PDF rausgenommen

msd2/myoos/includes/content/newsletter.php

@@ -0,0 +1,102 @@
+<?php
+/* ----------------------------------------------------------------------
+
+   MyOOS [Shopsystem]
+   https://www.oos-shop.de
+
+   Copyright (c) 2003 - 2019 by the MyOOS Development Team.
+   ----------------------------------------------------------------------
+   Based on:
+
+   Newsletter Module
+   P&G developmment
+
+   Contribution based on:
+
+   osCommerce, Open Source E-Commerce Solutions
+   http://www.oscommerce.com
+
+   Copyright (c) 2002 - 2003 osCommerce
+   Copyright (c) 2000,2001 The Exchange Project
+   ----------------------------------------------------------------------
+   Released under the GNU General Public License
+   ---------------------------------------------------------------------- */
+
+if(!defined('OOS_VALID_MOD'))die('Direct Access to this location is not allowed.');
+
+require_once MYOOS_INCLUDE_PATH . '/includes/languages/' . $sLanguage . '/newsletter.php';
+
+// require  the password crypto functions
+require_once MYOOS_INCLUDE_PATH . '/includes/functions/function_password.php';
+
+if ( isset($_GET['subscribe']) && ($_GET['subscribe'] == 'confirm') ) {
+
+    $sU = oos_prepare_input($_GET['u']);
+    $sID = oos_prepare_input($_GET['id']);
+    $sE = oos_prepare_input($_GET['e']);
+
+	if ( empty( $sU ) || !is_string( $sU ) ) {
+		oos_redirect(oos_href_link($aContents['403']));
+	}
+	if ( empty( $sID ) || !is_string( $sID ) ) {
+		oos_redirect(oos_href_link($aContents['403']));
+	} 
+	if ( empty( $sE ) || !is_string( $sE ) ) {
+		oos_redirect(oos_href_link($aContents['403']));
+	}
+
+	$sSha1 = sha1($sID);
+    if ( $sSha1 != $sU ) {
+		oos_redirect(oos_href_link($aContents['403']));
+	}
+
+	$pos = strpos ($sID, "f00d");
+	if ($pos === FALSE) {
+		oos_redirect(oos_href_link($aContents['403']));
+	} else {
+		$sID = substr($sID, 4, -4);
+	}
+    
+	$newsletter_recipients = $oostable['newsletter_recipients'];
+	$sql = "UPDATE $newsletter_recipients
+               SET date_added = now(),
+				  status = '1'
+			WHERE recipients_id = '" . intval($sID) . "'
+			AND mail_key = '" . oos_db_input($sE) . "'";	
+	$dbconn->Execute($sql);
+	
+	$newsletter_recipients_history = $oostable['newsletter_recipients_history'];
+	$dbconn->Execute("INSERT INTO $newsletter_recipients_history 
+					(recipients_id,
+					new_value,
+					date_added) VALUES ('" . intval($sID) . "',
+									  '1',
+                                      now())");
+	oos_redirect(oos_href_link($aContents['newsletter'], 'subscribe=success'));							  
+} 
+
+$oBreadcrumb->add($aLang['navbar_title'], oos_href_link($aContents['newsletter']));
+$sCanonical = oos_href_link($aContents['newsletter'], '', FALSE, TRUE);
+
+$aTemplate['page'] = $sTheme . '/page/newsletter.html';
+
+$sPagetitle = $aLang['heading_title'] . ' ' . OOS_META_TITLE;
+$nPageType = OOS_PAGE_TYPE_SERVICE;
+
+require_once MYOOS_INCLUDE_PATH . '/includes/system.php';
+if (!isset($option)) {
+	require_once MYOOS_INCLUDE_PATH . '/includes/message.php';
+	require_once MYOOS_INCLUDE_PATH . '/includes/blocks.php';
+}
+
+// assign Smarty variables;
+$smarty->assign(
+	array(
+		'breadcrumb' 	=> $oBreadcrumb->trail(),
+		'heading_title' => $aLang['navbar_title'],
+		'canonical'		=> $sCanonical
+	)
+);
+
+// display the template
+$smarty->display($aTemplate['page']);