X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=mailid_top.php;h=33c4acad41ffe3c0626fe2a3b65dec34a21fe4be;hp=a3f52f3601b2245b45abf6f886d890f38100de65;hb=1090de8d4e7bf659002468fec8571388e7487a00;hpb=dbd1bc95c8f89024118791dc3fb3633a90afa9cf diff --git a/mailid_top.php b/mailid_top.php index a3f52f3601..33c4acad41 100644 --- a/mailid_top.php +++ b/mailid_top.php @@ -37,16 +37,14 @@ require_once("inc/libs/security_functions.php"); // Init "action" and "what" global $what, $action; $GLOBALS['what'] = ""; $GLOBALS['action'] = ""; -if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']); -if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']); // Tell everyone we are in this module -$GLOBALS['module'] = "mailid"; $CSS = "0"; +$GLOBALS['module'] = "mailid"; $CSS = 0; // Load the required file(s) require ("inc/config.php"); -if (defined('mxchange_installed') && (mxchange_installed)) +if (isBooleanConstantAndTrue('mxchange_installed')) { // Is the extension active if (!EXT_IS_ACTIVE("mailid", true)) { @@ -55,7 +53,7 @@ if (defined('mxchange_installed') && (mxchange_installed)) } // Secure all data - $url_uid = "0"; $url_bid = "0"; $url_mid = "0"; $code = "0"; $mode = ""; + $url_uid = 0; $url_bid = 0; $url_mid = 0; $code = 0; $mode = ""; if (!empty($_GET['uid'])) $url_uid = bigintval($_GET['uid']); if (!empty($_GET['mailid'])) $url_mid = bigintval($_GET['mailid']); if (!empty($_GET['bonusid'])) $url_bid = bigintval($_GET['bonusid']); @@ -70,30 +68,30 @@ if (defined('mxchange_installed') && (mxchange_installed)) // Maybe he wants to confirm an email? if ($url_mid > 0) { - $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE stats_id=%d AND userid=%d LIMIT 1", + $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE stats_id=%s AND userid=%s LIMIT 1", array($url_mid, $url_uid), __FILE__, __LINE__); $type = "mailid"; $DATA = $url_mid; } elseif ($url_bid > 0) { - $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE bonus_id=%d AND userid=%d LIMIT 1", + $result = SQL_QUERY_ESC("SELECT id, link_type FROM "._MYSQL_PREFIX."_user_links WHERE bonus_id=%s AND userid=%s LIMIT 1", array($url_bid, $url_uid), __FILE__, __LINE__); $type = "bonusid"; $DATA = $url_bid; } if (SQL_NUMROWS($result) == 1) { // Is the stats ID valid? - list($link_id, $ltype) = SQL_FETCHROW($result); + list($lid, $ltype) = SQL_FETCHROW($result); SQL_FREERESULT($result); switch ($ltype) { case "NORMAL": - $result_mailid = SQL_QUERY_ESC("SELECT pool_id, userid, id FROM "._MYSQL_PREFIX."_user_stats WHERE id=%d LIMIT 1", + $result_mailid = SQL_QUERY_ESC("SELECT pool_id, userid, id FROM "._MYSQL_PREFIX."_user_stats WHERE id=%s LIMIT 1", array($url_mid), __FILE__, __LINE__); break; case "BONUS": - $result_mailid = SQL_QUERY_ESC("SELECT id, id, is_notify FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1", + $result_mailid = SQL_QUERY_ESC("SELECT id, id, is_notify FROM "._MYSQL_PREFIX."_bonus WHERE id=%s LIMIT 1", array($url_bid), __FILE__, __LINE__); break; } @@ -102,7 +100,7 @@ if (defined('mxchange_installed') && (mxchange_installed)) list($pool, $sender, $notify) = SQL_FETCHROW($result_mailid); // Correct notification switch in non-bonus mails - if (($notify != 'Y') && ($notify != 'N')) $notify = 'N'; + if (($notify != "Y") && ($notify != "N")) $notify = "N"; // Free some memory SQL_FREERESULT($result_mailid); @@ -111,25 +109,25 @@ if (defined('mxchange_installed') && (mxchange_installed)) if ($ltype == "BONUS") $sender = 0; // Is the user's ID unlocked? - $result = SQL_QUERY_ESC("SELECT status, sex, surname, family, ref_payout FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1", + $result = SQL_QUERY_ESC("SELECT status, gender, surname, family, ref_payout FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1", array($url_uid), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { // Load data - list($status, $sex, $sname, $fname, $ref_pay) = SQL_FETCHROW($result); + list($status, $gender, $sname, $fname, $ref_pay) = SQL_FETCHROW($result); SQL_FREERESULT($result); if ($status == "CONFIRMED") { // Update last activity - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_online=UNIX_TIMESTAMP(), last_module='mailid_top' WHERE userid=%d LIMIT 1", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_online=UNIX_TIMESTAMP(), last_module='mailid_top' WHERE userid=%s LIMIT 1", array($url_uid), __FILE__, __LINE__); // User has confirmed his account so we can procede... switch ($ltype) { case "NORMAL": - $result = SQL_QUERY_ESC("SELECT payment_id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%d LIMIT 1", + $result = SQL_QUERY_ESC("SELECT payment_id FROM "._MYSQL_PREFIX."_user_stats WHERE pool_id=%s LIMIT 1", array(bigintval($pool)), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { @@ -144,7 +142,7 @@ if (defined('mxchange_installed') && (mxchange_installed)) break; case "BONUS": - $result = SQL_QUERY_ESC("SELECT time, points FROM "._MYSQL_PREFIX."_bonus WHERE id=%d LIMIT 1", + $result = SQL_QUERY_ESC("SELECT time, points FROM "._MYSQL_PREFIX."_bonus WHERE id=%s LIMIT 1", array(bigintval($pool)), __FILE__, __LINE__); if (SQL_NUMROWS($result) == 1) { @@ -158,43 +156,46 @@ if (defined('mxchange_installed') && (mxchange_installed)) } if ($VALID) { - if (($time == "0") && ($payment >0)) $time = "1"; + if (($time == "0") && ($payment > 0)) $time = "1"; if (($time > 0) && ($payment > 0)) { if (!empty($code)) { // Generate code - $img_code = GEN_RANDOM_CODE($CONFIG['code_length'], $code, $url_uid, $DATA); + $img_code = GEN_RANDOM_CODE($_CONFIG['code_length'], $code, $url_uid, $DATA); } switch ($mode) { case "add": + // Init stats data + $stats_data = 0; + // Count clicks switch ($ltype) { case "NORMAL": - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_stats SET clicks=clicks+1 WHERE id=%d LIMIT 1", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_stats SET clicks=clicks+1 WHERE id=%s LIMIT 1", array($url_mid), __FILE__, __LINE__); // Update mediadata as well - if (GET_EXT_VERSION("mediadata") >= "0.0.4") - { + if (GET_EXT_VERSION("mediadata") >= "0.0.4") { // Update database MEDIA_UPDATE_ENTRY(array("total_clicks", "normal_clicks"), "add", 1); } + $stats_data = $url_mid; break; case "BONUS": - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET clicks=clicks+1 WHERE id=%d LIMIT 1", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_bonus SET clicks=clicks+1 WHERE id=%s LIMIT 1", array($url_bid), __FILE__, __LINE__); // Update mediadata as well - if (GET_EXT_VERSION("mediadata") >= "0.0.4") - { + if (GET_EXT_VERSION("mediadata") >= "0.0.4") { // Update database MEDIA_UPDATE_ENTRY(array("total_clicks", "bonus_clicks"), "add", 1); } + $stats_data = $url_bid; break; } @@ -203,45 +204,47 @@ if (defined('mxchange_installed') && (mxchange_installed)) define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true)); // Only when user extension = v0.1.2: Update mails-confirmed counter - if (GET_EXT_VERSION("user") >= "0.1.2") - { + if (GET_EXT_VERSION("user") >= "0.1.2") { // Update counter - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET mails_confirmed=mails_confirmed+1 WHERE userid=%d LIMIT 1", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET mails_confirmed=mails_confirmed+1 WHERE userid=%s LIMIT 1", array($url_uid), __FILE__, __LINE__); } + // Insert stats record + USER_STATS_INSERT_RECORD($url_uid, $type, $stats_data); + // Right code entered? - if (bigintval($_POST['gfx_check']) == $img_code) - { + if (bigintval($_POST['gfx_check']) == $img_code) { // Right code entered add points and remove entry - if (($ref_pay > 0) && ($CONFIG['allow_direct_pay'] == 'N')) + if (($ref_pay > 0) && ($_CONFIG['allow_direct_pay'] == "N")) { - // Don't add points over the referral system + // Don't add points over the referal system $locked = true; $template = "mailid_points_locked"; } else { - // Add points over referral system + // Add points over referal system $locked = false; $template = "mailid_points_done"; } // Count down ref_payout value - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_payout=ref_payout-1 WHERE userid=%d AND ref_payout > 0 LIMIT 1", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_payout=ref_payout-1 WHERE userid=%s AND ref_payout > 0 LIMIT 1", array($url_uid), __FILE__, __LINE__); // Add points + unset($DEPTH); ADD_POINTS_REFSYSTEM($url_uid, $payment, false, "0", $locked); // Shall I add bonus points for "turbo clickers" ? if ((GET_EXT_VERSION("bonus") >= "0.2.2") && (function_exists('BONUS_ADD_TURBO_POINTS'))) { // Is an active-rallye running and this is not a notification mail? - if (($CONFIG['bonus_active'] == 'Y') && ($notify == 'N')) + if (($_CONFIG['bonus_active'] == "Y") && ($notify == "N")) { // Shall I exclude the webmaster's own userid from the active-rallye? - if (((($CONFIG['bonus_uid'] == $url_uid) && ($CONFIG['bonus_include_own'] == 'Y')) || ($CONFIG['bonus_uid'] != $url_uid)) && ($CONFIG['def_refid'] != $url_uid)) + if (((($_CONFIG['bonus_uid'] == $url_uid) && ($_CONFIG['bonus_include_own'] == "Y")) || ($_CONFIG['bonus_uid'] != $url_uid)) && ($_CONFIG['def_refid'] != $url_uid)) { // Add points and remember ranking are done in this function.... BONUS_ADD_TURBO_POINTS($DATA, $url_uid, $type); @@ -257,8 +260,8 @@ if (defined('mxchange_installed') && (mxchange_installed)) } // Remove link from table - $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%d LIMIT 1", - array(bigintval($link_id)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%s LIMIT 1", + array(bigintval($lid)), __FILE__, __LINE__); // Load total points define('__TOTAL_POINTS', TRANSLATE_COMMA( @@ -268,15 +271,14 @@ if (defined('mxchange_installed') && (mxchange_installed)) // Load template LOAD_TEMPLATE($template); - } - else - { + } else { // Wrong image code! So add points to sender's account - ADD_POINTS_REFSYSTEM($sender, $payment); + unset($DEPTH); + ADD_POINTS_REFSYSTEM($sender, $payment, false, 0, false, "direct"); // Remove link from table - $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%d LIMIT 1", - array(bigintval($link_id)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_links WHERE id=%s LIMIT 1", + array(bigintval($lid)), __FILE__, __LINE__); // Load template LOAD_TEMPLATE("mailid_points_failed"); @@ -296,7 +298,7 @@ if (defined('mxchange_installed') && (mxchange_installed)) define('_TYPE_VALUE', $type); define('_DATA_VALUE', $DATA); define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true)); - if ($CONFIG['code_length'] > 0) + if ($_CONFIG['code_length'] > 0) { // Generate Code define('_IMAGE_CODE', IMG_CODE($code, $type, $DATA, $url_uid)); @@ -322,7 +324,7 @@ if (defined('mxchange_installed') && (mxchange_installed)) define('_UID_VALUE' , $url_uid ); define('_TYPE_VALUE', $type); define('_DATA_VALUE', $DATA); - define('_RAND_VALUE', rand(0, 99999)); + define('_RAND_VALUE', mt_rand(0, 99999)); define('_TEMPLATE_BANNER', LOAD_TEMPLATE("mailid_banner", true)); // Load template @@ -330,28 +332,28 @@ if (defined('mxchange_installed') && (mxchange_installed)) break; } } - else OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (6)"); + else OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (6)"); } - else OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (5)"); + else OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (5)"); } - else OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (4)"); + else OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (4)"); } else { SQL_FREERESULT($result); - OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (3)"); + OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (3)"); } } else { SQL_FREERESULT($result); - OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (2)"); + OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (2)"); } } else { SQL_FREERESULT($result); - OUTPUT_HTML ("".MAIL_ALREADY_CONFIRMED." (1)"); + OUTPUT_HTML("".MAIL_ALREADY_CONFIRMED." (1)"); } if ($mode != "img") {