Complete rewrite of and , wrapper functions added, see bug #101
[mailer.git] / inc / modules / member / what-wernis.php
index 057b5864dcfcb4bcc4e2fb1385650073d0a5bcee..9d3a8c991ab09b6b7fa814f55ad650a6d58babcf 100644 (file)
@@ -57,7 +57,7 @@ if ((getConfig('wernis_api_id') == "") || (getConfig('wernis_api_md5') == "")) {
 $content = array(); $points = false;
 
 // Is the mode set (withdraw or payout)
-if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
+if ((!REQUEST_ISSET_GET(('mode'))) || (REQUEST_GET('mode') == "choose")) {
        // Let the user choose what he wants to do
        $content['refid']    = bigintval(getConfig('wernis_refid'));
        $content['wds66_id'] = 0;
@@ -76,9 +76,9 @@ if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
        SQL_FREERESULT($result);
 
        // Is there an ID?
-       if ((!empty($content['wds66_id'])) && (!isset($_GET['mode']))) {
+       if ((!empty($content['wds66_id'])) && (!REQUEST_ISSET_GET(('mode')))) {
                // Then use an other "mode"
-               $_GET['mode'] = "list";
+               REQUEST_SET_GET('mode', "list");
 
                // And load all rows!
                $result = SQL_QUERY_ESC("SELECT `id`, `wernis_account`, `wernis_amount`, `wernis_timestamp`, `wernis_type` FROM `{!_MYSQL_PREFIX!}_user_wernis` WHERE `userid` = %s ORDER BY `wernis_timestamp` DESC",
@@ -106,25 +106,25 @@ if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
                SQL_FREERESULT($result);
        } else {
                // Default links are not active!
-               $content['payout_link']   = "<em>".WERNIS_MEMBER_PAYOUT_DISABLED."</em>";
-               $content['withdraw_link'] = "<em>".WERNIS_MEMBER_WITHDRAW_DISABLED."</em>";
+               $content['payout_link']   = "<em>{--WERNIS_MEMBER_PAYOUT_DISABLED--}</em>";
+               $content['withdraw_link'] = "<em>{--WERNIS_MEMBER_WITHDRAW_DISABLED--}</em>";
 
                // Is the payout mode active?
                if (getConfig('wernis_payout_active') == "Y") {
                        // Add link
-                       $content['payout_link'] = "<a class=\"menu_blur\" style=\"height: 40px\" href=\"{!URL!}/modules.php?module=login&amp;what=wernis&amp;mode=payout\"><div style=\"padding-top: 10px\">".MEMBER_WERNIS_MODE_PAYOUT."</div></a>";
+                       $content['payout_link'] = "<a class=\"menu_blur\" style=\"height: 40px\" href=\"{!URL!}/modules.php?module=login&amp;what=wernis&amp;mode=payout\"><div style=\"padding-top: 10px\">{--MEMBER_WERNIS_MODE_PAYOUT--}</div></a>";
                } // END - if
 
                // Is the withdraw mode active?
                if (getConfig('wernis_withdraw_active') == "Y") {
                        // Add link
-                       $content['withdraw_link'] = "<a class=\"menu_blur\" style=\"height: 40px\" href=\"{!URL!}/modules.php?module=login&amp;what=wernis&amp;mode=withdraw\"><div style=\"padding-top: 10px\">".MEMBER_WERNIS_MODE_WITHDRAW."</div></a>";
+                       $content['withdraw_link'] = "<a class=\"menu_blur\" style=\"height: 40px\" href=\"{!URL!}/modules.php?module=login&amp;what=wernis&amp;mode=withdraw\"><div style=\"padding-top: 10px\">{--MEMBER_WERNIS_MODE_WITHDRAW--}</div></a>";
                } // END - if
 
                // Mode chooser! ;-)
-               $_GET['mode'] = "choose";
+               REQUEST_SET_GET('mode', "choose");
        }
-} elseif (($_GET['mode'] == "payout") && (getConfig('wernis_payout_active') == "Y")) {
+} elseif ((REQUEST_GET('mode') == "payout") && (getConfig('wernis_payout_active') == "Y")) {
        // Get total points and check if the user can request a payout
        $points = GET_TOTAL_DATA($GLOBALS['userid'], "user_points", "points") - GET_TOTAL_DATA($GLOBALS['userid'], "user_data", "used_points");
 
@@ -137,7 +137,7 @@ if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
        // Is this enougth for a payout?
        if ($points < getConfig('wernis_min_payout')) {
                // No, then abort here
-               LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_MIN_PAYOUT, TRANSLATE_COMMA(getConfig('wernis_min_payout'))));
+               LOAD_TEMPLATE("admin_settings_saved", false, sprintf(getMessage('WERNIS_MEMBER_MIN_PAYOUT'), TRANSLATE_COMMA(getConfig('wernis_min_payout'))));
                return;
        } // END - if
 
@@ -165,7 +165,7 @@ if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
 
        // Free result
        SQL_FREERESULT($result);
-} elseif (($_GET['mode'] == "withdraw") && (getConfig('wernis_withdraw_active') == "Y")) {
+} elseif ((REQUEST_GET('mode') == "withdraw") && (getConfig('wernis_withdraw_active') == "Y")) {
        // Get total points for just displaying them
        $points = GET_TOTAL_DATA($GLOBALS['userid'], "user_points", "points") - GET_TOTAL_DATA($GLOBALS['userid'], "user_data", "used_points");
 
@@ -191,46 +191,46 @@ if ((!isset($_GET['mode'])) || ($_GET['mode'] == "choose")) {
        SQL_FREERESULT($result);
 } else {
        // Invalid mode!
-       LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_MODE_INVALID, SQL_ESCAPE($_GET['mode'])));
+       LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_MODE_INVALID, SQL_ESCAPE(REQUEST_GET('mode'))));
        return;
 }
 
 // Is the formular sent?
-if ((isset($_POST['ok'])) && (isset($_GET['mode']))) {
+if ((IS_FORM_SENT()) && (REQUEST_ISSET_GET(('mode')))) {
        // Is the user ID and password set?
-       if (empty($_POST['wds66_id'])) {
+       if (!REQUEST_ISSET_POST(('wds66_id'))) {
                // Nothing entered in WDS66 user ID
                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_EMPTY_USERNAME);
-       } elseif (empty($_POST['wds66_password'])) {
+       } elseif (!REQUEST_ISSET_POST(('wds66_password'))) {
                // Nothing entered in WDS66 password
                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_EMPTY_PASSWORD);
-       } elseif (empty($_POST['amount'])) {
+       } elseif (!REQUEST_ISSET_POST(('amount'))) {
                // Nothing entered in amount
                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_EMPTY_AMOUNT);
-       } elseif ($_POST['wds66_id'] != bigintval($_POST['wds66_id'])) {
+       } elseif (REQUEST_POST('wds66_id') != bigintval(REQUEST_POST('wds66_id'))) {
                // Only numbers in account ID!
                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_INVALID_USERNAME);
-       } elseif ($_POST['amount'] != bigintval($_POST['amount'])) {
+       } elseif (REQUEST_POST('amount') != bigintval(REQUEST_POST('amount'))) {
                // Only numbers in amount!
                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_INVALID_AMOUNT);
        } else {
                // Check input data depending on the mode and execute the requested mode
-               switch ($_GET['mode']) {
+               switch (REQUEST_GET('mode')) {
                        case "withdraw": // Widthdraws WDS66 -> This exchange
-                               if ($_POST['amount'] < getConfig('wernis_min_withdraw')) {
+                               if (REQUEST_POST('amount') < getConfig('wernis_min_withdraw')) {
                                        // Not enougth entered!
                                        LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_AMOUNT_SMALLER_MIN, bigintval(getConfig('wernis_min_withdraw'))));
                                } else {
                                        // All is fine here so do the withdraw
-                                       $success = WERNIS_EXECUTE_WITHDRAW($_POST['wds66_id'], md5($_POST['wds66_password']), $_POST['amount']);
+                                       $success = WERNIS_EXECUTE_WITHDRAW(REQUEST_POST('wds66_id'), md5(REQUEST_POST('wds66_password')), REQUEST_POST('amount'));
                                        if ($success) {
                                                // Add it to this amount
                                                unset($GLOBALS['ref_level']);
-                                               ADD_POINTS_REFSYSTEM("wernis_withdraw", $GLOBALS['userid'], bigintval($_POST['amount']), false, 0, false, "direct");
+                                               ADD_POINTS_REFSYSTEM("wernis_withdraw", $GLOBALS['userid'], bigintval(REQUEST_POST('amount')), false, 0, false, "direct");
 
                                                // Update the user data as well..
                                                SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `wernis_userid`=%s WHERE userid=%s LIMIT 1",
-                                                       array(bigintval($_POST['wds66_id']), $GLOBALS['userid']), __FILE__, __LINE__);
+                                                       array(bigintval(REQUEST_POST('wds66_id')), $GLOBALS['userid']), __FILE__, __LINE__);
 
                                                // All done!
                                                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_WITHDRAW_DONE);
@@ -246,22 +246,22 @@ if ((isset($_POST['ok'])) && (isset($_GET['mode']))) {
                                break;
 
                        case "payout": // Payout this exchange -> WDS66
-                               if ($_POST['amount'] < getConfig('wernis_min_payout')) {
+                               if (REQUEST_POST('amount') < getConfig('wernis_min_payout')) {
                                        // Not enougth entered!
                                        LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_AMOUNT_SMALLER_MIN, bigintval(getConfig('wernis_min_payout'))));
-                               } elseif ($_POST['amount'] > $points) {
+                               } elseif (REQUEST_POST('amount') > $points) {
                                        // Not enougth points left!
-                                       LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_PAYOUT_POINTS_DEPLETED, bigintval($_POST['amount']), bigintval($points)));
+                                       LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_PAYOUT_POINTS_DEPLETED, bigintval(REQUEST_POST('amount')), bigintval($points)));
                                } else {
                                        // All is fine here so do the withdraw
-                                       $success = WERNIS_EXECUTE_PAYOUT($_POST['wds66_id'], $_POST['amount']);
+                                       $success = WERNIS_EXECUTE_PAYOUT(REQUEST_POST('wds66_id'), REQUEST_POST('amount'));
                                        if ($success) {
                                                // Sub points
-                                               SUB_POINTS("wernis_payout", $GLOBALS['userid'], $_POST['amount']);
+                                               SUB_POINTS("wernis_payout", $GLOBALS['userid'], REQUEST_POST('amount'));
 
                                                // Update WDS66 id
                                                SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `wernis_userid`=%s WHERE userid=%s LIMIT 1",
-                                                       array(bigintval($_POST['wds66_id']), $GLOBALS['userid']), __FILE__, __LINE__);
+                                                       array(bigintval(REQUEST_POST('wds66_id')), $GLOBALS['userid']), __FILE__, __LINE__);
 
                                                // All done!
                                                LOAD_TEMPLATE("admin_settings_saved", false, WERNIS_MEMBER_PAYOUT_DONE);
@@ -277,15 +277,15 @@ if ((isset($_POST['ok'])) && (isset($_GET['mode']))) {
                                break;
 
                        default: // Invalid mode!
-                               DEBUG_LOG(__FILE__, __LINE__, sprintf("Invalid mode %s detected.", $_GET['mode']));
-                               LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_MODE_INVALID, SQL_ESCAPE($_GET['mode'])));
+                               DEBUG_LOG(__FILE__, __LINE__, sprintf("Invalid mode %s detected.", REQUEST_GET('mode')));
+                               LOAD_TEMPLATE("admin_settings_saved", false, sprintf(WERNIS_MEMBER_MODE_INVALID, SQL_ESCAPE(REQUEST_GET('mode'))));
                                return;
                }
        }
 } // END - if
 
 // Prepare mode for template name
-$mode = sprintf("member_wernis_mode_%s", SQL_ESCAPE($_GET['mode']));
+$mode = sprintf("member_wernis_mode_%s", SQL_ESCAPE(REQUEST_GET('mode')));
 
 // Load the template
 LOAD_TEMPLATE($mode, false, $content);