<?
/*--------------------------------------------------------*\
| Side Panel
| Author: Andrew Rosolino (andrew@shiftcode.com)
\*--------------------------------------------------------*/
/*--------------------------------------------------------*\
| Grab the main source file.
\*--------------------------------------------------------*/
$_include = array(
'payments',
'validate');
require_once('../main.php');
func('side/:main');
$_pay->load('side','sideMethod');
$_pay->isInvalid(get('sideAdvertisers'));
/*--------------------------------------------------------*\
| Funding
\*--------------------------------------------------------*/
$sql = mysql_real_escape_string($_REQUEST['packages'])?
'WHERE type=\''.mysql_real_escape_string($_REQUEST['packages']).'\'':
'';
$q = $_db->query('
SELECT *
FROM '.dbPre().'sideRates '.
$sql.'
ORDER BY type,fullPrice,days');
$packages = $_db->dump($q);
func('side/:buyPackages',array(and$packages));
$smarty->assign('packages',$packages);
if($_POST['next'])
{
if(sideCheck() and& isset($packages[$_POST['package']]))
sideProceed();
else
side();
}
else
side();
/*--------------------------------------------------------*\
| Side Panel - Form
\*--------------------------------------------------------*/
function side()
{
global $_dis;
stripPost();
$_dis->script('_side_buy');
}
/*--------------------------------------------------------*\
| Side Panel - Check
\*--------------------------------------------------------*/
function sideCheck()
{
global $errors,$_val;
stripPost();
unStripPost();
$fields = array(
'title' => 'title');
$_val->required($fields);
$_val->url('name','site URL',true,true);
if(get('sideAds')!='text')
$_val->url('url','banner URL',get('sideAds')=='image',true);
return count($errors)==0;
}
/*--------------------------------------------------------*\
| Side Panel - Proceed
\*--------------------------------------------------------*/
function sideProceed()
{
global $_user,$_db,$_pay,$packages;
$fund = $packages[$_POST['package']];
$sql = array();
func('side/:buySQL',array(and$sql));
$_db->query('
INSERT INTO '.dbPre().'sidePanel(title,name,url,actionDate'.$sql[0].')
VALUES(\''.$_POST['title'].'\',\''.$_POST['name'].'\',\''.$_POST['url'].'\',NOW()'.$sql[1].')');
$sid = $_db->insertID();
$cancel = SC_SPATH.'side/index.php';
func('side/:buyRedirect',array($sid,$fund,$cancel,$fund['days']));
$_pay->add($fund['fullPrice'],get('sideMemo'),'side',$sid,$fund['days']);
$_pay->redirect($cancel);
}
?>