42868d70
andryeyev
Создал GIT
|
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
// ==============================
// ======== Îáðàáîòêà ===========
// ==============================
global $_SESSION;
$_POST['form']['interest']='';
if (isset($_POST['form']['mailing'])) {$_POST['form']['interest']='44:45';}
// ñîçäàåì ìåéë ïî óìîë÷àíèþ äëÿ óïðàâëåíèÿ çàêàçîâ
if (isset($_POST['form']['no_account'])) {
$_POST['order_email']=date('d/m/y/H.i.s').'@user.com';
$_POST['form']['email']=$_POST['order_email'];
$_POST['form']['interest']='';
}
if (strpos($_POST['form']['email'],"@user.com")) {
$_POST['form']['group']=1;
} else {
$_POST['form']['group']=2;
}
// Ïðîâåðÿåì ñóùåñòâîâàíèå ïîëüçîâàòåëÿ
$sql0 = "SELECT * FROM zlo_users
WHERE email='".htmlspecialchars($_POST['order_email'],ENT_QUOTES)."' ";
$result0 = mysql_query($sql0) or die(mysql_error());
if (mysql_affected_rows()==0) {
// Äîáàâëÿåì ïîëüçîâàòåëÿ
$pass=generate_password(6);
$sql = sprintf("INSERT INTO zlo_users (username, pass, send, email, city, address, tel, interest, hash, registered, `group`) VALUES (%s, %s,%s,%s, %s, %s, %s, %s, %s, NOW(), %s)",
GetSQLValueString($_POST['order_name'], "text"),
GetSQLValueString($pass, "text"),
GetSQLValueString('1', "text"),
GetSQLValueString($_POST['order_email'], "text"),
GetSQLValueString($_POST['order_city'], "text"),
GetSQLValueString($_POST['order_adress'], "text"),
GetSQLValueString($_POST['order_phone'], "text"),
GetSQLValueString($_POST['form']['interest'], "text"),
GetSQLValueString(md5($_POST['order_email'] . "_extremstyle.ua"), "text"),
GetSQLValueString($_POST['form']['group'], "text"));
$result = mysql_query($sql) or die(mysql_error());
|