Fix for birthday timestamps < 0 (why this?)
[mailer.git] / lead-confirm.php
index 825b1e5f83f9540a71204a839410924a38f12a63..c5cab5847bd97a513a6aadcd76f80c338faaabd8 100644 (file)
 require_once("inc/libs/security_functions.php");
 
 // Init "action" and "what"
-global $what, $action;
+global $what, $action, $startTime;
+$GLOBALS['startTime'] = microtime(true);
 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
-if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']);
-if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);
 
 // Set module
 $GLOBALS['module'] = "lead-confirm";
 
 // Load config.php
-require ("inc/config.php");
+require("inc/config.php");
 
 // Is the script installed?
-if (defined('mxchange_installed') && (mxchange_installed)) {
+if (isBooleanConstantAndTrue('mxchange_installed')) {
        // Header
        require(PATH."inc/header.php");
 
@@ -58,16 +57,19 @@ if (defined('mxchange_installed') && (mxchange_installed)) {
        );
 
        // Is the cookie set?
-       if (isset($_COOKIE['lead_uid'])) {
+       if (isSessionVariableSet('lead_uid')) {
                // Is the user-account unlocked and valid?
-               $result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
-                       array(bigintval($_COOKIE['lead_uid'])), __FILE__, __LINE__);
+               $result = SQL_QUERY_ESC("SELECT email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
+                       array(bigintval(get_session('lead_uid'))), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1) {
                        // Secure the ID number
-                       $content['lead_uid'] = bigintval($_COOKIE['lead_uid']);
+                       $content['lead_uid'] = bigintval(get_session('lead_uid'));
 
                        // Load the email address
-                       list($content['lead_email']) = COMPILE_CODE(SQL_FETCHROW($result));
+                       list($email) = SQL_FETCHROW($result);
+
+                       // Compile email
+                       $content['lead_email'] = COMPILE_CODE($email);
                } else {
                        // Not found!
                        $content['lead_uid'] = 0;