]> git.mxchange.org Git - mailer.git/blobdiff - inc/modules/member/what-transfer.php
Some fixes for surfbar extension (#123), double->single, misc cleanups/fixes
[mailer.git] / inc / modules / member / what-transfer.php
index 0cc0be7d8001d79fc62f9de73e7c85a0dc8161d5..c094189b334be9f17a0cb7acbbac893e6904a5f7 100644 (file)
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Punktetransfers                                  *
  * -------------------------------------------------------------------- *
- *                                                                      *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
+ * $Tag:: 0.2.1-FINAL                                                 $ *
+ * $Author::                                                          $ *
+ * Needs to be in all Files and every File needs "svn propset           *
+ * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
  * For more information visit: http://www.mxchange.org                  *
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
-       $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
+if (!defined('__SECURITY')) {
+       $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php';
        require($INC);
-}
- elseif (!IS_LOGGED_IN())
-{
-       LOAD_URL(URL."/modules.php?module=index");
-}
- elseif ((!EXT_IS_ACTIVE("transfer")) && (!IS_ADMIN()))
-{
-       ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE, "transfer");
+} elseif (!IS_MEMBER()) {
+       redirectToUrl('modules.php?module=index');
+} elseif ((!EXT_IS_ACTIVE('transfer')) && (!IS_ADMIN())) {
+       addFatalMessage(__FILE__, __LINE__, generateExtensionInactiveNotInstalledMessage('transfer'));
        return;
 }
 
 // Add description as navigation point
-ADD_DESCR("member", basename(__FILE__));
+ADD_DESCR('member', __FILE__);
 
 // Load data
-$result = SQL_QUERY_ESC("SELECT opt_in FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
- array($GLOBALS['userid']), __FILE__, __LINE__);
+$result = SQL_QUERY_ESC("SELECT opt_in FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
+array(getUserId()), __FILE__, __LINE__);
 list($opt_in) = SQL_FETCHROW($result);
 
 // Free memory
 SQL_FREERESULT($result);
 
-$MODE = "";
-if (!empty($_GET['mode'])) $MODE = $_GET['mode'];
+$mode = '';
+if (REQUEST_ISSET_GET('mode')) $mode = REQUEST_GET('mode');
 
 // Check for "faker"
-if (($opt_in == 'N') && ($MODE == "new")) $MODE = "";
+if (($opt_in == 'N') && ($mode == "new")) $mode = '';
 
-switch ($MODE)
+switch ($mode)
 {
-case "new": // Start new transfer
-       // Get total points and subtract the balance amount from it = maximum transferable points
-       $result = SQL_QUERY_ESC("SELECT SUM(points) FROM "._MYSQL_PREFIX."_user_points WHERE userid=%d AND points > 0",
-        array($GLOBALS['userid']), __FILE__, __LINE__);
-       list($total) = SQL_FETCHROW($result);
-       SQL_FREERESULT($result);
-
-       // Get totally used points and password
-       $result = SQL_QUERY_ESC("SELECT used_points, password FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
-        array($GLOBALS['userid']), __FILE__, __LINE__);
-       list($used, $pass) = SQL_FETCHROW($result);
-       SQL_FREERESULT($result);
-
-       // Remember maximum value for template
-       define('__TRANSFER_MAX_VALUE', round($total - $used - $CONFIG['transfer_balance'] - 0.5));
-
-       if (isset($_POST['ok']))
-       {
-               // Add new transfer
-               if ($CONFIG['transfer_code'] > 0)
-               {
-                       // Check for code
-                       $code = GEN_RANDOM_CODE($CONFIG['transfer_code'], $_POST['code_chk'], $GLOBALS['userid'], __TRANSFER_MAX_VALUE);
-                       $valid_code = ($code == $_POST['code']);
-               }
-                else
-               {
-                       // Zero length (= disabled) is always valid!
-                       $valid_code = true;
-               }
-
-               // Test password
-               $valid_pass = ($pass == generateHash($_POST['password'], $pass));
+       case "new": // Start new transfer
+               // Get total points and subtract the balance amount from it = maximum transferable points
+               $total = GET_TOTAL_DATA(getUserId(), "user_points", "points")  - GET_TOTAL_DATA(getUserId(), "user_data", "used_points");
+
+               // Remember maximum value for template
+               define('__TRANSFER_MAX_VALUE', round($total - getConfig('transfer_balance') - 0.5));
+
+               if (isFormSent()) {
+                       // Add new transfer
+                       if (getConfig('transfer_code') > 0) {
+                               // Check for code
+                               $code = generateRandomCode(getConfig('transfer_code'), REQUEST_POST('code_chk'), getUserId(), constant('__TRANSFER_MAX_VALUE'));
+                               $valid_code = ($code == REQUEST_POST('code'));
+                       } else {
+                               // Zero length (= disabled) is always valid!
+                               $valid_code = true;
+                       }
 
-               // Test transfer amount
-               $valid_amount = ((!empty($_POST['points'])) && ($_POST['points'] <= __TRANSFER_MAX_VALUE));
+                       // Test password
+                       $valid_pass = ($pass == generateHash(REQUEST_POST('password'), $pass));
 
-               // Test reason for transfer
-               $valid_reason = (!empty($_POST['reason']));
+                       // Test transfer amount
+                       $valid_amount = ((REQUEST_ISSET_POST(('points'))) && (REQUEST_POST('points') <= constant('__TRANSFER_MAX_VALUE')));
 
-               // Test if a recipient is selected
-               $valid_recipient = ($_POST['to_uid'] > 0);
+                       // Test reason for transfer
+                       $valid_reason = (REQUEST_ISSET_POST(('reason')));
 
-               // Check for nickname extension and set additional data
-               $nick = false; $ADD = ", userid";
-               if (EXT_IS_ACTIVE("nickname"))
-               {
-                       $ADD = ", nickname";
-                       $nick = true;
-               }
-               // Re-check receivers and own personal data
-               $result = SQL_QUERY_ESC("SELECT userid, sex, surname, family, email".$ADD." FROM "._MYSQL_PREFIX."_user_data WHERE userid IN ('%s', '%s') AND status='CONFIRMED' ORDER BY userid LIMIT 2",
-                array($GLOBALS['userid'], bigintval($_POST['to_uid'])), __FILE__, __LINE__);
-               $valid_data = (SQL_NUMROWS($result) == 2);
+                       // Test if a recipient is selected
+                       $valid_recipient = (REQUEST_POST('to_uid') > 0);
 
-               if ($valid_code && $valid_pass && $valid_amount && $valid_reason && $valid_recipient)
-               {
-                       // Let's start the transfer and load user data
-                       list($uid1, $sex1, $sname1, $fname1, $email1, $nick1) = SQL_FETCHROW($result);
-                       list($uid2, $sex2, $sname2, $fname2, $email2, $nick2) = SQL_FETCHROW($result);
-                       SQL_FREERESULT($result);
-                       if ($uid1 == $GLOBALS['userid'])
-                       {
-                               // Data row 1 is sender's data
-                               define('__SENDER_SEX'     , TRANSLATE_SEX($sex1));
-                               define('__SENDER_NICK'    , $nick1);
-                               define('__SENDER_SNAME'   , $sname1);
-                               define('__SENDER_FNAME'   , $fname1);
-                               define('__SENDER_EMAIL'   , $email1);
-                               // Data row 2 is recpient's data
-                               define('__RECIPIENT_SEX'  , TRANSLATE_SEX($sex2));
-                               define('__RECIPIENT_NICK' , $nick2);
-                               define('__RECIPIENT_SNAME', $sname2);
-                               define('__RECIPIENT_FNAME', $fname2);
-                               define('__RECIPIENT_EMAIL', $email2);
-
-                               // Prepare variables for testing
-                               $TEST_NICK_SENDER = $nick1;
-                               $TEST_NICK_REC = $nick2;
-                       }
-                        else
-                       {
-                               // Data row 2 is sender's data
-                               define('__SENDER_SEX'     , TRANSLATE_SEX($sex2));
-                               define('__SENDER_NICK'    , $nick2);
-                               define('__SENDER_SNAME'   , $sname2);
-                               define('__SENDER_FNAME'   , $fname2);
-                               define('__SENDER_EMAIL'   , $email2);
-                               // Data row 1 is recpient's data
-                               define('__RECIPIENT_SEX'  , TRANSLATE_SEX($sex1));
-                               define('__RECIPIENT_NICK' , $nick1);
-                               define('__RECIPIENT_SNAME', $sname1);
-                               define('__RECIPIENT_FNAME', $fname1);
-                               define('__RECIPIENT_EMAIL', $email1);
-
-                               // Prepare variables for testing
-                               $TEST_NICK_SENDER = $nick2;
-                               $TEST_NICK_REC = $nick1;
+                       // Check for nickname extension and set additional data
+                       $nick = false; $add = ", userid";
+                       if (EXT_IS_ACTIVE('nickname')) {
+                               $add = ", nickname";
+                               $nick = true;
                        }
-                       // Sender's UID is always currently stored in cookie userid...
-                       define('__SENDER_UID'     , $GLOBALS['userid']);
-                       define('__RECIPIENT_UID'  , $_POST['to_uid']);
-
-                       $SENDER = __SENDER_UID;
-                       $RECIPIENT = __RECIPIENT_UID;
-                       if ($nick)
-                       {
-                               if (($TEST_NICK_SENDER != __SENDER_UID) && (!empty($TEST_NICK_SENDER)))
-                               {
-                                       $SENDER = __SENDER_NICK;
+
+                       // Re-check receivers and own personal data
+                       $result = SQL_QUERY_ESC("SELECT userid, gender, surname, family, email".$add." FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid IN ('%s','%s') AND `status`='CONFIRMED' ORDER BY userid LIMIT 2",
+                       array(getUserId(), bigintval(REQUEST_POST('to_uid'))), __FILE__, __LINE__);
+                       $valid_data = (SQL_NUMROWS($result) == 2);
+
+                       if ($valid_code && $valid_pass && $valid_amount && $valid_reason && $valid_recipient) {
+                               // Let's start the transfer and load user data
+                               list($uid1, $gender1, $sname1, $fname1, $email1, $nick1) = SQL_FETCHROW($result);
+                               list($uid2, $gender2, $sname2, $fname2, $email2, $nick2) = SQL_FETCHROW($result);
+                               SQL_FREERESULT($result);
+                               // @TODO Rewrite all these constants to array elements
+                               if ($uid1 == getUserId()) {
+                                       // Data row 1 is sender's data
+                                       define('__SENDER_GENDER'   , translateGender($gender1));
+                                       define('__SENDER_NICK'     , $nick1);
+                                       define('__SENDER_SNAME'    , $sname1);
+                                       define('__SENDER_FNAME'    , $fname1);
+                                       define('__SENDER_EMAIL'    , $email1);
+                                       // Data row 2 is recpient's data
+                                       define('__RECIPIENT_GENDER', translateGender($gender2));
+                                       define('__RECIPIENT_NICK'  , $nick2);
+                                       define('__RECIPIENT_SNAME' , $sname2);
+                                       define('__RECIPIENT_FNAME' , $fname2);
+                                       define('__RECIPIENT_EMAIL' , $email2);
+
+                                       // Prepare variables for testing
+                                       $TEST_NICK_SENDER = $nick1;
+                                       $TEST_NICK_REC = $nick2;
+                               } else {
+                                       // Data row 2 is sender's data
+                                       define('__SENDER_GENDER'   , translateGender($gender2));
+                                       define('__SENDER_NICK'     , $nick2);
+                                       define('__SENDER_SNAME'    , $sname2);
+                                       define('__SENDER_FNAME'    , $fname2);
+                                       define('__SENDER_EMAIL'    , $email2);
+                                       // Data row 1 is recpient's data
+                                       define('__RECIPIENT_GENDER', translateGender($gender1));
+                                       define('__RECIPIENT_NICK'  , $nick1);
+                                       define('__RECIPIENT_SNAME' , $sname1);
+                                       define('__RECIPIENT_FNAME' , $fname1);
+                                       define('__RECIPIENT_EMAIL' , $email1);
+
+                                       // Prepare variables for testing
+                                       $TEST_NICK_SENDER = $nick2;
+                                       $TEST_NICK_REC = $nick1;
                                }
-                               if (($TEST_NICK_REC != __RECIPIENT_UID) && (!empty($TEST_NICK_REC)))
-                               {
-                                       $RECIPIENT = __RECIPIENT_NICK;
+
+                               // Sender's UID is always currently stored in cookie userid...
+                               define('__SENDER_UID'     , getUserId());
+                               define('__RECIPIENT_UID'  , REQUEST_POST('to_uid'));
+
+                               $SENDER = constant('__SENDER_UID');
+                               $RECIPIENT = constant('__RECIPIENT_UID');
+                               if ($nick) {
+                                       if (($TEST_NICK_SENDER != constant('__SENDER_UID')) && (!empty($TEST_NICK_SENDER))) {
+                                               $SENDER = constant('__SENDER_NICK');
+                                       }
+
+                                       if (($TEST_NICK_REC != constant('__RECIPIENT_UID')) && (!empty($TEST_NICK_REC))) {
+                                               $RECIPIENT = constant('__RECIPIENT_NICK');
+                                       }
                                }
-                       }
 
-                       // Remember transfer reason and fancy date/time in constants
-                       define('__TRANSFER_REASON', $_POST['reason']);
-                       if (function_exists('CREATE_FANCY_TIME'))
-                       {
-                               define('__TRANSFER_EXPIRES', CREATE_FANCY_TIME($CONFIG['transfer_age']));
+                               // Remember transfer reason and fancy date/time in constants
+                               define('__TRANSFER_REASON', REQUEST_POST('reason'));
+                               define('__TRANSFER_EXPIRES', createFancyTime(getConfig('transfer_age')));
+
+                               // Generate tranafer id
+                               define('__TRANS_ID', bigintval(generateRandomCode("10", mt_rand(0, 99999), getUserId(), REQUEST_POST('reason'))));
+
+                               // Add entries to both tables
+                               SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_user_transfers_in` (userid, from_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
+                               array(bigintval(REQUEST_POST('to_uid')), getUserId(), bigintval(REQUEST_POST('points')), REQUEST_POST('reason'), __TRANS_ID),
+                               __FILE__, __LINE__);
+                               SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_user_transfers_out` (userid, to_uid, points, reason, time_trans, trans_id) VALUES ('%s','%s','%s','%s', UNIX_TIMESTAMP(),'%s')",
+                               array(getUserId(), bigintval(REQUEST_POST('to_uid')), bigintval(REQUEST_POST('points')), REQUEST_POST('reason'), __TRANS_ID),
+                               __FILE__, __LINE__);
+
+                               // Add points to account *directly* ...
+                               ADD_POINTS_REFSYSTEM_DIRECT('member_transfer', bigintval(REQUEST_POST('to_uid')), bigintval(REQUEST_POST('points')));
+
+                               // ... and add it to current user's used points
+                               SUB_POINTS('transfer', getUserId(), REQUEST_POST('points'));
+
+                               // First send email to recipient
+                               $msg = LOAD_EMAIL_TEMPLATE('member_transfer_recipient', '', constant('__RECIPIENT_UID'));
+                               sendEmail(constant('__RECIPIENT_EMAIL'), getMessage('TRANSFER_MEMBER_RECIPIENT_SUBJ') . ': ' . $SENDER, $msg);
+
+                               // Second send email to sender
+                               $msg = LOAD_EMAIL_TEMPLATE('member_transfer_sender', '', constant('__SENDER_UID'));
+                               sendEmail(constant('__SENDER_EMAIL'), getMessage('TRANSFER_MEMBER_SENDER_SUBJ') . ': ' . $RECIPIENT, $msg);
+
+                               // At last send admin mail(s)
+                               $ADMIN_SUBJ = sprintf("%s (%s->%s)", getMessage('TRANSFER_ADMIN_SUBJECT'), $SENDER, $RECIPIENT);
+                               sendAdminNotification($ADMIN_SUBJ, 'admin_transfer_points');
+
+                               // Transfer is completed
+                               LOAD_TEMPLATE('admin_settings_saved', false, getMessage('TRANSFER_COMPLETED')."<br /><a href=\"{!URL!}/modules.php?module=login&amp;what=transfer\">{--TRANSFER_CONTINUE_OVERVIEW--}</a>");
+                       } elseif (!$valid_code) {
+                               // Invalid Touring code!
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_CODE--}</div>");
+                               REQUEST_UNSET_POST('ok');
+                       } elseif (!$valid_pass) {
+                               // Wrong password entered
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_PASSWORD--}</div>");
+                               REQUEST_UNSET_POST('ok');
+                       } elseif (!$valid_amount) {
+                               // Too much points entered
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_POINTS--}</div>");
+                               REQUEST_UNSET_POST('ok');
+                       } elseif (!$valid_reason) {
+                               // No transfer reason entered
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_REASON--}</div>");
+                               REQUEST_UNSET_POST('ok');
+                       } elseif (!$valid_recipient) {
+                               // No recipient selected
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_RECIPIENT--}</div>");
+                               REQUEST_UNSET_POST('ok');
+                       } elseif (!$valid_data) {
+                               // No recipient selected
+                               LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_note\">{--TRANSFER_INVALID_DATA--}</div>");
+                               REQUEST_UNSET_POST('ok');
                        }
-                        else
-                       {
-                               define('__TRANSFER_EXPIRES', round($CONFIG['transfer_age']/60/60/24)." ".DAYS);
+               }
+
+               if (!isFormSent()) {
+                       // Load member list
+                       if (EXT_IS_ACTIVE('nickname')) {
+                               // Load userid and nickname
+                               $result = SQL_QUERY_ESC("SELECT userid, nickname FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `status`='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY `userid` ASC",
+                                       array(getUserId()), __FILE__, __LINE__);
+                       } else {
+                               // Load only userid
+                               $result = SQL_QUERY_ESC("SELECT userid, userid FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `status`='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY `userid` ASC",
+                                       array(getUserId()), __FILE__, __LINE__);
                        }
 
-                       // Generate tranafer id
-                       define('__TRANS_ID', bigintval(GEN_RANDOM_CODE("10", rand(0, 99999), $GLOBALS['userid'], $_POST['reason'])));
-
-                       // Add entries to both tables
-                       $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_transfers_in (userid, from_uid, points, reason, time_trans, trans_id) VALUES ('%s', '%s', '%s', '%s', UNIX_TIMESTAMP(), '%s')",
-                        array(bigintval($_POST['to_uid']), $GLOBALS['userid'], bigintval($_POST['points']), addslashes($_POST['reason']), __TRANS_ID),
-                        __FILE__, __LINE__);
-                       $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_transfers_out (userid, to_uid, points, reason, time_trans, trans_id) VALUES ('%s', '%s', '%s', '%s', UNIX_TIMESTAMP(), '%s')",
-                        array($GLOBALS['userid'], bigintval($_POST['to_uid']), bigintval($_POST['points']), addslashes($_POST['reason']), __TRANS_ID),
-                        __FILE__, __LINE__);
-
-                       // Add points to account *directly* ...
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_points SET points=points+%s WHERE userid=%d AND ref_depth='0' LIMIT 1",
-                        array(bigintval($_POST['points']), bigintval($_POST['to_uid'])), __FILE__, __LINE__);
-
-                       // ... and add it to current user's used points
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET used_points=used_points+%s WHERE userid=%d LIMIT 1",
-                        array(bigintval($_POST['points']), $GLOBALS['userid']), __FILE__, __LINE__);
-
-                       // First send email to recipient
-                       $msg = LOAD_EMAIL_TEMPLATE("member_transfer_recipient", "", __RECIPIENT_UID);
-                       SEND_EMAIL(__RECIPIENT_EMAIL, TRANSFER_MEMBER_RECIPIENT_SUBJ.": ".$SENDER, $msg);
-
-                       // Second send email to sender
-                       $msg = LOAD_EMAIL_TEMPLATE("member_transfer_sender", "", __SENDER_UID);
-                       SEND_EMAIL(__SENDER_EMAIL, TRANSFER_MEMBER_SENDER_SUBJ.": ".$RECIPIENT, $msg);
-
-                       // At last send admin mail(s)
-                       $ADMIN_SUBJ = TRANSFER_ADMIN_SUBJECT." (".$SENDER."->".$RECIPIENT.")";
-                       if (GET_EXT_VERSION("admins") >= "0.4.1")
-                       {
-                               SEND_ADMIN_EMAILS_PRO($ADMIN_SUBJ, "admin_transfer_points");
+                       if (SQL_NUMROWS($result) > 0) {
+                               // Load list
+                               $OUT  = "<select name=\"to_uid\" size=\"1\" class=\"member_select\">
+       <option value=\"0\">{--SELECT_NONE--}</option>\n";
+                               // @TODO Try to rewrite his to $content = SQL_FETCHARRAY(), see some lines above for two different queries
+                               while (list($uid, $nick) = SQL_FETCHROW($result)) {
+                                       $OUT .= "       <option value=\"".$uid."\"";
+                                       if ((REQUEST_ISSET_POST(('to_uid'))) && (REQUEST_POST('to_uid') == $uid)) $OUT .= ' selected="selected"';
+                                       $OUT .= ">";
+                                       if (($nick != $uid) && (!empty($nick))) {
+                                               // Output nickname
+                                               $OUT .= $nick;
+                                       } else {
+                                               // Output userid
+                                               $OUT .= $uid;
+                                       }
+                                       $OUT .= "</option>\n";
+                               }
+                               $OUT .= "</select>\n";
+                               define('__TRANSFER_TO_DISABLED', '');
+
+                               // Free memory
+                               SQL_FREERESULT($result);
+                       } else {
+                               // No one else is opt-in
+                               $OUT = getMessage('TRANSFER_NO_ONE_ELSE_OPT_IN');
+                               define('__TRANSFER_TO_DISABLED', ' disabled="disabled"');
                        }
-                        else
-                       {
-                               $msg = LOAD_EMAIL_TEMPLATE("admin_transfer_points");
-                               SEND_ADMIN_EMAILS($ADMIN_SUBJ, $msg);
+
+                       // Transfer output to constant for the template
+                       define('__TRANSFER_USERID_SELECTION', $OUT);
+
+                       // Generate Code
+                       if (getConfig('transfer_code') > 0) {
+                               $rand = mt_rand(0, 99999);
+                               $code = generateRandomCode(getConfig('transfer_code'), $rand, getUserId(), constant('__TRANSFER_MAX_VALUE'));
+                               $img = GENERATE_IMAGE($code, false);
+                               define('__TRANSFER_IMAGE_INPUT', "<input type=\"hidden\" name=\"code_chk\" value=\"".$rand."\" /><input type=\"text\" name=\"code\" class=\"member_normal\" size=\"5\" maxlength=\"7\"{!__TRANSFER_TO_DISABLED!} />&nbsp;".$img);
+                       } else {
+                               $code = '00000';
+                               define('__TRANSFER_IMAGE_INPUT', getMessage('TRANSFER_NO_CODE'));
                        }
 
-                       // Transfer is completed
-                       OUTPUT_HTML ("<P>");
-                       LOAD_TEMPLATE("admin_settings_saved", false, TRANSFER_COMPLETED."<BR><A href=\"".URL."/modules.php?module=login&amp;what=transfer\">".TRANSFER_CONTINUE_OVERVIEW."</A>");
-                       OUTPUT_HTML ("</P>");
-               }
-                elseif (!$valid_code)
-               {
-                       // Invalid Touring code!
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_CODE."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-                elseif (!$valid_pass)
-               {
-                       // Wrong password entered
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_PASSWORD."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-                elseif (!$valid_amount)
-               {
-                       // Too much points entered
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_POINTS."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-                elseif (!$valid_reason)
-               {
-                       // No transfer reason entered
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_REASON."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-                elseif (!$valid_recipient)
-               {
-                       // No recipient selected
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_RECIPIENT."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-                elseif (!$valid_data)
-               {
-                       // No recipient selected
-                       OUTPUT_HTML ("<P><STRONG class=\"member_note\">".TRANSFER_INVALID_DATA."</STRONG></P>");
-                       unset($_POST['ok']);
-               }
-       }
-       if (!isset($_POST['ok']))
-       {
-               // Load member list
-               if (EXT_IS_ACTIVE("nickname"))
-               {
-                       // Load userid and nickname
-                       $result = SQL_QUERY_ESC("SELECT userid, nickname FROM "._MYSQL_PREFIX."_user_data WHERE status='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
-                        array($GLOBALS['userid']), __FILE__, __LINE__);
-               }
-                else
-               {
-                       // Load only userid
-                       $result = SQL_QUERY_ESC("SELECT userid, userid FROM "._MYSQL_PREFIX."_user_data WHERE status='CONFIRMED' AND opt_in='Y' AND userid != '%s' ORDER BY userid",
-                        array($GLOBALS['userid']), __FILE__, __LINE__);
-               }
-               if (SQL_NUMROWS($result) > 0)
-               {
-                       // Load list
-                       $OUT  = "<SELECT name=\"to_uid\" size=\"1\" class=\"member_select\">
-  <OPTION value=\"0\">".SELECT_NONE."</OPTION>\n";
-                       while (list($uid, $nick) = SQL_FETCHROW($result))
-                       {
-                               $OUT .= "<OPTION value=\"".$uid."\"";
-                               if ((isset($_POST['to_uid'])) && ($_POST['to_uid'] == $uid)) $OUT .= " selected=\"selected\"";
-                               $OUT .= ">";
-                               if (($nick != $uid) && (!empty($nick)))
-                               {
-                                       // Output nickname
-                                       $OUT .= $nick;
-                               }
-                                else
-                               {
-                                       // Output userid
-                                       $OUT .= $uid;
-                               }
-                               $OUT .= "</OPTION>\n";
+                       // Transfer maybe already entered valued'
+                       if (REQUEST_ISSET_GET('ok')) {
+                               // Get values from form
+                               define('__TRANSFER_POINTS_VALUE', bigintval(REQUEST_POST('points')));
+                               define('__TRANSFER_REASON_VALUE', strip_tags(REQUEST_POST('reason')));
+                       } else {
+                               // Set empty values
+                               define('__TRANSFER_POINTS_VALUE', '');
+                               define('__TRANSFER_REASON_VALUE', '');
                        }
-                       $OUT .= "</SELECT>\n";
-                       define('__TRANSFER_TO_DISABLED', "");
 
-                       // Free memory
-                       SQL_FREERESULT($result);
-               }
-                else
-               {
-                       // No one else is opt-in
-                       $OUT = TRANSFER_NO_ONE_ELSE_OPT_IN;
-                       define('__TRANSFER_TO_DISABLED', " disabled");
+                       // Output form
+                       LOAD_TEMPLATE('member_transfer_new');
                }
-               // Transfer output to constant for the template
-               define('__TRANSFER_USERID_SELECTION', $OUT);
+               break;
 
-               // Generate Code
-               if ($CONFIG['transfer_code'] > 0)
-               {
-                       $rand = rand(0, 99999);
-                       $code = GEN_RANDOM_CODE($CONFIG['transfer_code'], $rand, $GLOBALS['userid'], __TRANSFER_MAX_VALUE);
-                       $img = GENERATE_IMAGE($code, false);
-                       define('__TRANSFER_IMAGE_INPUT', "<INPUT type=\"hidden\" name=\"code_chk\" value=\"".$rand."\"><INPUT type=\"text\" name=\"code\" class=\"member_normal\" size=\"5\" maxlength=\"7\"".__TRANSFER_TO_DISABLED.">&nbsp;".$img);
-               }
-                else
+       case 'list_in': // List only incoming transactions
+       case 'list_out': // List only outgoing transactions
+               // As you can see I put list_in and list_out together. I now do a switch() again on it for the right SQL command
+               switch ($mode)
                {
-                       $code = "00000";
-                       define('__TRANSFER_IMAGE_INPUT', TRANSFER_NO_CODE);
+                       case 'list_in':
+                               $sql = "SELECT trans_id, from_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
+                               // @TODO Rewrite these constants
+                               $NOTHING = getMessage('TRANSFER_NO_INCOMING_TRANSFERS');
+                               define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_INCOMING'));
+                               define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_INCOMING'));
+                               break;
+
+                       case 'list_out':
+                               $sql = "SELECT trans_id, to_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s ORDER BY time_trans DESC LIMIT ".getConfig('transfer_max');
+                               // @TODO Rewrite these constants
+                               $NOTHING = getMessage('TRANSFER_NO_OUTGOING_TRANSFERS');
+                               define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_OUTGOING'));
+                               define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_OUTGOING'));
+                               break;
                }
 
-               // Transfer maybe already entered valued'
-               if (isset($_GET['ok'])) {
-                       // Get values from form
-                       define('__TRANSFER_POINTS_VALUE', bigintval($_POST['points']));
-                       define('__TRANSFER_REASON_VALUE', strip_tags($_POST['reason']));
+               // Run the SQL command
+               $total = 0;
+               $result = SQL_QUERY_ESC($sql, array(getUserId()), __FILE__, __LINE__);
+               if (SQL_NUMROWS($result) > 0) {
+                       $OUT = ''; $SW = 2;
+                       // @TODO This should be somehow rewritten to $content = SQL_FETCHARRAY(), see switch() block above for SQL queries
+                       while (list($tid, $uid, $points, $reason, $stamp) = SQL_FETCHROW($result)) {
+                               // Rewrite points
+                               if ($type == 'OUT') $points = $points.'-';
+
+                               // Prepare content for template
+                               $content = array(
+                               'sw'     => $SW,
+                               'tid'    => $id,
+                               'stamp'  => generateDateTime($stamp, '3'),
+                               'uid'    => $uid,
+                               'reason' => $reason,
+                               'points' => translateComma($points)
+                               );
+
+                               // Load row template
+                               $OUT .= LOAD_TEMPLATE('member_transfer_row2', true, $content);
+
+                               // Add points and switch color
+                               $total += $points;
+                               $SW = 3 - $SW;
+                       } // END - while
+
+                       // Free memory
+                       SQL_FREERESULT($result);
                } else {
-                       // Set empty values
-                       define('__TRANSFER_POINTS_VALUE', "");
-                       define('__TRANSFER_REASON_VALUE', "");
+                       // Nothing for in or out
+                       $OUT = "<tr>
+  <td colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
+    ".LOAD_TEMPLATE('admin_settings_saved', true, $NOTHING)."
+  </td>
+</tr>";
                }
 
-               // Output form
-               LOAD_TEMPLATE("member_transfer_new");
-       }
-       break;
-
-case "list_in": // List only incoming transactions
-case "list_out": // List only outgoing transactions
-       // As you can see I put list_in and list_out together. I now do a switch() again on it for the right SQL command
-       switch ($MODE)
-       {
-       case "list_in":
-               $SQL = "SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d ORDER BY time_trans DESC LIMIT ".$CONFIG['transfer_max'];
-               $NOTHING = TRANSFER_NO_INCOMING_TRANSFERS;
-               define('__TRANSFER_SUM', TRANSFER_TOTAL_INCOMING);
-               define('__TRANSFER_TITLE', TRANSFER_LIST_INCOMING);
-               break;
+               // ... and add them to a constant for the template
+               // @TODO Rewrite these constants
+               define('__TRANSFER_ROWS', $OUT);
+
+               // Remeber total amount
+               define('__TRANSFER_TOTAL_VALUE', $total);
 
-       case "list_out":
-               $SQL = "SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d ORDER BY time_trans DESC LIMIT ".$CONFIG['transfer_max'];
-               $NOTHING = TRANSFER_NO_OUTGOING_TRANSFERS;
-               define('__TRANSFER_SUM', TRANSFER_TOTAL_OUTGOING);
-               define('__TRANSFER_TITLE', TRANSFER_LIST_OUTGOING);
+               // Load final template
+               LOAD_TEMPLATE('member_transfer_list');
                break;
-       }
-
-       // Run the SQL command
-       $total = "0";
-       $result = SQL_QUERY_ESC($SQL, array($GLOBALS['userid']), __FILE__, __LINE__);
-       if (SQL_NUMROWS($result) > 0)
-       {
-               $OUT = ""; $SW = 2;
-               while (list($tid, $uid, $points, $reason, $stamp) = SQL_FETCHROW($result))
-               {
-                       if ($type == "OUT") $points = "$points-";
-                       $OUT .= "<TR>
-  <TD class=\"transfer_row1 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row1\">".$tid."</FONT>
-  </TD>
-  <TD class=\"transfer_row2 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row2\">".MAKE_DATETIME($stamp, "3")."</FONT>
-  </TD>
-  <TD class=\"transfer_row3 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row3\">".$uid."</FONT>
-  </TD>
-  <TD class=\"transfer_row4 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row4\">".$reason."</FONT>
-  </TD>
-  <TD class=\"transfer_row5 switch_sw".$SW." bottom2\">
-    <FONT class=\"transfer_row5\">".$points."</FONT>
-  </TD>
-</TR>\n";
-                       $total += $points;
-                       $SW = 3 - $SW;
-               }
 
-               // Free memory
-               SQL_FREERESULT($result);
-       }
-        else
-       {
-               // Nothing for in or out
-               $OUT = "<TR>
-  <TD colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
-    ".LOAD_TEMPLATE("admin_settings_saved", true, $NOTHING)."
-  </TD>
-</TR>";
-       }
-
-       // ... and add them to a constant for the template
-       define('__TRANSFER_ROWS', $OUT);
-
-       // Remeber total amount
-       define('__TRANSFER_TOTAL_VALUE', $total);
-
-       // Load final template
-       LOAD_TEMPLATE("member_transfer_list");
-       break;
-
-case "list_all": // List all transactions
-       // We fill a temporay table with data from both tables. This is much easier
-       // to code and unstand by you as sub-SELECT queries. I know this is not the
-       // fastest way but it shall be fine for now.
-       //
-       // First of all create the temporary table
-       $result = SQL_QUERY("CREATE TEMPORARY TABLE "._MYSQL_PREFIX."_transfers_tmp (
-trans_id varchar(12) not null default '',
-party_uid bigint(20) not null default '0',
-points bigint(20) not null default '0',
-reason varchar(255) not null default '',
-time_trans varchar(10) not null default '0',
-trans_type enum('IN', 'OUT') not null default 'IN',
+                       case 'list_all': // List all transactions
+                               // We fill a temporary table with data from both tables. This is much easier
+                               // to code and unstand by you as sub-SELECT queries. I know this is not the
+                               // fastest way but it shall be fine for now.
+                               //
+                               // First of all create the temporary table
+                               $result = SQL_QUERY("CREATE TEMPORARY TABLE `{!_MYSQL_PREFIX!}_transfers_tmp` (
+trans_id VARCHAR(12) NOT NULL DEFAULT '',
+party_uid BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
+points BIGINT(20) UNSIGNED NOT NULL DEFAULT '0',
+reason VARCHAR(255) NOT NULL DEFAULT '',
+time_trans VARCHAR(10) NOT NULL DEFAULT '0',
+trans_type ENUM('IN','OUT') NOT NULL DEFAULT 'IN',
 KEY(party_uid)
 ) TYPE=HEAP", __FILE__, __LINE__);
 
-       // Let's begin with the incoming list
-       $result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d ORDER BY id LIMIT %s",
-array($GLOBALS['userid'], $CONFIG['transfer_max']), __FILE__, __LINE__);
-       while ($DATA = SQL_FETCHROW($result))
-       {
-               $DATA[] = "IN";
-               $DATA = implode("', '", $DATA);
-               $res_temp = SQL_QUERY("INSERT INTO "._MYSQL_PREFIX."_transfers_tmp (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
-       }
-
-       // Free memory
-       SQL_FREERESULT($result);
-
-       // As the last table transfer data from outgoing table to temporary
-       $result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d ORDER BY id LIMIT %s",
-array($GLOBALS['userid'], $CONFIG['transfer_max']), __FILE__, __LINE__);
-       while ($DATA = SQL_FETCHROW($result))
-       {
-               $DATA[] = "OUT";
-               $DATA = implode("', '", $DATA);
-               $res_temp = SQL_QUERY("INSERT INTO "._MYSQL_PREFIX."_transfers_tmp (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
-       }
-
-       // Free memory
-       SQL_FREERESULT($result);
-
-       $total = "0";
-       if (SQL_NUMROWS($result) > 0)
-       {
-               // Output rows
-               $OUT = ""; $SW = 2;
-               $result = SQL_QUERY("SELECT party_uid, trans_id, points, reason, time_trans, trans_type FROM "._MYSQL_PREFIX."_transfers_tmp ORDER BY time_trans DESC", __FILE__, __LINE__);
-               while(list($uid, $idx, $points, $reason, $stamp, $type) = SQL_FETCHROW($result))
-               {
-                       if ($type == "OUT") $points = "-$points";
-                       $OUT .= "<TR>
-  <TD class=\"transfer_row1 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row1\">".$idx."</FONT>
-  </TD>
-  <TD class=\"transfer_row2 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row2\">".MAKE_DATETIME($stamp, "3")."</FONT>
-  </TD>
-  <TD class=\"transfer_row3 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row3\">".$uid."</FONT>
-  </TD>
-  <TD class=\"transfer_row4 switch_sw".$SW." bottom2 right2\">
-    <FONT class=\"transfer_row4\">".$reason."</FONT>
-  </TD>
-  <TD class=\"transfer_row5 switch_sw".$SW." bottom2\">
-    <FONT class=\"transfer_row5\">".$points."</FONT>
-  </TD>
-</TR>\n";
-                       $total += $points;
-                       $SW = 3 - $SW;
-               }
+                               // Let's begin with the incoming list
+                               $result = SQL_QUERY_ESC("SELECT trans_id, from_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s ORDER BY `id` LIMIT %s",
+                               array(getUserId(), getConfig('transfer_max')), __FILE__, __LINE__);
+                               while ($DATA = SQL_FETCHROW($result)) {
+                                       $DATA[] = 'IN';
+                                       $DATA = implode("','", $DATA);
+                                       $res_temp = SQL_QUERY("INSERT INTO `{!_MYSQL_PREFIX!}_transfers_tmp` (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
+                               }
 
-               // Free memory
-               SQL_FREERESULT($result);
-       }
-        else
-       {
-               // Nothing for in and out
-               $OUT = "<TR>
-  <TD colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
-    ".LOAD_TEMPLATE("admin_settings_saved", true, TRANSFER_NO_INOUT_TRANSFERS)."
-  </TD>
-</TR>";
-       }
-
-       // ... and add them to a constant for the template
-       define('__TRANSFER_ROWS', $OUT);
-
-       // Remeber total amount
-       define('__TRANSFER_TOTAL_VALUE', $total);
-
-       // Set title
-       define('__TRANSFER_TITLE', TRANSFER_LIST_ALL);
-
-       // Set "balance" word
-       define('__TRANSFER_SUM', TRANSFER_TOTAL_BALANCE);
-
-       // Load final template
-       LOAD_TEMPLATE("member_transfer_list");
-
-       // At the end we don't need a temporay table in memory
-       $result = SQL_QUERY("DROP TABLE IF EXISTS "._MYSQL_PREFIX."_transfers_tmp", __FILE__, __LINE__);
-
-       // Free some memory...
-       SQL_FREERESULT($result);
-       break;
-
-case "": // Overview page
-       // Check incoming transfers
-       $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_in WHERE userid=%d", array($GLOBALS['userid']), __FILE__, __LINE__);
-       list($dmy) = SQL_FETCHROW($result);
-       SQL_FREERESULT($result);
-
-       $total=$dmy;
-       if ($dmy > 0)
-       {
-               define('__TRANSFER_IN_LINK', "<A href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_in\">".$dmy."</A>");
-       }
-        else
-       {
-               define('__TRANSFER_IN_LINK', $dmy);
-       }
-
-       // Check outgoing transfers
-       $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM "._MYSQL_PREFIX."_user_transfers_out WHERE userid=%d", array($GLOBALS['userid']), __FILE__, __LINE__);
-       list($dmy) = SQL_FETCHROW($result);
-       SQL_FREERESULT($result);
-
-       $total+=$dmy;
-       if ($dmy > 0)
-       {
-               define('__TRANSFER_OUT_LINK', "<A href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_out\">".$dmy."</A>");
-       }
-        else
-       {
-               define('__TRANSFER_OUT_LINK', $dmy);
-       }
-
-       // Total transactions
-       if ($total > 0)
-       {
-               define('__TRANSFER_ALL_LINK', "<A href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=list_all\">".$total."</A>");
-       }
-        else
-       {
-               define('__TRANSFER_ALL_LINK', $total);
-       }
-
-       if (isset($_POST['ok']))
-       {
-               // Save settings
-               $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET opt_in='%s' WHERE userid=%d LIMIT 1",
-                array($_POST['opt_in'], $GLOBALS['userid']), __FILE__, __LINE__);
-
-               // Rember for next switch() command
-               $opt_in = $_POST['opt_in'];
-
-               // "Settings saved..."
-               OUTPUT_HTML ("<P><STRONG class=\"member_done\">".SETTINGS_SAVED."</STRONG></P>");
-       }
-       switch ($opt_in)
-       {
-       case 'Y':
-               define('__TRANSFER_ALLOW_Y', " checked");
-               define('__TRANSFER_ALLOW_N', "");
-               define('__TRANSFER_NEW_LINK', "<A href=\"".URL."/modules.php?module=login&amp;what=transfer&amp;mode=new\">".TRANSFER_NOW_LINK."</A>");
-               break;
+                               // Free memory
+                               SQL_FREERESULT($result);
 
-       case 'N':
-               define('__TRANSFER_ALLOW_Y', "");
-               define('__TRANSFER_ALLOW_N', " checked");
-               define('__TRANSFER_NEW_LINK', TRANSFER_PLEASE_ALLOW_OPT_IN);
-               break;
-       }
-
-       // Check for latest out-transfers
-       $result = SQL_QUERY_ESC("SELECT time_trans FROM "._MYSQL_PREFIX."_user_transfers_out WHERE time_trans > ".(time() - $CONFIG['transfer_timeout'])." AND userid=%d ORDER BY time_trans DESC LIMIT 1", array($GLOBALS['userid']), __FILE__, __LINE__);
-       if (SQL_NUMROWS($result) == 0)
-       {
-               // Load template
-               define('__TRANSFER_SETTINGS_CONTENT', LOAD_TEMPLATE("member_transfer_settings", true));
-       }
-        else
-       {
-               // Load newest transaction
-               list($newest) = SQL_FETCHROW($result);
-               SQL_FREERESULT($result);
-               define('__TRANSFER_SETTINGS_CONTENT', TRANSFER_LATEST_IS_1.MAKE_DATETIME($newest, "3").TRANSFER_LATEST_IS_2);
-       }
-       // Load template
-       LOAD_TEMPLATE("member_transfer_overview");
-       break;
+                               // As the last table transfer data from outgoing table to temporary
+                               $result = SQL_QUERY_ESC("SELECT trans_id, to_uid, points, reason, time_trans FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s ORDER BY `id` LIMIT %s",
+                               array(getUserId(), getConfig('transfer_max')), __FILE__, __LINE__);
+                               while ($DATA = SQL_FETCHROW($result)) {
+                                       $DATA[] = 'OUT';
+                                       $DATA = implode("','", $DATA);
+                                       $res_temp = SQL_QUERY("INSERT INTO `{!_MYSQL_PREFIX!}_transfers_tmp` (trans_id, party_uid, points, reason, time_trans, trans_type) VALUES ('".$DATA."')", __FILE__, __LINE__);
+                               }
+
+                               // Free memory
+                               SQL_FREERESULT($result);
+
+                               $total = 0;
+                               if (SQL_NUMROWS($result) > 0) {
+                                       // Search for entries
+                                       $result = SQL_QUERY("SELECT party_uid, trans_id, points, reason, time_trans, trans_type FROM `{!_MYSQL_PREFIX!}_transfers_tmp` ORDER BY time_trans DESC",
+                                       __FILE__, __LINE__);
+
+                                       // Output rows
+                                       $OUT = ''; $SW = 2;
+                                       while ($content = SQL_FETCHARRAY($result)) {
+                                               // Rewrite points
+                                               if ($content['trans_type'] == 'OUT') $content['points'] = '-'.$content['points']."";
+
+                                               // Prepare content for template
+                                               $content['sw']     = $SW;
+                                               $content['time']   = generateDateTime($content['time_trans'], '3');
+                                               $content['points'] = translateComma($content['points']);
+
+                                               // Load row template
+                                               $OUT .= LOAD_TEMPLATE("member_transfer_row", true, $content);
+
+                                               // Add points and switch color
+                                               $total += $content['points'];
+                                               $SW = 3 - $SW;
+                                       } // END - while
+
+                                       // Free memory
+                                       SQL_FREERESULT($result);
+                               } else {
+                                       // Nothing for in and out
+                                       $OUT = "<tr>
+  <td colspan=\"5\" align=\"center\" class=\"bottom2\" height=\"70\">
+    ".LOAD_TEMPLATE('admin_settings_saved', true, getMessage('TRANSFER_NO_INOUT_TRANSFERS'))."
+  </td>
+</tr>";
+                               }
+
+                               // ... and add them to a constant for the template
+                               // @TODO Rewrite all these constants
+                               define('__TRANSFER_ROWS', $OUT);
+
+                               // Remeber total amount
+                               define('__TRANSFER_TOTAL_VALUE', $total);
+
+                               // Set title
+                               define('__TRANSFER_TITLE', getMessage('TRANSFER_LIST_ALL'));
+
+                               // Set "balance" word
+                               define('__TRANSFER_SUM', getMessage('TRANSFER_TOTAL_BALANCE'));
+
+                               // Load final template
+                               LOAD_TEMPLATE('member_transfer_list');
+
+                               // At the end we don't need a temporary table in memory
+                               $result = SQL_QUERY("DROP TABLE IF EXISTS `{!_MYSQL_PREFIX!}_transfers_tmp`", __FILE__, __LINE__);
+
+                               // Free some memory...
+                               SQL_FREERESULT($result);
+                               break;
+
+                       case '': // Overview page
+                               // Check incoming transfers
+                               $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM `{!_MYSQL_PREFIX!}_user_transfers_in` WHERE userid=%s", array(getUserId()), __FILE__, __LINE__);
+                               list($dmy) = SQL_FETCHROW($result);
+                               SQL_FREERESULT($result);
+
+                               $total=$dmy;
+                               if ($dmy > 0) {
+                                       define('__TRANSFER_IN_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_in\">".$dmy."</a>");
+                               } else {
+                                       define('__TRANSFER_IN_LINK', $dmy);
+                               }
+
+                               // Check outgoing transfers
+                               $result = SQL_QUERY_ESC("SELECT COUNT(id) FROM `{!_MYSQL_PREFIX!}_user_transfers_out` WHERE userid=%s", array(getUserId()), __FILE__, __LINE__);
+                               list($dmy) = SQL_FETCHROW($result);
+                               SQL_FREERESULT($result);
+
+                               $total+=$dmy;
+                               if ($dmy > 0) {
+                                       define('__TRANSFER_OUT_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_out\">".$dmy."</a>");
+                               } else {
+                                       define('__TRANSFER_OUT_LINK', $dmy);
+                               }
+
+                               // Total transactions
+                               if ($total > 0) {
+                                       define('__TRANSFER_ALL_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=list_all\">".$total."</a>");
+                               } else {
+                                       define('__TRANSFER_ALL_LINK', $total);
+                               }
+
+                               if (isFormSent()) {
+                                       // Save settings
+                                       SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET opt_in='%s' WHERE userid=%s LIMIT 1",
+                                       array(REQUEST_POST('opt_in'), getUserId()), __FILE__, __LINE__);
+
+                                       // Rember for next switch() command
+                                       $opt_in = REQUEST_POST('opt_in');
+
+                                       // "Settings saved..."
+                                       LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"member_done\">{--SETTINGS_SAVED--}</div>");
+                               } // END - if
+
+                               switch ($opt_in) {
+                                       case 'Y':
+                                               define('__TRANSFER_ALLOW_Y', ' checked="checked"');
+                                               define('__TRANSFER_ALLOW_N', '');
+                                               define('__TRANSFER_NEW_LINK', "<a href=\"{!URL!}/modules.php?module=login&amp;what=transfer&amp;mode=new\">{--TRANSFER_NOW_LINK--}</a>");
+                                               break;
+
+                                       case 'N':
+                                               define('__TRANSFER_ALLOW_Y', '');
+                                               define('__TRANSFER_ALLOW_N', ' checked="checked"');
+                                               define('__TRANSFER_NEW_LINK', getMessage('TRANSFER_PLEASE_ALLOW_OPT_IN'));
+                                               break;
+                               } // END - switch
+
+                               // Check for latest out-transfers
+                               $result = SQL_QUERY_ESC("SELECT time_trans
+FROM `{!_MYSQL_PREFIX!}_user_transfers_out`
+WHERE time_trans > (UNIX_TIMESTAMP() - %s) AND `userid`=%s
+ORDER BY time_trans DESC
+LIMIT 1",
+                                       array(getConfig('transfer_timeout'), getUserId()), __FILE__, __LINE__);
+                               if (SQL_NUMROWS($result) == 0) {
+                                       // Load template
+                                       define('__TRANSFER_SETTINGS_CONTENT', LOAD_TEMPLATE("member_transfer_settings", true));
+                               } else {
+                                       // Load newest transaction
+                                       list($newest) = SQL_FETCHROW($result);
+                                       SQL_FREERESULT($result);
+                                       define('__TRANSFER_SETTINGS_CONTENT', sprintf(getMessage('TRANSFER_LATEST_IS'), generateDateTime($newest, '3')));
+                               }
+
+                               // Load template
+                               LOAD_TEMPLATE("member_transfer_overview");
+                               break;
 }
+
 //
 ?>