X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=mailid.php;h=c9a28889f1dab9bf4b8e557e47a8b4e6c6aabe3c;hp=babf54fa354caf433a6359972d944375d5f15292;hb=ea2a5e6a7838127d2f9dec02ba68ec575188528b;hpb=dbd1bc95c8f89024118791dc3fb3633a90afa9cf

diff --git a/mailid.php b/mailid.php
index babf54fa35..c9a28889f1 100644
--- a/mailid.php
+++ b/mailid.php
@@ -37,8 +37,6 @@ require_once("inc/libs/security_functions.php");
 // Init "action" and "what"
 global $what, $action;
 $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
-if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']);
-if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);
 
 // Tell everyone we are in this module
 $GLOBALS['module'] = "mailid"; $CSS = -1;
@@ -46,7 +44,7 @@ $GLOBALS['module'] = "mailid"; $CSS = -1;
 // Load the required file(s)
 require ("inc/config.php");
 
-if (defined('mxchange_installed') && (mxchange_installed))
+if (defined('mxchange_installed') && (isBooleanConstantAndTrue('mxchange_installed')))
 {
 	// Is the extension active
 	if (!EXT_IS_ACTIVE("mailid", true)) {
@@ -68,30 +66,24 @@ if (defined('mxchange_installed') && (mxchange_installed))
 	//* DEBUG: */ die("*".$url_uid."/".$url_bid."/".$url_mid."*<pre>".print_r($FATAL, true)."</pre>");
 
 	// 01        1        12            3    32           21    1     2      2     10
-	if (($url_uid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (count($FATAL) == 0))
-	{
+	if (($url_uid) > 0 && (($url_mid > 0) || ($url_bid > 0)) && (count($FATAL) == 0)) {
 		// Maybe he wants to confirm an email?
-		if ($url_mid > 0)
-		{
+		if ($url_mid > 0) {
 			// Normal-Mails
-			$result = SQL_QUERY_ESC("SELECT link_type FROM "._MYSQL_PREFIX."_user_links WHERE stats_id=%d AND userid=%d LIMIT 1",
+			$result = SQL_QUERY_ESC("SELECT link_type FROM "._MYSQL_PREFIX."_user_links WHERE stats_id=%s AND userid=%s LIMIT 1",
 			 array($url_mid, $url_uid), __FILE__, __LINE__);
 			$type = "mailid"; $DATA = $url_mid;
-		}
-		 elseif ($url_bid > 0)
-		{
+		} elseif ($url_bid > 0) {
 			// Bonus-Mail
-			$result = SQL_QUERY_ESC("SELECT link_type FROM "._MYSQL_PREFIX."_user_links WHERE bonus_id=%d AND userid=%d LIMIT 1",
+			$result = SQL_QUERY_ESC("SELECT link_type FROM "._MYSQL_PREFIX."_user_links WHERE bonus_id=%s AND userid=%s LIMIT 1",
 			 array($url_bid, $url_uid), __FILE__, __LINE__);
 			$type = "bonusid"; $DATA = $url_bid;
-		}
-		 else
-		{
+		} else {
 			// Problem: No ID entered
 			LOAD_URL("index.php");
 		}
-		if (SQL_NUMROWS($result) == 1)
-		{
+
+		if (SQL_NUMROWS($result) == 1) {
 			// Load the entry
 			list($ltype) = SQL_FETCHROW($result);
 
@@ -101,37 +93,34 @@ if (defined('mxchange_installed') && (mxchange_installed))
 			{
 			case "NORMAL":
 				// Is the stats ID valid?
-				$result = SQL_QUERY_ESC("SELECT pool_id, url FROM "._MYSQL_PREFIX."_user_stats WHERE id=%d LIMIT 1",
+				$result = SQL_QUERY_ESC("SELECT pool_id, url FROM "._MYSQL_PREFIX."_user_stats WHERE id=%s LIMIT 1",
 				 array($url_mid), __FILE__, __LINE__);
 				break;
 
 			case "BONUS":
 				// Bonus-Mails
-				$result = SQL_QUERY_ESC("SELECT id, url FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1",
+				$result = SQL_QUERY_ESC("SELECT id, url FROM "._MYSQL_PREFIX."_bonus WHERE id=%s LIMIT 1",
 				 array($url_bid), __FILE__, __LINE__);
 				break;
 			}
 
-			if (SQL_NUMROWS($result) == 1)
-			{
+			if (SQL_NUMROWS($result) == 1) {
 				// Load data
 				list($pool, $URL) = SQL_FETCHROW($result);
 				SQL_FREERESULT($result);
 
 				// Is the user's ID unlocked?
-				$result = SQL_QUERY_ESC("SELECT status, sex, surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+				$result = SQL_QUERY_ESC("SELECT status, sex, surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
 				 array($url_uid), __FILE__, __LINE__);
-				if (SQL_NUMROWS($result) == 1)
-				{
+				if (SQL_NUMROWS($result) == 1) {
 					list($status, $sex, $sname, $fname) = SQL_FETCHROW($result);
 					SQL_FREERESULT($result);
-					if ($status == "CONFIRMED")
-					{
+					if ($status == "CONFIRMED") {
 						// User has confirmed his account so we can procede...
 						switch ($ltype)
 						{
 						case "NORMAL":
-							$result = SQL_QUERY_ESC("SELECT payment_id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%d LIMIT 1",
+							$result = SQL_QUERY_ESC("SELECT payment_id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%s LIMIT 1",
 							 array(bigintval($pool)), __FILE__, __LINE__);
 							if (SQL_NUMROWS($result) == 1)
 							{
@@ -146,7 +135,7 @@ if (defined('mxchange_installed') && (mxchange_installed))
 							break;
 
 						case "BONUS":
-							$result = SQL_QUERY_ESC("SELECT points, time FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1",
+							$result = SQL_QUERY_ESC("SELECT points, time FROM "._MYSQL_PREFIX."_bonus WHERE id=%s LIMIT 1",
 							 array($url_bid), __FILE__, __LINE__);
 							if (SQL_NUMROWS($result) == 1)
 							{
@@ -160,8 +149,8 @@ if (defined('mxchange_installed') && (mxchange_installed))
 							break;
 						}
 
-						if ($VALID)
-						{
+						// Was that mail a valid one?
+						if ($VALID) {
 							// If time is zero seconds we have a sponsor mail. 1 Second shall be set to avoid problems
 							if (($time == "0") && ($payment > 0)) { $URL = URL; $time = "1"; }
 							if (($time > 0) && (($payment > 0) || ($points > 0))) {
@@ -202,18 +191,28 @@ if (defined('mxchange_installed') && (mxchange_installed))
 
 	// Error code is set?
 	if (!empty($msg)) {
-		LOAD_URL(URL."/modules.php?module=index&msg=".$msg);
-	}
+		switch ($_CONFIG['mailid_error_redirect']) {
+			case "INDEX": // Redirect to index page
+				LOAD_URL("modules.php?module=index&msg=".$msg);
+				break;
 
-	require_once(PATH."inc/footer.php");
-}
- else
-{
+			case "REJECT": // Redirect to rejection page
+				LOAD_URL($_CONFIG['reject_url']);
+				break;
+		}
+	} else {
+		// Include footer
+		require_once(PATH."inc/footer.php");
+	}
+} else {
 	// You have to configure first!
 	LOAD_URL("install.php");
 }
-// Really all done here... ;-)
-die();
+
+// Shutdown database link
+if (is_resource($link)) {
+	SQL_CLOSE($link, __FILE__, __LINE__);
+}
 
 //
 ?>