X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=ref.php;h=5b46f1778aeb065d08d5eca7235af786bbc83f77;hp=05321030896f7026537c2529a0af1a355580b907;hb=cca98f57dff720b174d21d071cee8303462485d7;hpb=61bddb167e29e7275f5a1c9fa8cb80431fa5ee6f

diff --git a/ref.php b/ref.php
index 0532103089..5b46f1778a 100644
--- a/ref.php
+++ b/ref.php
@@ -6,9 +6,9 @@
  * -------------------------------------------------------------------- *
  * File              : ref.php                                          *
  * -------------------------------------------------------------------- *
- * Short description : Redirection for the referral link                *
+ * Short description : Redirection for the referal link                 *
  * -------------------------------------------------------------------- *
- * Kurzbeschreibung  : Weiterleitungsscript fuer die Referral-Links     *
+ * Kurzbeschreibung  : Weiterleitungsscript fuer die Referal-Links      *
  * -------------------------------------------------------------------- *
  *                                                                      *
  * -------------------------------------------------------------------- *
@@ -42,61 +42,69 @@ $GLOBALS['what'] = ""; $GLOBALS['action'] = "";
 $GLOBALS['module'] = "ref"; $CSS = -1;
 
 // Load the required file(s)
-require ("inc/config.php");
+require("inc/config.php");
 
 // Redirect only to registration page when this script is installed
-if (defined('mxchange_installed') && (isBooleanConstantAndTrue('mxchange_installed')))
-{
+if (isBooleanConstantAndTrue('mxchange_installed')) {
 	// Base URL for redirection
-	switch ($_CONFIG['refid_target'])
+	switch (getConfig('refid_target'))
 	{
 	case "register":
-		$URL = URL."/modules.php?module=index&what=register&refid=";
+		$URL = "modules.php?module=index&what=register&refid=";
 		break;
 
 	case "index":
-		$URL = URL."/index.php?refid=";
+		$URL = "index.php?refid=";
 		break;
 	}
 
-	// Get referral ID from ref or refid variable
+	// Get referal ID from ref or refid variable
 	if (!empty($_GET['ref']))        $ref = secureString($_GET['ref']);
-	 elseif (!empty($_GET['refid'])) $ref = bigintval($_GET['refid']);
+	 elseif (!empty($_GET['refid'])) $ref = secureString($_GET['refid']);
 
-	if (!empty($ref))
-	{
-		// Test if nickname ($test == "0") or ID
-		$test = "".round($ref)."";
-		if ((EXT_IS_ACTIVE("nickname")) && ($test != $ref))
-		{
-			// Nickname in URL, so load the ID
-			$result = SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE nickname='%s' LIMIT 1", array($ref), __FILE__, __LINE__);
-			list($ref) = SQL_FETCHROW($result);
-			SQL_FREERESULT($result);
-		}
+	if (!empty($ref)) {
+		// Test if nickname or numeric id
+		if ($ref != "".($ref + 0)."") {
+			if (EXT_IS_ACTIVE("nickname")) {
+				// Nickname in URL, so load the ID
+				$result = SQL_QUERY_ESC("SELECT userid FROM `{!MYSQL_PREFIX!}_user_data` WHERE nickname='%s' LIMIT 1",
+					array($ref), __FILE__, __LINE__);
+
+				// Load userid
+				list($ref) = SQL_FETCHROW($result);
+
+				// Free result
+				SQL_FREERESULT($result);
+			} else {
+				// Invalid request!
+				$ref = 0;
+			}
+		} // END - if
 
 		// Also edit this 0 !
-		if (empty($ref)) $ref = "0";
+		if (empty($ref)) $ref = 0;
+
+		// Update session
+		set_session('refid', $ref);
 
 		// We have an refid here. So we simply add it
 		$URL .= bigintval($ref);
 
-		// Update ref counter
-		$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_clicks=ref_clicks+1 WHERE userid=%d LIMIT 1",
-		 array(bigintval($ref)), __FILE__, __LINE__);
-	}
-	 else
-	{
+		// Is the refid valid?
+		if ($ref > 0) {
+			// Update ref counter
+			SQL_QUERY_ESC("UPDATE `{!MYSQL_PREFIX!}_user_data` SET ref_clicks=ref_clicks+1 WHERE userid=%s LIMIT 1",
+				array(bigintval($ref)), __FILE__, __LINE__);
+		} // END - if
+	} else {
 		// No refid and we add our refid (don't forget to set $def_refid!)
-		$URL = URL."/index.php";
+		$URL = "index.php";
 	}
+
 	// Load the URL
 	LOAD_URL($URL);
-	// Redirection should be done here
-}
- else
-{
-	// You have to configure first!
+} else {
+	// You have to install first!
 	LOAD_URL("install.php");
 }