X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-lock_user.php;h=f91f2aedd4e6126dc03cefe6465ee6c5151bc326;hp=06c4557c92bb6b21e18b873fb73a9b657d09c333;hb=0715fa7aa8e5e70bcf1d957fb09ae655c3896c4e;hpb=1cf72a9c1a5e737509af79d49f0731da2eb6a218

diff --git a/inc/modules/admin/what-lock_user.php b/inc/modules/admin/what-lock_user.php
index 06c4557c92..f91f2aedd4 100644
--- a/inc/modules/admin/what-lock_user.php
+++ b/inc/modules/admin/what-lock_user.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 09/28/2003 *
- * ===============                              Last change: 06/10/2004 *
+ * Mailer v0.2.1-FINAL                                Start: 09/28/2003 *
+ * ===================                          Last change: 06/10/2004 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : what-lock_user.php                               *
@@ -10,9 +10,15 @@
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Mitglieder sperren                               *
  * -------------------------------------------------------------------- *
- *                                                                      *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
+ * $Tag:: 0.2.1-FINAL                                                 $ *
+ * $Author::                                                          $ *
+ * Needs to be in all Files and every File needs "svn propset           *
+ * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
  * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009, 2010 by Mailer Developer Team                    *
  * For more information visit: http://www.mxchange.org                  *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
@@ -32,154 +38,142 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
-	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
-	require($INC);
-}
+if ((!defined('__SECURITY')) || (!isAdmin())) {
+	die();
+} // END - if
 
 // Add description as navigation point
-ADD_DESCR("admin", __FILE__);
+addMenuDescription('admin', __FILE__);
 
 // Is a userid set?
-if (!empty($_GET['u_id'])) {
-	// Load user's data
-	$result_user = SQL_QUERY_ESC("SELECT status, gender, surname, family, email FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
-	 array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
+if (isGetRequestParameterSet('userid')) {
+	// Action not performed by default
 	$ACT = false;
-	if (SQL_NUMROWS($result_user) == 1) {
-		// User found
-		list($status, $gender, $sname, $fname, $email) = SQL_FETCHROW($result_user);
-
-		// Free result
-		SQL_FREERESULT($result_user);
 
+	// Load user's data
+	if (fetchUserData(getRequestParameter('userid'))) {
 		// Is a lock reason set?
-		if ((!empty($_POST['lock'])) && ($status != "LOCKED")) {
+		if ((isFormSent('lock')) && (getUserData('status') != 'LOCKED')) {
 			// Ok, lock the account!
-			if (GET_EXT_VERSION("user") >= "0.3.5") {
+			if (isExtensionInstalledAndNewer('user', '0.3.5')) {
 				// Lock with reason
-				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='LOCKED',lock_reason='%s',lock_timestamp=NOW() WHERE userid=%s LIMIT 1",
-					array($_POST['reason'], bigintval($_GET['u_id'])), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `status`='LOCKED', `lock_reason`='%s', `lock_timestamp`=NOW() WHERE `userid`=%s LIMIT 1",
+					array(postRequestParameter('reason'), bigintval(getRequestParameter('userid'))), __FILE__, __LINE__);
 			} else {
 				// Lock with no lock reason saved
-				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='LOCKED' WHERE userid=%s LIMIT 1",
-					array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `status`='LOCKED' WHERE `userid`=%s LIMIT 1",
+					array(bigintval(getRequestParameter('userid'))), __FILE__, __LINE__);
 			}
 
 			// Entry updated?
 			if (SQL_AFFECTEDROWS() == 1) {
 				// Send an email to the user! In later version you can optionally switch this feature off
-				$msg = LOAD_EMAIL_TEMPLATE("lock-user", array('text' => $_POST['reason']), bigintval($_GET['u_id']));
+				$message = loadEmailTemplate('lock-user', array('text' => postRequestParameter('reason')), bigintval(getRequestParameter('userid')));
 
 				// Send away...
-				SEND_EMAIL(bigintval($_GET['u_id']), ADMIN_LOCKED_SUBJ, $msg);
+				sendEmail(bigintval(getRequestParameter('userid')), getMessage('ADMIN_LOCKED_SUBJ'), $message);
 			} // END - if
 
 			// Prepare message
-			$MSG = USER_ACCOUNT_LOCKED_1.$_GET['u_id'].USER_ACCOUNT_LOCKED_2;
+			$message = getMaskedMessage('USER_ACCOUNT_LOCKED', bigintval(getRequestParameter('userid')));
 			$ACT = true;
-		} elseif ((!empty($_POST['unlock'])) && ($status == "LOCKED")) {
+		} elseif ((isPostRequestParameterSet('unlock')) && (getUserData('status') == 'LOCKED')) {
 			// Ok, unlock the account!
-			if (GET_EXT_VERSION("user") >= "0.3.5") {
+			if (isExtensionInstalledAndNewer('user', '0.3.5')) {
 				// Reset lock reason as well
-				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='CONFIRMED',lock_reason='',lock_timestamp='0000-00-00 00:00' WHERE userid=%s LIMIT 1",
-					array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE
+	`{?_MYSQL_PREFIX?}_user_data`
+SET
+	`status`='CONFIRMED',
+	`lock_reason`='',
+	`lock_timestamp`='0000-00-00 00:00'
+WHERE
+	`userid`=%s
+LIMIT 1",
+					array(bigintval(getRequestParameter('userid'))), __FILE__, __LINE__);
 			} else {
 				// No lock reason to reset
-				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='CONFIRMED' WHERE userid=%s LIMIT 1",
-					array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `status`='CONFIRMED' WHERE `userid`=%s LIMIT 1",
+					array(bigintval(getRequestParameter('userid'))), __FILE__, __LINE__);
 			}
 
 			// Entry updated?
 			if (SQL_AFFECTEDROWS() == 1) {
 				// Send an email to the user! In later version you can optionally switch this feature off
-				$msg = LOAD_EMAIL_TEMPLATE("unlock-user", array('text' => $_POST['reason']), bigintval($_GET['u_id']));
+				$message = loadEmailTemplate('unlock-user', array('text' => postRequestParameter('reason')), bigintval(getRequestParameter('userid')));
 
 				// Send away...
-				SEND_EMAIL(bigintval($_GET['u_id']), getMessage('ADMIN_UNLOCKED_SUBJ'), $msg);
-				if (EXT_IS_ACTIVE("rallye")) {
-					RALLYE_AUTOADD_USER($_GET['u_id']);
+				sendEmail(bigintval(getRequestParameter('userid')), getMessage('ADMIN_UNLOCKED_SUBJ'), $message);
+				if (isExtensionActive('rallye')) {
+					addUserToReferalRallye(getRequestParameter('userid'));
 				} // END - if
 			} // END - if
 
 			// Prepare message
-			$MSG = USER_ACCOUNT_UNLOCKED_1.$_GET['u_id'].USER_ACCOUNT_UNLOCKED_2;
+			$message = getMaskedMessage('USER_ACCOUNT_UNLOCKED', bigintval(getRequestParameter('userid')));
 			$ACT = true;
-		} elseif (isset($_POST['del'])) {
+		} elseif (isFormSent('del')) {
 			// Delete the account
 			$ACT = true;
-			LOAD_INC_ONCE("inc/modules/admin/what-del_user.php");
-		} elseif (!empty($_POST['no'])) {
+			loadIncludeOnce('inc/modules/admin/what-del_user.php');
+		} elseif (isPostRequestParameterSet('no')) {
 			// Do not lock him...
-			$URL = "modules.php?module=admin&amp;what=list_user&amp;u_id=".bigintval($_GET['u_id']);
+			$url = adminCreateUserLink(getRequestParameter('userid'));
 		} else {
-			$result = SQL_QUERY_ESC("SELECT email, surname, family FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
-				array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
-
-			// Entry found?
-			if (SQL_NUMROWS($result) == 1) {
-				// Load data
-				list ($email, $sname, $fname) = SQL_FETCHROW($result);
-
-				// Free result
-				SQL_FREERESULT($result);
-
+			// Load user data we need
+			if (fetchUserData(getRequestParameter('userid'))) {
 				// Transfer data to constants for the template
-				define('__EMAIL', CREATE_EMAIL_LINK($email, "user_data"));
-				define('__SNAME', $sname);
-				define('__FNAME', $fname);
-				define('__UID'  , bigintval($_GET['u_id']));
+				$content['userid']  = getRequestParameter('userid');
 
 				// Realy want to lock?
-				switch ($status)
-				{
-				case "CONFIRMED": // Yes, lock him down... ;-)
-					define('__OK_VALUE'    , "lock");
-					define('__HEADER_VALUE', ADMIN_HEADER_LOCK_ACCOUNT_1.__UID.ADMIN_HEADER_LOCK_ACCOUNT_2);
-					define('__TEXT_VALUE'  , ADMIN_TEXT_LOCK_ACCOUNT_1.__UID.ADMIN_TEXT_LOCK_ACCOUNT_2);
-					break;
-
-				case "LOCKED": // Unlock the user
-					define('__OK_VALUE'    , "unlock");
-					define('__HEADER_VALUE', ADMIN_HEADER_UNLOCK_ACCOUNT_1.__UID.ADMIN_HEADER_UNLOCK_ACCOUNT_2);
-					define('__TEXT_VALUE'  , ADMIN_TEXT_UNLOCK_ACCOUNT_1.__UID.ADMIN_TEXT_UNLOCK_ACCOUNT_2);
-					break;
-
-				case "UNCONFIRMED": // Unconfirmed accounts cannot be unlocked!
-					define('__OK_VALUE'    , "del");
-					define('__HEADER_VALUE', ADMIN_HEADER_DEL_ACCOUNT_1.__UID.ADMIN_HEADER_DEL_ACCOUNT_2);
-					define('__TEXT_VALUE'  , ADMIN_TEXT_DEL_ACCOUNT_1.__UID.ADMIN_TEXT_DEL_ACCOUNT_2);
-					break;
+				switch (getUserData('status')) {
+					case 'CONFIRMED': // Yes, lock him down... ;-)
+						$content['ok']     = 'lock';
+						$content['header'] = getMaskedMessage('ADMIN_HEADER_LOCK_ACCOUNT', $content['userid']);
+						$content['text']   = getMaskedMessage('ADMIN_TEXT_LOCK_ACCOUNT', $content['userid']);
+						break;
+
+					case 'LOCKED': // Unlock the user
+						$content['ok']     = 'unlock';
+						$content['header'] = getMaskedMessage('ADMIN_HEADER_UNLOCK_ACCOUNT', $content['userid']);
+						$content['text']   = getMaskedMessage('ADMIN_TEXT_UNLOCK_ACCOUNT', $content['userid']);
+						break;
+
+					case 'UNCONFIRMED': // Unconfirmed accounts cannot be unlocked!
+						$content['ok'] = 'del';
+						$content['header'] = getMaskedMessage('ADMIN_HEADER_DEL_ACCOUNT', $content['userid']);
+						$content['text']   = getMaskedMessage('ADMIN_TEXT_DEL_ACCOUNT', $content['userid']);
+						break;
 				}
 
 				// Output form
-				LOAD_TEMPLATE("admin_lock_user");
+				loadTemplate('admin_lock_user', false, $content);
 			} else {
 				// Account does not exists!
-				LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_failed\">".sprintf(getMessage('ADMIN_MEMBER_404'), $_GET['u_id'])."</div>");
+				loadTemplate('admin_settings_saved', false, '<div class="admin_failed">' . getMaskedMessage('ADMIN_MEMBER_404', bigintval(getRequestParameter('userid'))) . '</div>');
 			}
 		}
 
 		// Is an URL set?
-		if (!empty($URL)) {
+		if (!empty($url)) {
 			// Reload and die...
-			LOAD_URL($URL);
+			redirectToUrl($url);
 		} elseif ($ACT) {
 			// An action was performed...
-			if (!empty($MSG)) {
-				LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_green\">".$MSG."</div>");
+			if (!empty($message)) {
+				loadTemplate('admin_settings_saved', false, '<div class="admin_failed">' . $message . '</div>');
 			} else {
-				LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_green\">".getMessage('ADMIN_USER_UPDATED')."</div>");
+				loadTemplate('admin_settings_saved', false, '<div class="admin_failed">{--ADMIN_USER_UPDATED--}</div>');
 			}
 		}
 	} else {
 		// Account does not exists!
-		LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_failed\">".sprintf(getMessage('ADMIN_MEMBER_404'), $_GET['u_id'])."</div>");
+		loadTemplate('admin_settings_saved', false, '<div class="admin_failed">' . getMaskedMessage('ADMIN_MEMBER_404', bigintval(getRequestParameter('userid'))) . '</div>');
 	}
 } else {
 	// List all users
-	ADD_MEMBER_SELECTION_BOX();
+	addMemberSelectionBox();
 }
 
-//
+// [EOF]
 ?>