X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-list_payouts.php;h=c6600aec5c06a4408327df22efe7e415dcdfdcf7;hp=0acf3c9a4ba34fa54c1db15e41ac936f6690df30;hb=d8148e3f1f3a6762b2e786dbe99ada269dcf2ea0;hpb=89c00e43d2ce1dd1afe11c2c8485307342805f97

diff --git a/inc/modules/admin/what-list_payouts.php b/inc/modules/admin/what-list_payouts.php
index 0acf3c9a4b..c6600aec5c 100644
--- a/inc/modules/admin/what-list_payouts.php
+++ b/inc/modules/admin/what-list_payouts.php
@@ -40,17 +40,17 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 // Add description as navigation point
 ADD_DESCR("admin", __FILE__);
 
-if (!empty($_GET['pid'])) {
+if (REQUEST_ISSET_GET(('pid'))) {
 	// First let's get the member's ID
-	$result = SQL_QUERY_ESC("SELECT userid, target_account, payout_total, payout_timestamp, password FROM "._MYSQL_PREFIX."_user_payouts WHERE id=%s LIMIT 1",
-		array($_GET['pid']), __FILE__, __LINE__);
+	$result = SQL_QUERY_ESC("SELECT userid, target_account, payout_total, payout_timestamp, password FROM `{!_MYSQL_PREFIX!}_user_payouts` WHERE id=%s LIMIT 1",
+		array(REQUEST_GET('pid')), __FILE__, __LINE__);
 	list($uid, $tuid, $points, $tstamp, $tpass) = SQL_FETCHROW($result);
 	SQL_FREERESULT($result);
 
 	// Obtain some data
-	if (empty($_GET['task']) && (!empty($uid)) && ($uid > 0)) {
+	if (!REQUEST_ISSET_GET(('task')) && (!empty($uid)) && ($uid > 0)) {
 		// Get task ID from database
-		$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_task_system WHERE userid=%s AND task_type='PAYOUT_REQUEST' AND task_created='".$tstamp."' LIMIT 1",
+		$result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_task_system` WHERE userid=%s AND task_type='PAYOUT_REQUEST' AND task_created='".$tstamp."' LIMIT 1",
 			array(bigintval($uid)), __FILE__, __LINE__);
 		list($task) = SQL_FETCHROW($result);
 		SQL_FREERESULT($result);
@@ -60,31 +60,31 @@ if (!empty($_GET['pid'])) {
 		LOAD_TEMPLATE("admin_settings_saved", false, PAYOUT_FAILED_OBTAIN_USERID);
 	} else {
 		// Get task ID from URL
-		$task = $_GET['task'];
+		$task = REQUEST_GET('task');
 	}
 
 	if ((!empty($task)) && (!empty($uid)) && ($uid > 0)) {
 		// Load user's data
-		$result = SQL_QUERY_ESC("SELECT email, gender, surname, family FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
+		$result = SQL_QUERY_ESC("SELECT email, gender, surname, family FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
 			array(bigintval($uid)), __FILE__, __LINE__);
 		list($email, $gender, $surname, $family) = SQL_FETCHROW($result);
 		SQL_FREERESULT($result);
 
 		// Konstante bauen
-		define('PAYOUT_USERDATA_VALUE', "<A href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".TRANSLATE_GENDER($gender)." ".$surname." ".$family."</A>");
+		define('PAYOUT_USERDATA_VALUE', "<a href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".TRANSLATE_GENDER($gender)." ".$surname." ".$family."</a>");
 
-		if (($_GET['do'] == "accept") && (!empty($email))) {
+		if ((REQUEST_GET('do') == "accept") && (!empty($email))) {
 			// Ok, now we can output the form or execute accepting
-			if (isset($_POST['ok'])) {
+			if (IS_FORM_SENT()) {
 				// Obtain payout type and other data
-				$result = SQL_QUERY_ESC("SELECT payout_id FROM "._MYSQL_PREFIX."_user_payouts WHERE id=%s LIMIT 1",
-				 array(bigintval($_GET['pid'])), __FILE__, __LINE__);
+				$result = SQL_QUERY_ESC("SELECT payout_id FROM `{!_MYSQL_PREFIX!}_user_payouts` WHERE id=%s LIMIT 1",
+				 array(bigintval(REQUEST_GET('pid'))), __FILE__, __LINE__);
 				list($ptype) = SQL_FETCHROW($result);
 				SQL_FREERESULT($result);
 
 				if (!empty($ptype)) {
 					// Obtain data from payout type
-					$result = SQL_QUERY_ESC("SELECT from_account, from_pass, engine_url, engine_ret_ok, engine_ret_failed, pass_enc, allow_url FROM "._MYSQL_PREFIX."_payout_types WHERE id=%s LIMIT 1",
+					$result = SQL_QUERY_ESC("SELECT from_account, from_pass, engine_url, engine_ret_ok, engine_ret_failed, pass_enc, allow_url FROM `{!_MYSQL_PREFIX!}_payout_types` WHERE id=%s LIMIT 1",
 					 array(bigintval($ptype)), __FILE__, __LINE__);
 					list($fuid, $fpass, $eurl, $eok, $failed, $eenc, $allow) = SQL_FETCHROW($result);
 					SQL_FREERESULT($result);
@@ -107,7 +107,7 @@ if (!empty($_GET['pid'])) {
 
 						// Transfer variables...
 						$eval = "\$URL = \"".$eurl."\";";
-						$reason = urlencode(base64_encode(PAYOUT_REASON_PAYOUT));
+						$reason = encodeString(getMessage('PAYOUT_REASON_PAYOUT'), false);
 
 						// Run code...
 						eval($eval);
@@ -126,11 +126,11 @@ if (!empty($_GET['pid'])) {
 						}
 
 						// Clear payout request
-						SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_payouts SET status='ACCEPTED' WHERE id=%s LIMIT 1",
-							array(bigintval($_GET['pid'])), __FILE__, __LINE__);
+						SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_payouts` SET `status`='ACCEPTED' WHERE id=%s LIMIT 1",
+							array(bigintval(REQUEST_GET('pid'))), __FILE__, __LINE__);
 
 						// Send out mail
-						$msg = LOAD_EMAIL_TEMPLATE("member_payout_accepted", $_POST['text'], $uid);
+						$msg = LOAD_EMAIL_TEMPLATE("member_payout_accepted", REQUEST_POST('text'), $uid);
 
 						// Output message
 						if ($allow == "Y") {
@@ -150,26 +150,26 @@ if (!empty($_GET['pid'])) {
 					}
 				} else {
 					// Cannot load payout id
-					OUTPUT_HTML("<STRONG class=\"admin_failed\">".PAYOUT_FAILED_OBTAIN_PAYOUT_ID."</STRONG>");
+					LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_failed\">".PAYOUT_FAILED_OBTAIN_PAYOUT_ID."</div>");
 				}
 			} else {
 				// Load template
 				LOAD_TEMPLATE("admin_payout_accept_form", false, $task);
 			}
-		} elseif (($_GET['do'] == "reject") && (!empty($email))) {
+		} elseif ((REQUEST_GET('do') == "reject") && (!empty($email))) {
 			// Ok, now we can output the form or execute rejecting
-			if (isset($_POST['ok'])) {
+			if (IS_FORM_SENT()) {
 				if ($task > 0) {
 					// Clear task
 					RUN_FILTER('solve_task', $task);
 				}
 
 				// Clear payout request
-				SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_payouts SET status='REJECTED' WHERE id=%s LIMIT 1",
-				 array(bigintval($_GET['pid'])), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_payouts` SET `status`='REJECTED' WHERE id=%s LIMIT 1",
+				 array(bigintval(REQUEST_GET('pid'))), __FILE__, __LINE__);
 
 				// Send out mail
-				$msg = LOAD_EMAIL_TEMPLATE("member_payout_rejected", $_POST['text'], $uid);
+				$msg = LOAD_EMAIL_TEMPLATE("member_payout_rejected", REQUEST_POST('text'), $uid);
 
 				// Output message
 				LOAD_TEMPLATE("admin_settings_saved", false, PAYOUT_REJECTED_NOTIFIED);
@@ -186,18 +186,19 @@ if (!empty($_GET['pid'])) {
 		}
 	} elseif ((empty($task)) || ($task == "0")) {
 		// Failed loading task ID
-		LOAD_TEMPLATE("admin_settings_saved", false, PAYOUT_FAILED_OBTAIN_TASK_ID);
+		LOAD_TEMPLATE("admin_settings_saved", false, getMessage('PAYOUT_FAILED_OBTAIN_TASK_ID'));
 	}
 } else {
-	if (empty($_GET['do'])) $_GET['do'] = "";
-	if ($_GET['do'] == "delete") {
+	if (!REQUEST_ISSET_GET(('do'))) REQUEST_SET_GET('do', "");
+
+	if (REQUEST_GET('do') == "delete") {
 		// Delete all requests
-		$result = SQL_QUERY("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_payouts", __FILE__, __LINE__);
+		$result = SQL_QUERY("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_user_payouts`", __FILE__, __LINE__);
 	}
 
 	// Search for payouts
 	$result = SQL_QUERY("SELECT p.id, p.userid AS uid, p.payout_total, p.target_account, p.target_bank, t.type, p.payout_timestamp, p.status, t.allow_url AS allow, p.target_url AS url, p.link_text AS alt, p.banner_url AS banner
-FROM "._MYSQL_PREFIX."_user_payouts AS p, "._MYSQL_PREFIX."_payout_types AS t
+FROM `{!_MYSQL_PREFIX!}_user_payouts` AS p, `{!_MYSQL_PREFIX!}_payout_types` AS t
 WHERE p.payout_id=t.id
 ORDER BY p.payout_timestamp DESC", __FILE__, __LINE__);
 
@@ -207,11 +208,11 @@ ORDER BY p.payout_timestamp DESC", __FILE__, __LINE__);
 		while (list($pid, $uid, $total, $account, $bank, $type, $tstamp, $status, $allow, $url, $alt, $banner) = SQL_FETCHROW($result)) {
 			if ($status == "NEW") {
 				// Generate links for direct accepting and rejecting
-				$status = "<A href=\"".URL."/modules.php?module=admin&amp;what=list_payouts&amp;do=accept&amp;pid=".$pid."\">".PAYOUT_ACCEPT_PAYOUT."</A>&nbsp;|&nbsp;<A href=\"".URL."/modules.php?module=admin&amp;what=list_payouts&amp;do=reject&amp;pid=".$pid."\">".PAYOUT_REJECT_PAYOUT."</A>";
+				$status = "<a href=\"{!URL!}/modules.php?module=admin&amp;what=list_payouts&amp;do=accept&amp;pid=".$pid."\">".PAYOUT_ACCEPT_PAYOUT."</a>&nbsp;|&nbsp;<a href=\"{!URL!}/modules.php?module=admin&amp;what=list_payouts&amp;do=reject&amp;pid=".$pid."\">".PAYOUT_REJECT_PAYOUT."</a>";
 			} else {
 				// Translate status
 				$status = constant('PAYOUT_STATUS_'.strtoupper($status).'');
-				$status = "<FONT class=\"admin_failed\">".$status."</FONT>";
+				$status = "<div class=\"admin_failed\">".$status."</div>";
 			}
 
 			// Nothing entered must be secured in member/what-payputs.php !
@@ -237,7 +238,7 @@ ORDER BY p.payout_timestamp DESC", __FILE__, __LINE__);
 				}
 
 				// Admins can addionally test the URL for framekillers
-				$bank = "<A href=\"".FRAMETESTER($url)."\" target=\"_blank\">".CLICK_HERE."</A>";
+				$bank = "<a href=\"".FRAMETESTER($url)."\" target=\"_blank\">".CLICK_HERE."</a>";
 			} else {
 				// e-currency payout request
 				if (empty($account)) $account = "---";