X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=ref.php;h=c9b37ece10ba3cb8f43d4730814a1b7d4fa28966;hp=dbbff4b257a41a5bf132fc18bb861edfa7f30d43;hb=fa3cca8d61ae4840e6781eb39ed69c9ca89fe172;hpb=0369c36aaab5af6ed44da1e13a53baef285f79b4

diff --git a/ref.php b/ref.php
index dbbff4b257..c9b37ece10 100644
--- a/ref.php
+++ b/ref.php
@@ -45,7 +45,7 @@ $GLOBALS['module'] = "ref"; $CSS = -1;
 require ("inc/config.php");
 
 // Redirect only to registration page when this script is installed
-if (defined('mxchange_installed') && (isBooleanConstantAndTrue('mxchange_installed'))) {
+if (isBooleanConstantAndTrue('mxchange_installed')) {
 	// Base URL for redirection
 	switch ($_CONFIG['refid_target'])
 	{
@@ -64,23 +64,38 @@ if (defined('mxchange_installed') && (isBooleanConstantAndTrue('mxchange_install
 
 	if (!empty($ref)) {
 		// Test if nickname or numeric id
-		if ((EXT_IS_ACTIVE("nickname")) && ($ref != "".bigintval($ref)."")) {
-			// Nickname in URL, so load the ID
-			$result = SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE nickname='%s' LIMIT 1",
-				array($ref), __FILE__, __LINE__);
-			list($ref) = SQL_FETCHROW($result);
-			SQL_FREERESULT($result);
+		if ($ref != "".bigintval($ref)."") {
+			if (EXT_IS_ACTIVE("nickname")) {
+				// Nickname in URL, so load the ID
+				$result = SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE nickname='%s' LIMIT 1",
+					array($ref), __FILE__, __LINE__);
+
+				// Load userid
+				list($ref) = SQL_FETCHROW($result);
+
+				// Free result
+				SQL_FREERESULT($result);
+			} else {
+				// Invalid request!
+				$ref = 0;
+			}
 		} // END - if
 
 		// Also edit this 0 !
 		if (empty($ref)) $ref = 0;
 
+		// Update session
+		set_session('refid', $ref);
+
 		// We have an refid here. So we simply add it
 		$URL .= bigintval($ref);
 
-		// Update ref counter
-		$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_clicks=ref_clicks+1 WHERE userid=%s LIMIT 1",
-			array(bigintval($ref)), __FILE__, __LINE__);
+		// Is the refid valid?
+		if ($ref > 0) {
+			// Update ref counter
+			$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET ref_clicks=ref_clicks+1 WHERE userid=%s LIMIT 1",
+				array(bigintval($ref)), __FILE__, __LINE__);
+		} // END - if
 	} else {
 		// No refid and we add our refid (don't forget to set $def_refid!)
 		$URL = URL."/index.php";