X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-edit_sponsor.php;h=36f33eff6fc239976f8545849991a9c6c8ab70f0;hp=c80ba7483006615ebf20667266376794b81a7d96;hb=4c83f0cc7459cad9ec9c1c68963f5365155ee935;hpb=963e55ca1ea79e255f235e359cde9f7862191dc5 diff --git a/inc/modules/admin/what-edit_sponsor.php b/inc/modules/admin/what-edit_sponsor.php index c80ba74830..36f33eff6f 100644 --- a/inc/modules/admin/what-edit_sponsor.php +++ b/inc/modules/admin/what-edit_sponsor.php @@ -15,9 +15,10 @@ * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * - * This program is free software. You can redistribute it and/or modify * + * This program is free software; you can redistribute it and/or modify * * it under the terms of the GNU General Public License as published by * - * the Free Software Foundation; either version 2 of the License. * + * the Free Software Foundation; either version 2 of the License, or * + * (at your option) any later version. * * * * This program is distributed in the hope that it will be useful, * * but WITHOUT ANY WARRANTY; without even the implied warranty of * @@ -31,18 +32,18 @@ ************************************************************************/ // Some security stuff... -if ((!defined('__SECURITY')) || (!is_admin())) { +if ((!defined('__SECURITY')) || (!IS_ADMIN())) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php"; require($INC); } // Add description as navigation point -ADD_DESCR("admin", basename(__FILE__)); +ADD_DESCR("admin", __FILE__); -if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { +if ((REQUEST_ISSET_GET(('id'))) && (REQUEST_ISSET_GET(('mode')))) { // Check for selected sponsor - $result = SQL_QUERY_ESC("SELECT company, position, gender, surname, family, street_nr1, street_nr2, zip, city, country, phone, fax, cell, email, url, tax_ident, receive_warnings, warning_interval FROM "._MYSQL_PREFIX."_sponsor_data WHERE id='%s' LIMIT 1", - array(bigintval($_GET['id'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT company, position, gender, surname, family, street_nr1, street_nr2, zip, city, country, phone, fax, cell, email, url, tax_ident, receive_warnings, warning_interval FROM `{!_MYSQL_PREFIX!}_sponsor_data` WHERE id='%s' LIMIT 1", + array(bigintval(REQUEST_GET('id'))), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { // Load sponsor details $DATA = SQL_FETCHARRAY($result); @@ -50,7 +51,7 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { // Prepare all data for the template // Sponsor's ID - define('__SPONSOR_ID' , bigintval($_GET['id'])); + define('__SPONSOR_ID' , bigintval(REQUEST_GET('id'))); // Company's data define('__COMPANY' , $DATA['company']); define('__POSITION' , $DATA['position']); @@ -59,21 +60,21 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { switch ($DATA['gender']) { case "M": - define('__GENDER_M', " selected"); + define('__GENDER_M', " selected=\"selected\""); define('__GENDER_F', ""); define('__GENDER_C', ""); break; case "F": define('__GENDER_M', ""); - define('__GENDER_F', " selected"); + define('__GENDER_F', " selected=\"selected\""); define('__GENDER_C', ""); break; case "C": define('__GENDER_M', ""); define('__GENDER_F', ""); - define('__GENDER_C', " selected"); + define('__GENDER_C', " selected=\"selected\""); break; } define('__SURNAME' , $DATA['surname']); @@ -94,30 +95,30 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { define('__INTERVAL' , CREATE_TIME_SELECTIONS($DATA['warning_interval'], "warning_interval", "MWDh")); // Init variables here - $TPL = sprintf("admin_edit_sponsor_%s", SQL_ESCAPE($_GET['mode'])); + $TPL = sprintf("admin_edit_sponsor_%s", REQUEST_GET(('mode'))); $SQLs = array(); // Sponsor was found - if ((isset($_POST['ok'])) || (isset($_POST['edit']))) { + if ((IS_FORM_SENT()) || (REQUEST_ISSET_POST(('edit')))) { // Perform action on mode - switch ($_GET['mode']) + switch (REQUEST_GET('mode')) { case "add_points": // Add points - if (strval($_POST['points']) > 0) { + if (strval(REQUEST_POST('points')) > 0) { // Replace german decimal comma with computer's decimal dot - $POINTS = strval(str_replace(",", ".", $_POST['points'])); + $POINTS = strval(REVERT_COMMA(REQUEST_POST('points'))); // Add points to account - $result_add = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_sponsor_data SET points_amount=points_amount+%s WHERE id='%s' LIMIT 1", - array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET points_amount=points_amount+%s WHERE id='%s' LIMIT 1", + array($POINTS, bigintval(REQUEST_GET('id'))), __FILE__, __LINE__); // Remember points /reason for the template define('__POINTS' , TRANSLATE_COMMA($POINTS)); - define('__REASON' , $_POST['reason']); + define('__REASON' , REQUEST_POST('reason')); // Send email - $msg = LOAD_EMAIL_TEMPLATE("sponsor_add_points", $_POST['reason'], true); - SEND_EMAIL(__EMAIL, SPONSOR_ADMIN_ADD_POINTS, $msg); + $msg = LOAD_EMAIL_TEMPLATE("sponsor_add_points", REQUEST_POST('reason'), true); + SEND_EMAIL(__EMAIL, ADMIN_SPONSOR_ADD_POINTS, $msg); $MSG = ADMIN_SPONSOR_POINTS_ADDED; } else { // No points entered to add! @@ -126,21 +127,21 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { break; case "sub_points": // Subtract points - if (strval($_POST['points']) > 0) { + if (strval(REQUEST_POST('points')) > 0) { // Replace german decimal comma with computer's decimal dot - $POINTS = strval(str_replace(",", ".", $_POST['points'])); + $POINTS = strval(REVERT_COMMA(REQUEST_POST('points'))); // Add points to account - $result_add = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_sponsor_data SET points_used=points_used+%s WHERE id='%s' LIMIT 1", - array($POINTS, bigintval($_GET['id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_sponsor_data` SET points_used=points_used+%s WHERE id='%s' LIMIT 1", + array($POINTS, bigintval(REQUEST_GET('id'))), __FILE__, __LINE__); // Remember points /reason for the template define('__POINTS' , TRANSLATE_COMMA($POINTS)); - define('__REASON' , $_POST['reason']); + define('__REASON' , REQUEST_POST('reason')); // Send email - $msg = LOAD_EMAIL_TEMPLATE("sponsor_sub_points", $_POST['reason'], true); - SEND_EMAIL(__EMAIL, SPONSOR_ADMIN_SUB_POINTS, $msg); + $msg = LOAD_EMAIL_TEMPLATE("sponsor_sub_points", REQUEST_POST('reason'), true); + SEND_EMAIL(__EMAIL, ADMIN_SPONSOR_SUB_POINTS, $msg); $MSG = ADMIN_SPONSOR_POINTS_SUBTRACTED; } else { // No points entered to add! @@ -150,26 +151,34 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { case "edit": // Edit sponsor account $PASS = true; - if (($_POST['pass1'] != $_POST['pass2']) || ((empty($_POST['pass1'])) && (empty($_POST['pass1'])))) { + if ((REQUEST_POST('pass1') != REQUEST_POST('pass2')) || ((!REQUEST_ISSET_POST(('pass1'))) && (!REQUEST_ISSET_POST(('pass1'))))) { // Remove passwords - unset($_POST['pass1']); - unset($_POST['pass2']); + REQUEST_UNSET_POST(('pass1')); + REQUEST_UNSET_POST(('pass2')); $PASS = false; } - SPONSOR_HANDLE_SPONSOR($_POST); + + // Convert time selection + $DATA = array(); $id = "warning_interval_ye"; $skip = false; + CONVERT_SELECTIONS_TO_TIMESTAMP(REQUEST_POST_ARRAY(), $DATA, $id, $skip); + + // Save the sponsor + SPONSOR_HANDLE_SPONSOR(REQUEST_POST_ARRAY()); // Convert some data for the email template - $_POST['gender'] = TRANSLATE_GENDER($_POST['gender']); - $_POST['warning_interval'] = CREATE_FANCY_TIME($_POST['warning_interval']); - if (!$PASS) $_POST['pass1'] = SPONSOR_PASS_UNCHANGED; + REQUEST_POST('gender' , TRANSLATE_GENDER(REQUEST_POST('gender'))); + REQUEST_POST('warning_interval', CREATE_FANCY_TIME(REQUEST_POST('warning_interval'))); + + if (!$PASS) REQUEST_SET_POST('pass1', getMessage('SPONSOR_PASS_UNCHANGED')); // Load email template and send the mail away - $msg = LOAD_EMAIL_TEMPLATE("admin_sponsor_edit", $_POST, false); - SEND_EMAIL($_POST['email'], SPONSOR_ADMIN_EDIT_SUBJECT, $msg); + $msg = LOAD_EMAIL_TEMPLATE("admin_sponsor_edit", REQUEST_POST_ARRAY(), false); + SEND_EMAIL(REQUEST_POST('email'), getMessage('ADMIN_SPONSOR_EDIT_SUBJECT'), $msg); break; default: // Unknown mode - $MSG = ADMIN_INVALID_MODE_1.SQL_ESCAPE($_GET['mode']).ADMIN_INVALID_MODE_2; + DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown mode %s detected.", REQUEST_GET('mode'))); + $MSG = sprintf(getMessage('ADMIN_SPONSOR_INVALID_MODE'), REQUEST_GET(('mode'))); break; } @@ -177,23 +186,23 @@ if ((!empty($_GET['id'])) && (!empty($_GET['mode']))) { // Output message LOAD_TEMPLATE("admin_settings_saved", false, $MSG); } // END - if - } elseif (FILE_READABLE(sprintf("%stemplates/%s/html/admin/%s.tpl", PATH, GET_LANGUAGE(), $TPL))) { + } elseif (FILE_READABLE(sprintf("%stemplates/%s/html/admin/%s.tpl", constant('PATH'), GET_LANGUAGE(), $TPL))) { // Create mailto link - define('__SPONSOR_VALUE', "".__SURNAME." ".__FAMILY.""); + define('__SPONSOR_VALUE', "{!__SURNAME!} {!__FAMILY!}"); // Load mode template LOAD_TEMPLATE($TPL); } else { // Template not found! - LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_TPL_404_1.SQL_ESCAPE($_GET['mode']).ADMIN_TPL_404_2); + LOAD_TEMPLATE("admin_settings_saved", false, sprintf(getMessage('ADMIN_SPONSOR_MODUS_TPL_404'), REQUEST_GET(('mode')))); } } else { // Sponsor not found! - LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_SPONSOR_404_1.bigintval($_GET['id']).ADMIN_SPONSOR_404_2); + LOAD_TEMPLATE("admin_settings_saved", false, sprintf(getMessage('ADMIN_SPONSOR_404'), bigintval(REQUEST_GET('id')))); } } else { // Not called by what-list_sponsor.php - LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_CALL_NOT_DIRECTLY); + LOAD_TEMPLATE("admin_settings_saved", false, getMessage('ADMIN_CALL_NOT_DIRECTLY')); } //