS_MEMBER()) {
        // Not logged in
-       LOAD_URL(URL."/modules.php?module=index");
+       LOAD_URL("modules.php?module=index");
 } elseif ((!EXT_IS_ACTIVE("payout")) && (!IS_ADMIN())) {
        // Extension "payout" is not active
        ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE, "payout");
@@ -49,24 +49,24 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
 ADD_DESCR("member", basename(__FILE__));
 
 $result_depths = SQL_QUERY("SELECT level, percents FROM "._MYSQL_PREFIX."_refdepths ORDER BY level", __FILE__, __LINE__);
-$TPTS = "0";
+$TPTS = 0;
 while (list($lvl, $per) = SQL_FETCHROW($result_depths))
 {
        // Load referral points
-       $result_points = SQL_QUERY_ESC("SELECT points FROM "._MYSQL_PREFIX."_user_points WHERE userid=%d AND ref_depth=%d LIMIT 1",
+       $result_points = SQL_QUERY_ESC("SELECT points FROM "._MYSQL_PREFIX."_user_points WHERE userid=%s AND ref_depth=%s LIMIT 1",
         array($GLOBALS['userid'], bigintval($lvl)), __FILE__, __LINE__);
        if (SQL_NUMROWS($result_points) == 1)
        {
-               list($POINTS) = SQL_FETCHROW($result_points);
+               list($points) = SQL_FETCHROW($result_points);
                SQL_FREERESULT($result_points);
-               $TPTS += $POINTS;
+               $TPTS += $points;
        }
 }
 
 // Free memory
 SQL_FREERESULT($result_depths);
 
-$result = SQL_QUERY_ESC("SELECT used_points FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+$result = SQL_QUERY_ESC("SELECT used_points FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
  array($GLOBALS['userid']), __FILE__, __LINE__);
 list($USED) = SQL_FETCHROW($result);
 SQL_FREERESULT($result);
@@ -82,7 +82,7 @@ if (empty($_GET['payout']))
        // Load payout types
        $result = SQL_QUERY_ESC("SELECT id, type, rate, min_points, allow_url
 FROM "._MYSQL_PREFIX."_payout_types
-WHERE %d >= min_points
+WHERE %s >= min_points
 ORDER BY type", array(str_replace(",", ".", $TPTS)), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) > 0)
        {
@@ -94,7 +94,7 @@ ORDER BY type", array(str_replace(",", ".", $TPTS)), __FILE__, __LINE__);
 FROM "._MYSQL_PREFIX."_user_payouts AS p
 LEFT JOIN "._MYSQL_PREFIX."_payout_types AS t
 ON p.payout_id = t.id
-WHERE p.userid = %d
+WHERE p.userid = %s
 ORDER BY p.payout_timestamp DESC",
                 array($GLOBALS['userid']), __FILE__, __LINE__);
                if (SQL_NUMROWS($result_payouts) > 0)
@@ -109,7 +109,7 @@ ORDER BY p.payout_timestamp DESC",
                                $status = "<FONT class=\"member_failed\">".$status."</FONT>";
 
                                // Nothing entered must be secured in member/what-payputs.php !
-                               if ($allow == 'Y')
+                               if ($allow == "Y")
                                {
                                        // Banner/Textlink views/clicks request
                                        if (!empty($banner))
@@ -162,7 +162,7 @@ ORDER BY p.payout_timestamp DESC",
  else
 {
        // Chedk if he can get paid by selected type
-       $result = SQL_QUERY_ESC("SELECT type, rate, min_points, allow_url FROM "._MYSQL_PREFIX."_payout_types WHERE id=%d LIMIT 1",
+       $result = SQL_QUERY_ESC("SELECT type, rate, min_points, allow_url FROM "._MYSQL_PREFIX."_payout_types WHERE id=%s LIMIT 1",
         array(bigintval($_GET['payout'])), __FILE__, __LINE__);
 
        if (SQL_NUMROWS($result) == 1)
@@ -195,22 +195,14 @@ ORDER BY p.payout_timestamp DESC",
                                define('PAYOUT_POINTS_VALUE', $PAYOUT);
 
                                // Subtract points from member's account
-                               $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s WHERE userid=%d LIMIT 1",
-                                array($PAYOUT, $GLOBALS['userid']), __FILE__, __LINE__);
-
-                               // Update mediadata as well
-                               if (GET_EXT_VERSION("mediadata") >= "0.0.4")
-                               {
-                                       // Update database
-                                       MEDIA_UPDATE_ENTRY(array("total_points"), "sub", $PAYOUT);
-                               }
+                               SUB_POINTS($GLOBALS['userid'], $PAYOUT);
 
                                // Add entry to his tranfer history
-                               if ($allow == 'Y')
+                               if ($allow == "Y")
                                {
                                        // Banner/textlink ordered
                                        $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_payouts (userid, payout_total, payout_id, payout_timestamp, status, target_url, link_text, banner_url)
-VALUES (%d, %d, %d, UNIX_TIMESTAMP(), 'NEW', '%s', '%s', '%s')",
+VALUES (%s, %s, %s, UNIX_TIMESTAMP(), 'NEW', '%s', '%s', '%s')",
  array(
        $GLOBALS['userid'],
        bigintval($_POST['payout']),
@@ -235,7 +227,7 @@ VALUES (%d, %d, %d, UNIX_TIMESTAMP(), 'NEW', '%s', '%s', '%s')",
                                {
                                        // e-currency payout requested
                                        $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_payouts (userid, payout_total, target_account, target_bank, payout_id, payout_timestamp, status, password)
-VALUES (%d, %d, %d, '%s', %d, UNIX_TIMESTAMP(), 'NEW', '%s')",
+VALUES (%s, %s, %s, '%s', %s, UNIX_TIMESTAMP(), 'NEW', '%s')",
  array(
        $GLOBALS['userid'],
        bigintval($_POST['payout']),
@@ -257,7 +249,7 @@ VALUES (%d, %d, %d, '%s', %d, UNIX_TIMESTAMP(), 'NEW', '%s')",
 
                                // Generate task
                                $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_task_system (assigned_admin, status, task_type, subject, text, task_created, userid)
-VALUES (0, 'NEW', 'PAYOUT_REQUEST', '[payout:] ".PAYOUT_REQUEST_ADMIN."', '%s', UNIX_TIMESTAMP(), %d)",
+VALUES (0, 'NEW', 'PAYOUT_REQUEST', '[payout:] ".PAYOUT_REQUEST_ADMIN."', '%s', UNIX_TIMESTAMP(), %s)",
  array(
        $msg_adm,
        $GLOBALS['userid']
@@ -267,21 +259,12 @@ VALUES (0, 'NEW', 'PAYOUT_REQUEST', '[payout:] ".PAYOUT_REQUEST_ADMIN."', '%s',
                                SEND_EMAIL($GLOBALS['userid'], PAYOUT_REQUEST_MEMBER, $msg_mem);
 
                                // To admin(s)
-                               if (GET_EXT_VERSION("admins") >= "0.4.1")
-                               {
-                                       // Use new method
-                                       SEND_ADMIN_EMAILS_PRO(PAYOUT_REQUEST_ADMIN, $admin_tpl, "", $GLOBALS['userid']);
-                               }
-                                else
-                               {
-                                       // Use old method
-                                       SEND_ADMIN_EMAILS(PAYOUT_REQUEST_ADMIN, $msg_adm);
-                               }
+                               SEND_ADMIN_NOTIFICATION(PAYOUT_REQUEST_ADMIN, $admin_tpl, "", $GLOBALS['userid']);
 
                                // Load template and output it
                                LOAD_TEMPLATE("admin_settings_saved", false, PAYOUT_REQUEST_SENT);
                        }
-                        elseif ($allow == 'Y')
+                        elseif ($allow == "Y")
                        {
                                // Generate banner order form
                                LOAD_TEMPLATE("member_payout_form_banner");