[TEP-COMMIT] CVS: catalog/catalog download.php,1.9,1.10

Update of /cvsroot/tep/catalog/catalog
In directory sc8-pr-cvs1:/tmp/cvs-serv4938

Modified Files:
	download.php 
Log Message:
use the new classes and super global variables


Index: download.php
===================================================================
RCS file: /cvsroot/tep/catalog/catalog/download.php,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -d -r1.9 -r1.10
--- download.php	13 Feb 2003 03:01:48 -0000	1.9
+++ download.php	17 Nov 2003 21:02:24 -0000	1.10
@@ -12,15 +12,15 @@
 
   include('includes/application_top.php');
 
-  if (!tep_session_is_registered('customer_id')) die;
+  if ($osC_Customer->isLoggedOn() == false) die;
 
 // Check download.php was called with proper GET parameters
-  if ((isset($HTTP_GET_VARS['order']) && !is_numeric($HTTP_GET_VARS['order'])) || (isset($HTTP_GET_VARS['id']) && !is_numeric($HTTP_GET_VARS['id'])) ) {
+  if ((isset($_GET['order']) && !is_numeric($_GET['order'])) || (isset($_GET['id']) && !is_numeric($_GET['id'])) ) {
     die;
   }
-  
-// Check that order_id, customer_id and filename match
-  $downloads_query = tep_db_query("select date_format(o.date_purchased, '%Y-%m-%d') as date_purchased_day, opd.download_maxdays, opd.download_count, opd.download_maxdays, opd.orders_products_filename from " . TABLE_ORDERS . " o, " . TABLE_ORDERS_PRODUCTS . " op, " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " opd where o.customers_id = '" . $customer_id . "' and o.orders_id = '" . (int)$HTTP_GET_VARS['order'] . "' and o.orders_id = op.orders_id and op.orders_products_id = opd.orders_products_id and opd.orders_products_download_id = '" . (int)$HTTP_GET_VARS['id'] . "' and opd.orders_products_filename != ''");
+
+// Check that order_id, customer id and filename match
+  $downloads_query = tep_db_query("select date_format(o.date_purchased, '%Y-%m-%d') as date_purchased_day, opd.download_maxdays, opd.download_count, opd.download_maxdays, opd.orders_products_filename from " . TABLE_ORDERS . " o, " . TABLE_ORDERS_PRODUCTS . " op, " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " opd where o.customers_id = '" . $osC_Customer->id . "' and o.orders_id = '" . (int)$_GET['order'] . "' and o.orders_id = op.orders_id and op.orders_products_id = opd.orders_products_id and opd.orders_products_download_id = '" . (int)$_GET['id'] . "' and opd.orders_products_filename != ''");
   if (!tep_db_num_rows($downloads_query)) die;
   $downloads = tep_db_fetch_array($downloads_query);
 // MySQL 3.22 does not have INTERVAL
@@ -33,9 +33,9 @@
   if ($downloads['download_count'] <= 0) die;
 // Die if file is not there
   if (!file_exists(DIR_FS_DOWNLOAD . $downloads['orders_products_filename'])) die;
-  
+
 // Now decrement counter
-  tep_db_query("update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_count = download_count-1 where orders_products_download_id = '" . (int)$HTTP_GET_VARS['id'] . "'");
+  tep_db_query("update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_count = download_count-1 where orders_products_download_id = '" . (int)$_GET['id'] . "'");
 
 // Returns a random name, 16 to 20 characters long
 // There are more than 10^28 combinations
@@ -68,7 +68,7 @@
       if ($file == '.' || $file == '..') continue;
       @unlink($dir . $subdir . '/' . $file);
     }
-    closedir($h2); 
+    closedir($h2);
     @rmdir($dir . $subdir);
   }
   closedir($h1);



-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl