TODOs.txt updated

[mailer.git] / show_bonus.php

diff --git a/show_bonus.php b/show_bonus.php
index a6eb714ec53faae9e9585d5e49d6cb8d74ca0f49..89659b9431ac35d3ce33e759efddff3d5c8086dc 100644 (file)
--- a/show_bonus.php
+++ b/show_bonus.php
@@ -59,7 +59,7 @@ redirectOnUninstalledExtension('bonus');
 // Include header
 loadIncludeOnce('inc/header.php');
 
-if ((getRequestParameter('userid') > 0) && (getRequestParameter('d') > 0) && (isGetRequestParameterSet('t'))) {
+if ((isValidUserId(getRequestParameter('userid'))) && (getRequestParameter('d') > 0) && (isGetRequestParameterSet('t'))) {
        // Set row name
        $t = '';
        switch (getRequestParameter('t')) {
@@ -115,18 +115,18 @@ LIMIT 1",
                        $content['message'] = loadTemplate('show_bonus_msg', true, $content);
                } else {
                        // No data found
-                       $content['message'] = '<span class="guest_failed">{--BONUS_SHOW_NO_DATA--}</span>';
+                       $content['message'] = '<span class="notice">{--BONUS_SHOW_NO_DATA--}</span>';
                }
 
                // Free memory
                SQL_FREERESULT($result);
        } else {
                // Wrong type entered
-               $content['message'] = '<span class="guest_failed">{--BONUS_SHOW_WRONG_TYPE--}</span>';
+               $content['message'] = '<span class="notice">{--BONUS_SHOW_WRONG_TYPE--}</span>';
        }
 } else {
        // Wrong call!
-       $content['message'] = '<span class="guest_failed">{--BONUS_SHOW_WRONG_CALL--}</span>';
+       $content['message'] = '<span class="notice">{--BONUS_SHOW_WRONG_CALL--}</span>';
 }
 
 // Load send_bonus header template (for your banners, e.g.?)