PHP|Débutant :: Forums

$docId    = (int) $_GET['docId'];
$uid    = $_GET['uid'];
$awards   = (int) $_GET['awards'];
$trId   = $_GET['trId'];
$promoId  = ((isset($_GET['promoId'])) ? (int) $_GET['promoId'] : 0 );
$hash   = $_GET['hash'];

## DATAS NEEDED TO ADD POINTS TO THE CORRECT USER
$database     = 'my_jommla_database'
$host       = 'localhost'
$main_AUP_table   = 'jos_alpha_userpoints'
$custom_AUP_table   = 'jos_alpha_userpoints_history_payments'
$DB_user      = 'myDBuser'
$DB_password    = 'myPassword'

## CHECK HASH VALUE
if(md5($uid . $awards . $trId . $MYSECRETKEY) == $hash) {
  # DB connect
  $cnx = mysql_connect($host, $DB_user, $DB_password);
  mysql_select_db($database, $cnx);
 
 
  $rs = mysql_query("SELECT COUNT(1) AS NB FROM $custom_AUP_table WHERE external_reference = ''.addslashes($trId).''", $cnx);
  $ifFindTr = (int) mysql_result($rs, 0, 'NB');
  unset($rs);
 
  if($ifFindTr == 0) {
    # all is OK
    # we can add $awards points to the user and save transaction
   
    # Adding points
    mysql_query("UPDATE $main_AUP_table SET points=points+'.$awards.' WHERE userid=''.addslashes($uid).''", $cnx);
   
    # Register in jos_alpha_userpoints_history_payments
    mysql_query( "INSERT INTO $custom_AUP_table (doc_id, user_id, awards, external_reference, promo_id, date)"
          .'VALUES('.$docId.', ''.addslashes($uid).'', '.$awards.', ''.addslashes($trId).'', '.$promoId.', NOW())', $cnx);
   
    echo 'OK';
   
  }
  else {
    # this transaction reference already added
    # add in error log  
   
    echo 'this transaction reference already added';
  }
 
  mysql_close($cnx);
}
else {
  # hash error
  # add in error log  
 
  echo 'hash error';
 
}

?>