Hotfix
[mailer.git] / mailid.php
index eff588330e67242a4e93435612586fb22e485e5e..916aa60d646fcc5657a01b89cc5d87c4bfdb9c8e 100644 (file)
  * $Date::                                                            $ *
  * $Tag:: 0.2.1-FINAL                                                 $ *
  * $Author::                                                          $ *
- * Needs to be in all Files and every File needs "svn propset           *
- * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
  * Copyright (c) 2003 - 2009 by Roland Haeder                           *
- * Copyright (c) 2009, 2010 by Mailer Developer Team                    *
- * For more information visit: http://www.mxchange.org                  *
+ * Copyright (c) 2009 - 2011 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
@@ -51,38 +49,41 @@ $errorCode = '';
 // Load the required file(s)
 require('inc/config-global.php');
 
-// Set content type
+// Set content type and HTTP status
 setContentType('text/html');
+setHttpStatus('404 NOT FOUND');
 
 // Is the extension active?
 redirectOnUninstalledExtension('mailid');
 
 // Init
-$url_userid = '0';
-$url_bid    = '0';
-$url_mid    = '0';
+$userId  = '0';
+$bonusId = '0';
+$mailId  = '0';
 
 // Secure all data
-if (isGetRequestParameterSet('userid'))  $url_userid = bigintval(getRequestParameter('userid'));
-if (isGetRequestParameterSet('mailid'))  $url_mid    = bigintval(getRequestParameter('mailid'));
-if (isGetRequestParameterSet('bonusid')) $url_bid    = bigintval(getRequestParameter('bonusid'));
+if (isGetRequestElementSet('userid'))  $userId  = bigintval(getRequestElement('userid'));
+if (isGetRequestElementSet('mailid'))  $mailId  = bigintval(getRequestElement('mailid'));
+if (isGetRequestElementSet('bonusid')) $bonusId = bigintval(getRequestElement('bonusid'));
 
 // 01           1        12            2    2            21    1                      2210
-if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDetected())) {
+if ((isValidUserId($userId)) && (($mailId > 0) || ($bonusId > 0)) && (!ifFatalErrorsDetected())) {
        // Init result
        $result_link = false;
 
        // Maybe he wants to confirm an email?
-       if ($url_mid > 0) {
-               // Normal-Mails
+       if ($mailId > 0) {
+               // Member mail
                $result_link = SQL_QUERY_ESC("SELECT `link_type` FROM `{?_MYSQL_PREFIX?}_user_links` WHERE `stats_id`=%s AND `userid`=%s LIMIT 1",
-                       array($url_mid, $url_userid), __FILE__, __LINE__);
-               $type = 'mailid'; $urlId = $url_mid;
-       } elseif ($url_bid > 0) {
-               // Bonus-Mail
+                       array($mailId, $userId), __FILE__, __LINE__);
+               $type = 'mailid';
+               $urlId = $mailId;
+       } elseif ($bonusId > 0) {
+               // Bonus mail
                $result_link = SQL_QUERY_ESC("SELECT `link_type` FROM `{?_MYSQL_PREFIX?}_user_links` WHERE `bonus_id`=%s AND `userid`=%s LIMIT 1",
-                       array($url_bid, $url_userid), __FILE__, __LINE__);
-               $type = 'bonusid'; $urlId = $url_bid;
+                       array($bonusId, $userId), __FILE__, __LINE__);
+               $type = 'bonusid';
+               $urlId = $bonusId;
        } else {
                // Problem: No id entered
                redirectToUrl('modules.php?module=index');
@@ -96,8 +97,8 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
                switch ($ltype) {
                        case 'NORMAL':
                                // Is the stats id valid?
-                               $result = SQL_QUERY_ESC("SELECT `pool_id`, `url`, `subject` FROM `{?_MYSQL_PREFIX?}_user_stats` WHERE `id`=%s LIMIT 1",
-                                       array($url_mid), __FILE__, __LINE__);
+                               $result = SQL_QUERY_ESC("SELECT `pool_id`,`url`,`subject` FROM `{?_MYSQL_PREFIX?}_user_stats` WHERE `id`=%s LIMIT 1",
+                                       array($mailId), __FILE__, __LINE__);
                                break;
 
                        case 'BONUS':
@@ -105,8 +106,8 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
                                redirectOnUninstalledExtension('bonus');
 
                                // Bonus-Mails
-                               $result = SQL_QUERY_ESC("SELECT id, url, subject FROM `{?_MYSQL_PREFIX?}_bonus` WHERE `id`=%s LIMIT 1",
-                                       array($url_bid), __FILE__, __LINE__);
+                               $result = SQL_QUERY_ESC("SELECT `id`,`url`,`subject` FROM `{?_MYSQL_PREFIX?}_bonus` WHERE `id`=%s LIMIT 1",
+                                       array($bonusId), __FILE__, __LINE__);
                                break;
 
                        default: // Invalid mail type
@@ -116,7 +117,7 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
 
                if (SQL_NUMROWS($result) == 1) {
                        // Load data
-                       list($pool, $URL, $title) = SQL_FETCHROW($result);
+                       list($pool, $url, $title) = SQL_FETCHROW($result);
 
                        // Free result
                        SQL_FREERESULT($result);
@@ -125,11 +126,14 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
                        setExtraTitle($title);
 
                        // Is the user's id unlocked?
-                       if (fetchUserData($url_userid)) {
+                       if (fetchUserData($userId)) {
                                // Status must be CONFIRMED
                                if (getUserData('status') == 'CONFIRMED') {
                                        // Update last activity if not admin
-                                       updateLastActivity($url_userid);
+                                       if ((!isAdmin()) || (isDebugModeEnabled())) {
+                                               // Is not admin, so update last activity
+                                               updateLastActivity($userId);
+                                       } // END - if
 
                                        // User has confirmed his account so we can procede...
                                        // @TODO Rewrite this to a filter
@@ -149,8 +153,8 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
                                                        break;
 
                                                case 'BONUS':
-                                                       $result = SQL_QUERY_ESC("SELECT `points`, `time` FROM `{?_MYSQL_PREFIX?}_bonus` WHERE `id`=%s LIMIT 1",
-                                                               array($url_bid), __FILE__, __LINE__);
+                                                       $result = SQL_QUERY_ESC("SELECT `points`,`time` FROM `{?_MYSQL_PREFIX?}_bonus` WHERE `id`=%s LIMIT 1",
+                                                               array($bonusId), __FILE__, __LINE__);
                                                        if (SQL_NUMROWS($result) == 1) {
                                                                list($points, $time) = SQL_FETCHROW($result);
                                                                $payment = '0.00000';
@@ -172,14 +176,21 @@ if (($url_userid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (!ifFatalErrorsDe
                                        // Was that mail a valid one?
                                        if ($isValid === true) {
                                                // If time is zero seconds we have a sponsor mail. 1 Second shall be set to avoid problems
-                                               if (($time == '0') && ($payment > 0)) { $URL = getConfig('URL'); $time = 1; }
+                                               if (($time == '0') && ($payment > 0)) { 
+                                                       $url = getUrl();
+                                                       $time = 1; 
+                                               } // END - if
+
                                                if (($time > 0) && (($payment > 0) || ($points > 0))) {
+                                                       // Set HTTP status to okay
+                                                       setHttpStatus('200 OK');
+
                                                        // Export data into constants for the template
                                                        $content = array(
-                                                               'userid'  => $url_userid,
+                                                               'userid'  => $userId,
                                                                'type'    => $type,
                                                                'data'    => $urlId,
-                                                               'url'     => generateDerefererUrl($URL)
+                                                               'url'     => $url
                                                        );
 
                                                        // Load template