X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Flibs%2Fsponsor_functions.php;h=774c19987f0094fe8ae7c547b7f03e80ee3c119c;hp=5d99a7d5a59d749c8c179a99ce76090b7b7621d2;hb=f3e4c2c048761589836fdbe6bd2e46599a1833a7;hpb=b8c86fa12322603c24a88ea2b0fd3dbeba612752 diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php index 5d99a7d5a5..774c19987f 100644 --- a/inc/libs/sponsor_functions.php +++ b/inc/libs/sponsor_functions.php @@ -10,7 +10,12 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Funktionen fuer den Sponsorenbereich * * -------------------------------------------------------------------- * - * * + * $Revision:: 856 $ * + * $Date:: 2009-03-06 20:24:32 +0100 (Fr, 06. Mär 2009) $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: stelzi $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * @@ -120,18 +125,18 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S if ((empty($POST['force'])) || (!IS_ADMIN())) $POST['force'] = 0; // SQL and message string is empty by default - $SQL = ""; $MSG = ""; + $sql = ""; $MSG = ""; // Update? if ($UPDATE) { // Update his data - $SQL = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET "; + $sql = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET "; foreach ($DATA['keys'] as $k => $v) { - $SQL .= $v."='%s', "; + $sql .= $v."='%s', "; } // Remove last ", " from SQL string - $SQL = substr($SQL, 0, -2)." WHERE id='%s' LIMIT 1"; + $sql = substr($sql, 0, -2)." WHERE id='%s' LIMIT 1"; $DATA['values'][] = bigintval(REQUEST_GET('id')); // Generate message @@ -160,7 +165,7 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S $VALUES = str_repeat("%s', '", count($DATA['values']) - 1); // Generate string - $SQL = "INSERT INTO `{!_MYSQL_PREFIX!}_sponsor_data` (".$KEYS.") VALUES ('".$VALUES."%s')"; + $sql = "INSERT INTO `{!_MYSQL_PREFIX!}_sponsor_data` (".$KEYS.") VALUES ('".$VALUES."%s')"; // Generate message $MSG = SPONSOR_GET_MESSAGE(getMessage('ADMIN_SPONSOR_ADDED'), "added", $MSGs); @@ -186,9 +191,9 @@ function SPONSOR_HANDLE_SPONSOR (&$POST, $NO_UPDATE=false, $MSGs=array(), $RET_S $ret = "already"; } - if (!empty($SQL)) { + if (!empty($sql)) { // Run SQL command - $result = SQL_QUERY_ESC($SQL, $DATA['values'], __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC($sql, $DATA['values'], __FUNCTION__, __LINE__); } // Output message @@ -272,31 +277,31 @@ function GENERATE_SPONSOR_MENU($current) if (IS_ADMIN()) $WHERE = ""; // Load main menu entries - $result_main = SQL_QUERY("SELECT action, title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` + $result_main = SQL_QUERY("SELECT action AS main_action, title AS main_title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` WHERE (what='' OR `what` IS NULL) ".$WHERE." ORDER BY `sort`", __FUNCTION__, __LINE__); - if (SQL_NUMROWS($result_main) > 0) - { + if (SQL_NUMROWS($result_main) > 0) { // Load every menu and it's sub menus - while (list($action, $title_main) = SQL_FETCHROW($result_main)) - { + while ($content = SQL_FETCHARRAY($result_main)) { // Load sub menus - $result_sub = SQL_QUERY_ESC("SELECT what, title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` + $result_sub = SQL_QUERY_ESC("SELECT what AS sub_what, title AS sub_title FROM `{!_MYSQL_PREFIX!}_sponsor_menu` WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ".$WHERE." -ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); - if (SQL_NUMROWS($result_sub) > 0) - { +ORDER BY `sort`", + array($content['main_action']), __FUNCTION__, __LINE__); + if (SQL_NUMROWS($result_sub) > 0) { // Load sub menus $SUB = ""; - while (list($what, $title_sub) = SQL_FETCHROW($result_sub)) - { + while ($content2 = SQL_FETCHARRAY($result_sub)) { + // Merge both arrays + $content = merge_array($content, $content2); + // Check if current selected menu is matching the loaded one - if ($current == $what) $title_sub = "".$title_sub.""; + if ($current == $content['sub_what']) $content['sub_title'] = "".$content['sub_title'].""; // Prepare data for the sub template $content = array( - 'what' => $what, - 'title' => $title_sub + 'what' => $content['sub_what'], + 'title' => $content['sub_title'] ); // Load row template @@ -305,27 +310,23 @@ ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); // Prepare data for the main template $content = array( - 'title' => $title_main, + 'title' => $content['main_title'], 'menu' => $SUB ); // Load menu template $OUT .= LOAD_TEMPLATE("sponsor_action", true, $content); - } - else - { + } else { // No sub menus active - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_NO_SUB_MENUS_ACTIVE); + $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, getMessage('SPONSOR_NO_SUB_MENUS_ACTIVE')); } // Free memory SQL_FREERESULT($result_sub); } - } - else - { + } else { // No main menus active - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_NO_MAIN_MENUS_ACTIVE); + $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, getMessage('SPONSOR_NO_MAIN_MENUS_ACTIVE')); } // Free memory @@ -334,9 +335,9 @@ ORDER BY `sort`", array($action), __FUNCTION__, __LINE__); // Return content return $OUT; } + // -function GENERATE_SPONSOR_CONTENT($what) -{ +function GENERATE_SPONSOR_CONTENT ($what) { $OUT = ""; $INC = sprintf("inc/modules/sponsor/%s.php", $what); if (INCLUDE_READABLE($INC)) { @@ -344,12 +345,13 @@ function GENERATE_SPONSOR_CONTENT($what) LOAD_INC_ONCE($INC); } else { // File not found! - $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, SPONSOR_CONTENT_404_1.$what.SPONSOR_CONTENT_404_2); + $OUT .= LOAD_TEMPLATE("admin_settings_saved", true, sprintf(getMessage('SPONSOR_CONTENT_404'), $what)); } // Return content return $OUT; } + // function UPDATE_SPONSOR_LOGIN () { // Failed by default @@ -380,7 +382,7 @@ function SPONSOR_SAVE_DATA ($POST, $content) { 'ok', 'pass1', 'pass2'); // Set default message ("not saved") - $MSG = SPONSOR_ACCOUNT_DATA_NOT_SAVED; + $MSG = getMessage('SPONSOR_ACCOUNT_DATA_NOT_SAVED'); // Check for submitted passwords if ((!empty($POST['pass1'])) && (!empty($POST['pass2']))) { @@ -388,30 +390,30 @@ function SPONSOR_SAVE_DATA ($POST, $content) { if ($POST['pass1'] == $POST['pass2']) { // Okay, then set password and remove pass1 and pass2 $POST['password'] = md5($POST['pass1']); - } - } + } // END - if + } // END - if // Remove all (maybe spoofed) unsafe data from array foreach ($UNSAFE as $remove) { unset($POST[$remove]); - } + } // END - foreach // This array is for the submitted data which we will use with the SQL_QUERY_ESC() function to // secure the data $DATA = array(); // Prepare SQL string - $SQL = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET"; + $sql = "UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET"; foreach ($POST as $key => $value) { // Mmmmm, too less security here??? - $SQL .= " ".strip_tags($key)."='%s',"; + $sql .= " ".strip_tags($key)."='%s',"; // We will secure this later inside the SQL_QUERY_ESC() function $DATA[] = strip_tags($value); // Compile {SLASH} and so on for the email templates $POST[$key] = COMPILE_CODE($value); - } + } // END - foreach // Check if email has changed if ((!empty($content['email'])) && (!empty($POST['email']))) { @@ -420,19 +422,19 @@ function SPONSOR_SAVE_DATA ($POST, $content) { $EMAIL = true; // Okay, has changed then add status with UNCONFIRMED and new hash code - $SQL .= " `status`='EMAIL', hash='%s',"; + $sql .= " `status`='EMAIL', hash='%s',"; // Generate hash code $HASH = md5(session_id().":".$POST['email'].":".GET_REMOTE_ADDR().":".GET_USER_AGENT().":".time()); $DATA[] = $HASH; - } - } + } // END - if + } // END - if // Remove last commata - $SQL = substr($SQL, 0, -1); + $sql = substr($sql, 0, -1); // Add SQL tail data - $SQL .= " WHERE id='%s' AND password='%s' LIMIT 1"; + $sql .= " WHERE id='%s' AND password='%s' LIMIT 1"; $DATA[] = bigintval(get_session('sponsorid')); $DATA[] = get_session('sponsorpass'); @@ -472,7 +474,7 @@ function SPONSOR_SAVE_DATA ($POST, $content) { if (SQL_AFFECTEDROWS() == 1) { if (!empty($templ) && !empty($subj)) { // Run SQL command and check for success - $result = SQL_QUERY_ESC($SQL, $DATA, __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC($sql, $DATA, __FUNCTION__, __LINE__); // Add all data to content global $DATA; @@ -515,9 +517,9 @@ function SPONSOR_SAVE_DATA ($POST, $content) { SEND_EMAIL($content['email'], getMessage('SPONSOR_SETTINGS_SUBJ'), $email_msg); break; } - } - } - } + } // END - if + } // END - if + } // END - if // Return final message return $MSG;