language

[mailer.git] / lead-confirm.php

diff --git a/lead-confirm.php b/lead-confirm.php
index 825b1e5f83f9540a71204a839410924a38f12a63..389f3a11684f24f09af94e6f8216b75d5c2baf39 100644 (file)
--- a/lead-confirm.php
+++ b/lead-confirm.php
@@ -35,10 +35,9 @@
 require_once("inc/libs/security_functions.php");
 
 // Init "action" and "what"
-global $what, $action;
+global $what, $action, $startTime;
+$GLOBALS['startTime'] = microtime(true);
 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
-if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']);
-if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);
 
 // Set module
 $GLOBALS['module'] = "lead-confirm";
@@ -58,13 +57,13 @@ if (defined('mxchange_installed') && (mxchange_installed)) {
        );
 
        // Is the cookie set?
-       if (isset($_COOKIE['lead_uid'])) {
+       if (isset($_SESSION['lead_uid'])) {
                // Is the user-account unlocked and valid?
                $result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
-                       array(bigintval($_COOKIE['lead_uid'])), __FILE__, __LINE__);
+                       array(bigintval($_SESSION['lead_uid'])), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1) {
                        // Secure the ID number
-                       $content['lead_uid'] = bigintval($_COOKIE['lead_uid']);
+                       $content['lead_uid'] = bigintval($_SESSION['lead_uid']);
 
                        // Load the email address
                        list($content['lead_email']) = COMPILE_CODE(SQL_FETCHROW($result));