More queries and language constants rewritten

[mailer.git] / view.php

diff --git a/view.php b/view.php
index 003ca6de1f779f0958e118dd6b1c6e8c3b61531a..262227e7a52328595574bd7ddd8991da60b2c391 100644 (file)
--- a/view.php
+++ b/view.php
@@ -32,7 +32,7 @@
  ************************************************************************/
 
 // Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
-require_once("inc/libs/security_functions.php");
+require("inc/libs/security_functions.php");
 
 // Init "action" and "what"
 global $what, $action;
@@ -42,31 +42,32 @@ $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
 $GLOBALS['module'] = "view"; $CSS = -1;
 
 // Load the required file(s)
-require ("inc/config.php");
+require("inc/config.php");
 
 if (((!empty($_GET['user'])) || (!empty($_GET['reseller']))) && (!empty($_GET['banner']))) {
        // Count banner view... we currently don't need the user's id but maybe
        $VIEW = 1;
 
        // for later things... ;-)
-       $result = SQL_QUERY_ESC("SELECT url FROM "._MYSQL_PREFIX."_refbanner WHERE id=%d LIMIT 1", array(bigintval($_GET['banner'])), __FILE__, __LINE__);
+       $result = SQL_QUERY_ESC("SELECT url FROM `{!_MYSQL_PREFIX!}_refbanner` WHERE id=%s LIMIT 1",
+               array(bigintval($_GET['banner'])), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) == 1)  {
                list($url) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);
-               $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_refbanner SET counter=counter+1 WHERE id=%d LIMIT 1", array(bigintval($_GET['banner'])), __FILE__, __LINE__);
+               SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_refbanner` SET counter=counter+1 WHERE id=%s LIMIT 1",
+                       array(bigintval($_GET['banner'])), __FILE__, __LINE__);
 
                $type = substr($url, -3);
-               @header ("Content-Type: image/".$type);
+               header ("Content-Type: image/".$type);
                LOAD_URL($url, false);
        } else {
                // Free memory
                SQL_FREERESULT($result);
        }
-       exit();
 } else {
        // Do nothing for now
        LOAD_URL (URL."/index.php");
 }
 
-//
+// END - if
 ?>