Cookie code removed, rewritten, internal URLs are now relative (see LOAD_URL()),...

[mailer.git] / inc / modules / sponsor / welcome.php

diff --git a/inc/modules/sponsor/welcome.php b/inc/modules/sponsor/welcome.php
index e120cc286405349b7626aa34a70e740fa3481b8f..d2c0c59444109a7b59757bcf848e6bb8754990d8 100644 (file)
--- a/inc/modules/sponsor/welcome.php
+++ b/inc/modules/sponsor/welcome.php
@@ -31,10 +31,10 @@
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
+if (!defined('__SECURITY')) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php";
        require($INC);
-} elseif ((!EXT_IS_ACTIVE("sponsor")) && (!IS_ADMIN())) {
+} elseif ((!EXT_IS_ACTIVE("sponsor"))
        ADD_FATAL(EXTENSION_PROBLEM_EXT_INACTIVE);
        return;
 } elseif (!IS_SPONSOR()) {
@@ -44,17 +44,17 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
 }
 
 // Load some data
-$result = SQL_QUERY_ESC("SELECT salut, surname, family, (points_amount - points_used) AS points
+$result = SQL_QUERY_ESC("SELECT gender, surname, family, (points_amount - points_used) AS points
 FROM "._MYSQL_PREFIX."_sponsor_data
 WHERE id='%s' AND password='%s' LIMIT 1",
- array(bigintval($_COOKIE['sponsorid']), $_COOKIE['sponsorpass']), __FILE__, __LINE__);
-list($salut, $surname, $family, $points) = SQL_FETCHROW($result);
+ array(bigintval(get_session('sponsorid')), get_session('sponsorpass')), __FILE__, __LINE__);
+list($gender, $surname, $family, $points) = SQL_FETCHROW($result);
 
 // Free memory
 SQL_FREERESULT($result);
 
 // Prepare data for the template
-define('__SALUT'  , TRANSLATE_SEX($salut));
+define('__GENDER'  , TRANSLATE_GENDER($gender));
 define('__SURNAME', $surname);
 define('__FAMILY' , $family);
 define('__POINTS' , TRANSLATE_COMMA($points));