utd-control-panel/www/discount.php

<?PHP

 require_once('lib/dashboard.php');
 require_once('lib/common.php');
 require_once('lib/database.php');
 require_once('lib/account.php');
 
 define('TITLE', 'Apply Discount');
 
 addDashboardItem('Frequently asked questions', 'How do I pay outstanding bills?', 'support/008');

 function foo() {
  if (!isset($_POST['code']) || m($_POST['code']) != $_POST['code']) {
   return;
  }
  $sql = 'SELECT discount_id, discount_time, discount_money, discount_start, discount_end, discount_type, discount_message FROM discounts WHERE discount_code = \''.$_POST['code'].'\''; 
  $res = mysql_query($sql) or mf(__FILE__, __LINE__, $sql);
  if (mysql_num_rows($res) == 0) {
   define('MESSAGE', 'That discount code does not exist.');
   logger::log('Non-existant discount code used: '.$_POST['code'],logger::normal);
   return;
  } 
  $row = mysql_fetch_array($res);
  if ($row['discount_start'] > time()) {
   define('MESSAGE', 'That discount is not yet valid.'); 
   logger::log('Discount code used prematurely: '.$_POST['code'],logger::normal);
   return;
  }
  if ($row['discount_end'] < time()) {
   define('MESSAGE', 'That discount is no longer valid.');
   logger::log('Discount code expired: '.$_POST['code'],logger::normal);
   return;
  }
  if ($row['discount_type'] != 'general') {
   define('MESSAGE', 'That discount is for new signups only.');
   logger::log('Signup discount code used: '.$_POST['code'],logger::normal);
   return;
  }
  $sql2 = 'SELECT du_id FROM discountusers WHERE discount_id = '.$row['discount_id'].' AND user_id = '.UID;
  $res2 = mysql_query($sql2) or mf(__FILE__, __LINE__, $sql2);
  if (mysql_num_rows($res2) > 0) {
   define('MESSAGE', 'You have already claimed that discount.');
   logger::log('Already used discount code: '.$_POST['code'],logger::normal);
   return;
  }
  $sql2 = 'SELECT up_id, up_expires, up_cost FROM userpackages WHERE user_id = '.UID.' AND up_active = 1';
  $res2 = mysql_query($sql2) or mf(__FILE__, __LINE__, $sql2);
  $row2 = mysql_fetch_array($res2);
  $row2['up_expires'] += $row['discount_time'];
  $row2['up_cost'] -= $row['discount_money'];
  $sql2 = 'UPDATE userpackages SET up_expires = '.$row2['up_expires'].', up_cost = '.$row2['up_cost'].' WHERE up_id = '.$row2['up_id'];
  mysql_query($sql2) or mf(__FILE__, __LINE__, $sql2);
  $sql2 = 'INSERT INTO discountusers (discount_id, user_id) VALUES ('.$row['discount_id'].','.UID.')';
  mysql_query($sql2) or mf(__FILE__, __LINE__, $sql2);
  logger::log('Discount code applied: '.$_POST['code'],logger::information);
  if ($row['discount_time'] > 0 && $row['discount_money'] == 0) {
   define('MESSAGE', 'Your current billing period has been extended by '.duration($row['discount_time']).'. '.$row['discount_message']);
  } elseif ($row['discount_time'] == 0) {
   define('MESSAGE', 'Your next bill has been reduced by &pound;'.($row['discount_money']/100).'. '.$row['discount_message']);
  } else {
   define('MESSAGE', 'Your current billing period has been extended by '.discount($row['discount_time']).', and the next bill has been reduced by &pound;'.($row['discount_money']/100).'. '.$row['discount_message']);
  }
 }
 
 foo();

 require_once('lib/header.php');
 
 require_once('pages/discount.php'); 
  
 require_once('lib/footer.php');


?>