Security line in all includes changed
[mailer.git] / inc / pool-update.php
index 592ef3b5fc49f32bd3fd84e5f2c3c409b049dd4c..20b406250295213b9e606b733a80e394f1e6508d 100644 (file)
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if (!defined('__SECURITY')) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
 
+// Don't run on daily reset
+if (defined('__DAILY_RESET')) {
+       // Skip here
+       return false;
+} // END - if
+
 // Test html extensions once
 $HTML_EXT = EXT_IS_ACTIVE("html_mail", true);
 
 // Check for freed mail orders to send out
-if ($HTML_EXT)
-{
+if ($HTML_EXT) {
        //                                0     1        2      3       4          5            6      7        8          9       10
        $result_main = SQL_QUERY("SELECT id, sender, subject, text, receivers, payment_id, timestamp, url, target_send, cat_id, html_msg FROM "._MYSQL_PREFIX."_pool WHERE data_type='NEW' ORDER BY timestamp DESC", __FILE__, __LINE__);
-}
- else
-{
+} else {
        //                                0     1        2      3       4          5            6      7        8          9    10
        $result_main = SQL_QUERY("SELECT id, sender, subject, text, receivers, payment_id, timestamp, url, target_send, cat_id, id FROM "._MYSQL_PREFIX."_pool WHERE data_type='NEW' ORDER BY timestamp DESC", __FILE__, __LINE__);
 }
 
 // Reset variables
-$cnt = "0"; $cnt2 = "0"; $LAST_SENT_ID = "0"; $cnt_back = array("0"); $points_BACK = array("0");
+$cnt = 0; $cnt2 = 0; $LAST_SENT_ID = 0; $cnt_back = array("0"); $points_BACK = array("0");
 if (SQL_NUMROWS($result_main) > 0)
 {
        while ($DATA = SQL_FETCHROW($result_main))
        {
                // Check fetched data for HTML
-               $HTML = $DATA[10]; if ($HTML == $DATA[0]) $HTML = "N";
+               $HTML = $DATA[10]; if ($HTML == $DATA['id']) $HTML = "N";
 
                // Compile URL and subject line
                $DATA[7] = COMPILE_CODE($DATA[7]);
 
                // Set mail order as "active". That means it will be sent out
                $result_active = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET data_type='ACTIVE' WHERE id=%s AND data_type='NEW' LIMIT 1",
-                array($DATA[0]), __FILE__, __LINE__);
+                array($DATA['id']), __FILE__, __LINE__);
                if (SQL_AFFECTEDROWS() == 1)
                {
                        // "Explode" all receivers into an array
@@ -93,7 +95,7 @@ if (SQL_NUMROWS($result_main) > 0)
                        foreach ($RECEIVERS as $key => $uid)
                        {
                                // Lookup user ID
-                               $result_user = SQL_QUERY_ESC("SELECT sex, surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
+                               $result_user = SQL_QUERY_ESC("SELECT gender, surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
                                 array(bigintval($uid)), __FILE__, __LINE__);
 
                                // Is his data available?
@@ -101,14 +103,14 @@ if (SQL_NUMROWS($result_main) > 0)
                                if (SQL_NUMROWS($result_user) == 1)
                                {
                                        // The final receiver does exists so we can continue...
-                                       list($salut, $sname, $fname, $email) = SQL_FETCHROW($result_user);
+                                       list($gender, $sname, $fname, $email) = SQL_FETCHROW($result_user);
 
                                        // Free memory
                                        SQL_FREERESULT($result_user);
 
                                        // Do we have a stats entry?
                                        $result_stats = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%s AND userid=%s AND timestamp_ordered='%s' LIMIT 1",
-                                        array($DATA[0], $DATA[1], $DATA[6]), __FILE__, __LINE__);
+                                        array($DATA['id'], $DATA[1], $DATA[6]), __FILE__, __LINE__);
 
                                        // If there's no stats entry add it!
                                        //* DEBUG: */ echo "!L:".__LINE__."/".SQL_NUMROWS($result_stats)."!<br />";
@@ -116,11 +118,11 @@ if (SQL_NUMROWS($result_main) > 0)
                                        {
                                                // No entry was found, so we add him!
                                                $result_stats = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_user_stats (pool_id , userid, cat_id, payment_id, subject, url , max_rec , timestamp_ordered, timestamp_sstart) VALUES ('%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s' , UNIX_TIMESTAMP())",
-                                                array(bigintval($DATA[0]), bigintval($DATA[1]), bigintval($DATA[9]), bigintval($DATA[5]), $DATA[2], $DATA[7], $DATA[8], bigintval($DATA[6])), __FILE__, __LINE__);
+                                                array(bigintval($DATA['id']), bigintval($DATA[1]), bigintval($DATA[9]), bigintval($DATA[5]), $DATA[2], $DATA[7], $DATA[8], bigintval($DATA[6])), __FILE__, __LINE__);
 
                                                // Receive it's ID for the links table
                                                $result_stats = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%s AND userid=%s AND timestamp_ordered='%s' LIMIT 1",
-                                                array(bigintval($DATA[0]), bigintval($DATA[1]), bigintval($DATA[6])), __FILE__, __LINE__);
+                                                array(bigintval($DATA['id']), bigintval($DATA[1]), bigintval($DATA[6])), __FILE__, __LINE__);
                                        }
 
                                        //* DEBUG: */ echo "!L:".__LINE__."/".SQL_NUMROWS($result_stats)."!<br />";
@@ -131,18 +133,34 @@ if (SQL_NUMROWS($result_main) > 0)
                                                SQL_FREERESULT($result_stats);
 
                                                // Mark this user as "spammed" ;-) And place a line for him...
-                                               //* DEBUG: */ echo "?L:".__LINE__."/".$dummy."/".$key."/".$uid."(".$DATA[1].")/".$DATA[0]."/".$stats_id."?<br />";
-                                               switch (REMOVE_RECEIVER($dummy, $key, bigintval($uid), bigintval($DATA[0]), bigintval($stats_id)))
+                                               //* DEBUG: */ echo "?L:".__LINE__."/".$dummy."/".$key."/".$uid."(".$DATA[1].")/".$DATA['id']."/".$stats_id."?<br />";
+                                               switch (REMOVE_RECEIVER($dummy, $key, bigintval($uid), bigintval($DATA['id']), bigintval($stats_id)))
                                                {
                                                case "done":
                                                        // Prepare the mail
                                                        $DATA[11] = bigintval($stats_id);
                                                        $DATA[12] = $sname;
                                                        $DATA[13] = $fname;
-                                                       $DATA[14] = TRANSLATE_SEX($salut);
+                                                       $DATA[14] = TRANSLATE_GENDER($gender);
+
+                                                       // Replace text variables
+                                                       foreach ($REPLACER as $key => $value) {
+                                                               if (isset($DATA[$key])) $DATA[3] = str_replace($value, $DATA[$key], $DATA[3]);
+                                                       } // END - if
+
+                                                       // Prepare content
+                                                       $content = array(
+                                                               'id'         => $DATA[11],
+                                                               'url'        => $DATA[3],
+                                                               'sender_uid' => $DATA[1],
+                                                               'category'   => GET_CATEGORY($DATA[9]),
+                                                               'time'       => CREATE_FANCY_TIME(GET_PAY_POINTS($DATA[5], "time")),
+                                                               'points'     => TRANSLATE_COMMA(GET_PAY_POINTS($DATA[5], "payment")),
+                                                               'text'       => $DATA[3]
+                                                       );
 
                                                        // Load message template
-                                                       $msg = LOAD_EMAIL_TEMPLATE("normal-mail", $DATA[3], bigintval($uid));
+                                                       $msg = LOAD_EMAIL_TEMPLATE("normal-mail", $content, bigintval($uid));
 
                                                        // Send mail away
                                                        SEND_EMAIL($email, $DATA[2], $msg, $HTML);
@@ -151,20 +169,18 @@ if (SQL_NUMROWS($result_main) > 0)
                                                        $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET emails_sent=emails_sent+1 WHERE userid=%s LIMIT 1",
                                                         array(bigintval($DATA[1])), __FILE__, __LINE__);
 
-                                                       if (GET_EXT_VERSION("user") >= "0.1.4")
-                                                       {
+                                                       if (GET_EXT_VERSION("user") >= "0.1.4") {
                                                                // Update mails received for receiver
                                                                $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET emails_received=emails_received+1 WHERE userid=%s LIMIT 1",
                                                                array(bigintval($uid)), __FILE__, __LINE__);
-                                                       }
+                                                       } // END - if
 
                                                        // Update mediadata if version is 0.0.4 or higher
-                                                       if (GET_EXT_VERSION("mediadata") >= "0.0.4")
-                                                       {
+                                                       if (GET_EXT_VERSION("mediadata") >= "0.0.4") {
                                                                // Update entry (or add missing)
                                                                //* DEBUG: */ echo "*MEDIA/L:".__LINE__."*<br />";
                                                                MEDIA_UPDATE_ENTRY(array("total_send", "normal_send"), "add", 1);
-                                                       }
+                                                       } // END - if
 
                                                        // And count up the mail
                                                        $cnt++;
@@ -180,21 +196,27 @@ if (SQL_NUMROWS($result_main) > 0)
                                        }
 
                                        // Do we have reached the maximum to send mails? || ($_CONFIG['max_send'] >= $cnt)
-                                       //* DEBUG: */ echo "*L:".__LINE__."/".$cnt.">=".$DATA[8]."/".$_CONFIG['max_send'].">=".$cnt."/".$LAST_SENT_ID."!=".$DATA[0]."*<br />";
-                                       if ((($cnt >= $DATA[8])) && ($LAST_SENT_ID != $DATA[0]))
-                                       {
+                                       //* DEBUG: */ echo "*L:".__LINE__."/".$cnt.">=".$DATA[8]."/".$_CONFIG['max_send'].">=".$cnt."/".$LAST_SENT_ID."!=".$DATA['id']."*<br />";
+                                       if ((($cnt >= $DATA[8])) && ($LAST_SENT_ID != $DATA['id'])) {
+                                               // Prepare content
+                                               $content = array(
+                                                       'sender_uid' => $DATA[1],
+                                                       'category'   => GET_CATEGORY($DATA[9])
+                                               );
+
                                                // Yes we do, so we notify admin and sender about fully sent mail!
-                                               SEND_ADMIN_NOTIFICATION(ADMIN_SUBJ_SEND_DONE, "done-admin", $DATA[3], $uid);
+                                               SEND_ADMIN_NOTIFICATION(ADMIN_SUBJ_SEND_DONE, "done-admin", $content, $uid);
 
                                                // Get sender's data
                                                $result_sender = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
                                                 array(bigintval($DATA[1])), __FILE__, __LINE__);
-                                               if (SQL_NUMROWS($result_sender) == 1)
-                                               {
+                                               if (SQL_NUMROWS($result_sender) == 1) {
                                                        // Load data and prepare mail
                                                        list($sname, $fname, $email) = SQL_FETCHROW($result_sender);
                                                        SQL_FREERESULT($result_sender);
-                                                       $msg = LOAD_EMAIL_TEMPLATE("done-member", $DATA[3], $DATA[1]);
+
+                                                       // Load email template
+                                                       $msg = LOAD_EMAIL_TEMPLATE("done-member", $content, $DATA[1]);
 
                                                        // Send it also waway
                                                        SEND_EMAIL($email, MEMBER_SUBJ_SEND_DONE, $msg);
@@ -202,13 +224,13 @@ if (SQL_NUMROWS($result_main) > 0)
 
                                                // Set status to SEND because we completely send it away
                                                $result_done = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET data_type='SEND', target_send='0', receivers='' WHERE id=%s LIMIT 1",
-                                                array(bigintval($DATA[0])), __FILE__, __LINE__);
+                                                array(bigintval($DATA['id'])), __FILE__, __LINE__);
 
                                                // Update send-completed-time
                                                $result_user = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_stats SET timestamp_send=UNIX_TIMESTAMP() WHERE pool_id=%s LIMIT 1",
-                                                array(bigintval($DATA[0])), __FILE__, __LINE__);
+                                                array(bigintval($DATA['id'])), __FILE__, __LINE__);
 
-                                               $LAST_SENT_ID = $DATA[0]; $cnt = "0";
+                                               $LAST_SENT_ID = $DATA['id']; $cnt = 0;
                                                $cnt2 += $cnt;
 
                                                // Update mediadata if version is 0.0.4 or higher
@@ -229,7 +251,7 @@ if (SQL_NUMROWS($result_main) > 0)
                                                $ADD = "";
                                                if ($cnt <= $DATA[8]) $ADD = ", target_send=target_send-".$cnt;
                                                $result_queue = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET data_type='NEW', receivers='%s'".$ADD." WHERE id=%s LIMIT 1",
-                                                array(implode(";", $dummy), bigintval($DATA[0])), __FILE__, __LINE__);
+                                                array(implode(";", $dummy), bigintval($DATA['id'])), __FILE__, __LINE__);
 
                                                //* DEBUG: */ echo"*EXIT/L:".__LINE__."*<br />";
                                                break;
@@ -242,7 +264,7 @@ if (SQL_NUMROWS($result_main) > 0)
                                        {
                                                // List was empty
                                                $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET data_type='SEND' WHERE id=%s LIMIT 1",
-                                                array(bigintval($DATA[0])), __FILE__, __LINE__);
+                                                array(bigintval($DATA['id'])), __FILE__, __LINE__);
                                        }
                                         else
                                        {
@@ -271,40 +293,39 @@ if (SQL_NUMROWS($result_main) > 0)
 
                                        // Update receivers
                                        $result_queue = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET receivers='%s' WHERE id=%s LIMIT 1",
-                                        array(implode(";", $dummy), bigintval($DATA[0])), __FILE__, __LINE__);
+                                        array(implode(";", $dummy), bigintval($DATA['id'])), __FILE__, __LINE__);
                                }
                        }
                }
        }
-       if ((sizeof($points_BACK) > 0) && (!empty($points_BACK[0])))
-       {
-               foreach ($points_BACK as $uid => $PB)
-               {
+       if ((sizeof($points_BACK) > 0) && (!empty($points_BACK[0]))) {
+               foreach ($points_BACK as $uid => $PB) {
                        // Add points only when we have points left to add and a valid user ID
-                       if (($PB > 0) && ($uid > 0))
-                       {
+                       if (($PB > 0) && ($uid > 0)) {
+                               // Prepare content
+                               $content = array(
+                                       'points' => TRANSLATE_COMMA($DATA[10])
+                               );
+
                                // We have to pay back some points to the sender (we add them directly :-P)
                                $result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
-                                array(bigintval($uid)), __FILE__, __LINE__);
+                                       array(bigintval($uid)), __FILE__, __LINE__);
                                $DATA[10] = $PB; $DATA[11] = $cnt_back[$uid];
-                               if (SQL_NUMROWS($result) == 1)
-                               {
+                               if (SQL_NUMROWS($result) == 1) {
                                        list($email) = SQL_FETCHROW($result);
                                        SQL_FREERESULT($result);
 
                                        // User account does exists, so we can safely pay back!
-                                       $msg = LOAD_EMAIL_TEMPLATE("back-member", "", bigintval($uid));
+                                       $msg = LOAD_EMAIL_TEMPLATE("back-member", $content, bigintval($uid));
 
                                        // Send mail out to member
                                        SEND_EMAIL($email, MEMBER_BACK_JACKPOT." (".$uid.")", $msg);
-                               }
-                                else
-                               {
+                               } else {
                                        // Add to jackpot
                                        ADD_JACKPOT($PB);
 
                                        // Send mail out to admin
-                                       SEND_ADMIN_NOTIFICATION(ADMIN_BACK_JACKPOT." (".$uid.")", "back-admin", "", "admin");
+                                       SEND_ADMIN_NOTIFICATION(ADMIN_BACK_JACKPOT." (".$uid.")", "back-admin", $content, "admin");
                                }
                        }
                }
@@ -318,43 +339,33 @@ SQL_FREERESULT($result_main);
 if ((EXT_IS_ACTIVE("bonus") && ($cnt < $_CONFIG['max_send'])))
 {
        // Do we need to send out bonus mails?
-       if ($HTML_EXT)
-       {
+       if ($HTML_EXT) {
                //                                 0     1       2        3        4      5       6          7       8      9         10         11
                $result_bonus = SQL_QUERY("SELECT id, subject, text, receivers, points, time, data_type, timestamp, url, cat_id, target_send, html_msg FROM "._MYSQL_PREFIX."_bonus WHERE data_type='NEW' ORDER BY timestamp DESC", __FILE__, __LINE__);
-       }
-        else
-       {
-               //                                 0     1       2        3        4      5       6          7       8      9         10      11
-               $result_bonus = SQL_QUERY("SELECT id, subject, text, receivers, points, time, data_type, timestamp, url, cat_id, target_send, 'N' FROM "._MYSQL_PREFIX."_bonus WHERE data_type='NEW' ORDER BY timestamp DESC", __FILE__, __LINE__);
+       } else {
+               //                                 0     1       2        3        4      5       6          7       8      9         10
+               $result_bonus = SQL_QUERY("SELECT id, subject, text, receivers, points, time, data_type, timestamp, url, cat_id, target_send FROM "._MYSQL_PREFIX."_bonus WHERE data_type='NEW' ORDER BY timestamp DESC", __FILE__, __LINE__);
        }
 
-       if (SQL_NUMROWS($result_bonus) > 0)
-       {
+       if (SQL_NUMROWS($result_bonus) > 0) {
                // Send these mails away...
                $cnt2 = "";
-               while ($DATA = SQL_FETCHROW($result_bonus))
-               {
+               while ($DATA = SQL_FETCHARRAY($result_bonus)) {
                        // Compile URL
-                       $DATA[8] = COMPILE_CODE($DATA[8]);
+                       $DATA['url'] = COMPILE_CODE($DATA['url']);
 
                        // Message is active in queue
                        $result_queue = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET data_type='QUEUE' WHERE id=%s LIMIT 1",
-                        array(bigintval($DATA[0])), __FILE__, __LINE__);
+                        array(bigintval($DATA['id'])), __FILE__, __LINE__);
 
                        // "Explode" all receivers into an array
-                       if (ereg(";", $DATA[3]))
-                       {
+                       if (ereg(";", $DATA['receivers'])) {
                                // There's more than one receiver in the list...
-                               $RECEIVERS = explode(";", $DATA[3]);
-                       }
-                        elseif (!empty($DATA[4]))
-                       {
+                               $RECEIVERS = explode(";", $DATA['receivers']);
+                       } elseif (!empty($DATA['points'])) {
                                // Only one user left
-                               $RECEIVERS = array($DATA[3]);
-                       }
-                        else
-                       {
+                               $RECEIVERS = array($DATA['receivers']);
+                       } else {
                                // No users left
                                $RECEIVERS = array("0");
                        }
@@ -362,8 +373,7 @@ if ((EXT_IS_ACTIVE("bonus") && ($cnt < $_CONFIG['max_send'])))
 
                        // Now, if we are good little boys and girls Santa left us some user-ids.
                        // We can now send mails to them...
-                       foreach ($RECEIVERS as $key => $uid)
-                       {
+                       foreach ($RECEIVERS as $key => $uid) {
                                // Load personal data
                                //* DEBUG: */ echo "*L:".__LINE__."/".$uid."*<br />";
                                $result_user = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
@@ -377,13 +387,34 @@ if ((EXT_IS_ACTIVE("bonus") && ($cnt < $_CONFIG['max_send'])))
                                        //* DEBUG: */ echo "OK!/L:".__LINE__."<br />";
 
                                        // Mark this user as "spammed" ;-) And place a line for him...
-                                       if (REMOVE_RECEIVER($dummy, $key, $uid, $DATA[0], $DATA[0], true) == "done")
+                                       if (REMOVE_RECEIVER($dummy, $key, $uid, $DATA['id'], $DATA['id'], true) == "done")
                                        {
+                                               // Replace text variables
+                                               foreach ($REPLACER as $key => $value) {
+                                                       if (isset($DATA[$key])) $DATA['text'] = str_replace($value, $DATA[$key], $DATA['text']);
+                                               } // END - foreach
+
+                                               // Prepare content
+                                               $content = array(
+                                                       'id'       => $DATA['id'],
+                                                       'url'      => $DATA['url'],
+                                                       'time'     => CREATE_FANCY_TIME($DATA['time']),
+                                                       'points'   => TRANSLATE_COMMA($DATA['points']),
+                                                       'category' => GET_CATEGORY($DATA['cat_id']),
+                                                       'text'     => $DATA['text']
+                                               );
+
                                                // Prepare the mail
-                                               $msg = LOAD_EMAIL_TEMPLATE("bonus-mail", $DATA[2], $uid);
+                                               $msg = LOAD_EMAIL_TEMPLATE("bonus-mail", $content, $uid);
 
                                                // Send mail away
-                                               SEND_EMAIL($email, $DATA[1], $msg, $DATA[11]);
+                                               if (isset($DATA['html_msg'])) {
+                                                       // Send HTML?
+                                                       SEND_EMAIL($email, $DATA['subject'], $msg, $DATA['html_msg']);
+                                               } else {
+                                                       // No HTML mail!
+                                                       SEND_EMAIL($email, $DATA['subject'], $msg);
+                                               }
 
                                                // Count one up and remove entry from dummy array
                                                $cnt++; unset($dummy[$key]);
@@ -425,7 +456,7 @@ if ((EXT_IS_ACTIVE("bonus") && ($cnt < $_CONFIG['max_send'])))
                        {
                                // Queue reached!
                                $result_done = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET data_type='SEND', target_send='0', receivers='' WHERE id=%s LIMIT 1",
-                                array(bigintval($DATA[0])), __FILE__, __LINE__);
+                                array(bigintval($DATA['id'])), __FILE__, __LINE__);
                                //* DEBUG: */ echo "*L:".__LINE__."*<br />";
 
                                // Update mediadata if version is 0.0.4 or higher
@@ -440,7 +471,7 @@ if ((EXT_IS_ACTIVE("bonus") && ($cnt < $_CONFIG['max_send'])))
                        {
                                // Update bonus pool
                                $result_done = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET data_type='NEW', target_send=%s, receivers='%s' WHERE id=%s LIMIT 1",
-                                array(SELECTION_COUNT($dummy), implode(";", $dummy), bigintval($DATA[0])), __FILE__, __LINE__);
+                                array(SELECTION_COUNT($dummy), implode(";", $dummy), bigintval($DATA['id'])), __FILE__, __LINE__);
                                //* DEBUG: */ echo "*L:".__LINE__."<PRE>";
                                //* DEBUG: */ print_r($dummy);
                                //* DEBUG: */ echo "</PRE>\n!!!<br />";