X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=show_bonus.php;h=61e8ce264adacd49e9992bea202fd7b667fbc612;hp=0953786b2cc935e6d350ce58fba281a5ef1c9fc0;hb=0abe254a699e33eb40d8a9bbddb469830cf4ad93;hpb=d798a412acb8c1263933bd7f7a0fd9aa251495a7

diff --git a/show_bonus.php b/show_bonus.php
index 0953786b2c..61e8ce264a 100644
--- a/show_bonus.php
+++ b/show_bonus.php
@@ -37,7 +37,8 @@ require_once("inc/libs/security_functions.php");
 // Init "action" and "what"
 global $what, $action, $startTime;
 $GLOBALS['startTime'] = microtime(true);
-$GLOBALS['what'] = ""; $GLOBALS['action'] = "";
+$GLOBALS['what'] = "";
+$GLOBALS['action'] = "";
 
 // Set this because we have no module in URI
 $GLOBALS['module'] = "show_bonus"; $CSS = 0;
@@ -59,37 +60,43 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
 	if (($_GET['uid'] > 0) && ($_GET['d'] > 0) && (!empty($_GET['t']))) {
 		// Set row name
 		$t = "";
-		switch ($_GET['t'])
-		{
-		case "bonusid":
-			$t = "bonus_id";
-			break;
-
-		case "mailid":
-			$t = "mail_id";
-			break;
-		}
+		switch ($_GET['t']) {
+			case "bonusid": // Bonus mail
+				$t = "bonus_id";
+				break;
+
+			case "mailid": // Regular member mail
+				$t = "mail_id";
+				break;
+
+			default: // Invalid type
+				DEBUG_LOG(__FILE__, __LINE__, sprintf("Invalid type %s detected.", $_GET['t']));
+				break;
+		} // END - switch
 
 		// Valid type?
 		if (!empty($t)) {
 			// Check for data
 			$result = SQL_QUERY_ESC("SELECT DISTINCT d.gender, d.surname, d.family, b.level, b.points
-FROM "._MYSQL_PREFIX."_user_data AS d
+FROM `"._MYSQL_PREFIX."_user_data` AS d
 RIGHT JOIN "._MYSQL_PREFIX."_bonus_turbo AS b
 ON d.userid=b.userid
-WHERE d.status='CONFIRMED' AND d.userid=%s AND b.".$t."='%s' LIMIT 1",
- array(bigintval($_GET['uid']), bigintval($_GET['d'])), __FILE__, __LINE__);
+WHERE d.status='CONFIRMED' AND d.userid=%s AND b.%s=%s
+LIMIT 1",
+				array(bigintval($_GET['uid']), $t, bigintval($_GET['d'])), __FILE__, __LINE__);
+
+			// Entry found?
 			if (SQL_NUMROWS($result) == 1) {
 				// Load data
-				list($gender, $sname, $fname, $level, $points) = SQL_FETCHROW($result);
+				$content = SQL_FETCHARRAY($result);
 
 				// Prepare constants for the pre-template
-				define('__GENDER'    , TRANSLATE_GENDER($gender));
-				define('__SNAME'    , $sname);
-				define('__FNAME'    , $fname);
-				define('__RANK'     , $level);
-				define('__POINTS'   , $points);
-				define('__MAILID'   , $_GET['d']);
+				define('__GENDER'   , TRANSLATE_GENDER($content['gender']));
+				define('__SNAME'    , $content['surname']);
+				define('__FNAME'    , $content['family']);
+				define('__RANK'     , BIGINTVAL($content['level']));
+				define('__POINTS'   , TRANSLATE_COMMA($content['points']));
+				define('__MAILID'   , bigintval($_GET['d']));
 				define('__RANK_ROWS', BONUS_MAKE_RANK_ROWS(bigintval($_GET['d']), $t, bigintval($_GET['uid'])));
 
 				// Constant created within previous function which contains informations for current user's ranking position:
@@ -99,18 +106,18 @@ WHERE d.status='CONFIRMED' AND d.userid=%s AND b.".$t."='%s' LIMIT 1",
 				define('__BONUS_MSG', LOAD_TEMPLATE("show_bonus_msg", true));
 			} else {
 				// No data found
-				define('__BONUS_MSG', "<FONT class=\"guest_failed\">".BONUS_SHOW_NO_DATA."</FONT>");
+				define('__BONUS_MSG', "<span class=\"guest_failed\">".BONUS_SHOW_NO_DATA."</span>");
 			}
 
 			// Free memory
 			SQL_FREERESULT($result);
 		} else {
 			// Wrong type entered
-			define('__BONUS_MSG', "<FONT class=\"guest_failed\">".BONUS_SHOW_WRONG_TYPE."</FONT>");
+			define('__BONUS_MSG', "<span class=\"guest_failed\">".BONUS_SHOW_WRONG_TYPE."</span>");
 		}
 	} else {
 		// Wrong call!
-		define('__BONUS_MSG', "<FONT class=\"guest_failed\">".BONUS_SHOW_WRONG_CALL."</FONT>");
+		define('__BONUS_MSG', "<span class=\"guest_failed\">".BONUS_SHOW_WRONG_CALL."</span>");
 	}
 
 	// Load send_bonus header template (for your banners, e.g.?)
@@ -120,7 +127,7 @@ WHERE d.status='CONFIRMED' AND d.userid=%s AND b.".$t."='%s' LIMIT 1",
 	define('__BONUS_FOOTER', LOAD_TEMPLATE("show_bonus_footer", true));
 
 	// Total ranks who can win
-	define('__BONUS_TOTAL_RANKS', $_CONFIG['bonus_ranks']);
+	define('__BONUS_TOTAL_RANKS', getConfig('bonus_ranks'));
 
 	// Load final template
 	LOAD_TEMPLATE("show_bonus");