X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fguest%2Fwhat-sponsor_login.php;h=c28f50026c671cc270aff0b7c2e7192a9e0b88d9;hp=12584c5fe23a9f39dce2e9de67ba60b96cac3f1b;hb=963e55ca1ea79e255f235e359cde9f7862191dc5;hpb=80e2def8ef2125fd4d7d1312ee3993ab613f0846 diff --git a/inc/modules/guest/what-sponsor_login.php b/inc/modules/guest/what-sponsor_login.php index 12584c5fe2..c28f50026c 100644 --- a/inc/modules/guest/what-sponsor_login.php +++ b/inc/modules/guest/what-sponsor_login.php @@ -31,8 +31,7 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) -{ +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php"; require($INC); } @@ -55,7 +54,7 @@ if (!empty($_GET['mode'])) if (!empty($_GET['hash'])) { // Lookup sponsor - $result = SQL_QUERY_ESC("SELECT id, status, salut, surname, family, + $result = SQL_QUERY_ESC("SELECT id, status, gender, surname, family, company, position, tax_ident, street_nr1, street_nr2, country, zip, city, email, phone, fax, cell, points_amount AS points, last_pay AS pay, last_curr AS curr @@ -67,8 +66,8 @@ LIMIT 1", array($_GET['hash']), __FILE__, __LINE__); // Sponsor found, load his data... $SPONSOR = SQL_FETCHARRAY($result); - // Translate salut and comma - $SPONSOR['salut'] = TRANSLATE_SEX($SPONSOR['salut']); + // Translate gender and comma + $SPONSOR['gender'] = TRANSLATE_GENDER($SPONSOR['gender']); $SPONSOR['points'] = TRANSLATE_COMMA($SPONSOR['points']); $SPONSOR['pay'] = TRANSLATE_COMMA($SPONSOR['pay']); @@ -145,7 +144,7 @@ WHERE id='%s' AND hash='%s' AND status='EMAIL' LIMIT 1", if (isset($_POST['ok'])) { // Check email - $result = SQL_QUERY_ESC("SELECT id, hash, status, remote_addr, salut, surname, family, sponsor_created + $result = SQL_QUERY_ESC("SELECT id, hash, status, remote_addr, gender, surname, family, sponsor_created FROM "._MYSQL_PREFIX."_sponsor_data WHERE email='%s' AND (status='UNCONFIRMED' OR status='EMAIL') LIMIT 1", array($_POST['email']), __FILE__, __LINE__); @@ -155,7 +154,7 @@ WHERE email='%s' AND (status='UNCONFIRMED' OR status='EMAIL') LIMIT 1", $SPONSOR = SQL_FETCHARRAY($result); // Translate some data - $SPONSOR['salut'] = TRANSLATE_SEX($SPONSOR['salut']); + $SPONSOR['gender'] = TRANSLATE_GENDER($SPONSOR['gender']); $SPONSOR['sponsor_created'] = MAKE_DATETIME($SPONSOR['sponsor_created']); // Prepare email and send it to the sponsor @@ -201,7 +200,7 @@ WHERE email='%s' AND (status='UNCONFIRMED' OR status='EMAIL') LIMIT 1", if (isset($_POST['ok'])) { // Check email - $result = SQL_QUERY_ESC("SELECT id, hash, remote_addr, salut, surname, family, sponsor_created + $result = SQL_QUERY_ESC("SELECT id, hash, remote_addr, gender, surname, family, sponsor_created FROM "._MYSQL_PREFIX."_sponsor_data WHERE email='%s' AND id='%s' AND status='CONFIRMED' LIMIT 1", array($_POST['email'], bigintval($_POST['id'])), __FILE__, __LINE__); @@ -211,7 +210,7 @@ WHERE email='%s' AND id='%s' AND status='CONFIRMED' LIMIT 1", $SPONSOR = SQL_FETCHARRAY($result); // Translate some data - $SPONSOR['salut'] = TRANSLATE_SEX($SPONSOR['salut']); + $SPONSOR['gender'] = TRANSLATE_GENDER($SPONSOR['gender']); $SPONSOR['sponsor_created'] = MAKE_DATETIME($SPONSOR['sponsor_created']); // Generate password @@ -258,7 +257,7 @@ WHERE id='%s' AND password='%s' LIMIT 1", { // Calculate cookie lifetime, maybe we have to change this so the admin can setup a // seperate timeout for these two cookies? - $life = (time() + $CONFIG['online_timeout']); + $life = (time() + $_CONFIG['online_timeout']); // Is confirmed so both is fine and we can continue with login procedure $login = ((setcookie("sponsorid" , bigintval($_POST['sponsorid']), $life, COOKIE_PATH)) && @@ -273,7 +272,7 @@ WHERE id='%s' AND password='%s' LIMIT 1", { // Cookie setup failed! LOAD_TEMPLATE("admin_settings_saved", false, SPONSPOR_COOKIE_SETUP_FAILED); - OUTPUT_HTML("
"); + OUTPUT_HTML("
"); // Login formular and other links LOAD_TEMPLATE("guest_sponsor_login"); @@ -285,7 +284,7 @@ WHERE id='%s' AND password='%s' LIMIT 1", $eval = "\$content = SPONSOR_LOGIN_FAILED_".strtoupper($status).";"; eval($eval); LOAD_TEMPLATE("admin_settings_saved", false, $content); - OUTPUT_HTML("
"); + OUTPUT_HTML("
"); // Login formular and other links LOAD_TEMPLATE("guest_sponsor_login"); @@ -295,7 +294,7 @@ WHERE id='%s' AND password='%s' LIMIT 1", { // Account missing or wrong pass! We shall not find this out for the "hacker folks"... LOAD_TEMPLATE("admin_settings_saved", false, SPONSOR_LOGIN_FAILED_404_WRONG_PASS); - OUTPUT_HTML("
"); + OUTPUT_HTML("
"); // Login formular and other links LOAD_TEMPLATE("guest_sponsor_login");