diff options
Diffstat (limited to 'includes/wot.inc.php')
| -rw-r--r-- | includes/wot.inc.php | 25 |
1 files changed, 19 insertions, 6 deletions
diff --git a/includes/wot.inc.php b/includes/wot.inc.php index 59c6d13..9efcf8b 100644 --- a/includes/wot.inc.php +++ b/includes/wot.inc.php @@ -641,6 +641,7 @@ function AssureFoot($oldid,$confirm) // double with notray.inc /** * write_user_agreement() + * writes a new record to the table user_agreement * * @param mixed $memid * @param mixed $document @@ -651,40 +652,52 @@ function AssureFoot($oldid,$confirm) * @return */ function write_user_agreement($memid, $document, $method, $comment, $active=1, $secmemid=0){ - // write a new record to the table user_agreement - $query="insert into `user_agreements` set `memid`=".$memid.", `secmemid`=".$secmemid. - ",`document`='".$document."',`date`=NOW(), `active`=".$active.",`method`='".$method."',`comment`='".$comment."'" ; + // + $query="insert into `user_agreements` set `memid`=".intval($memid).", `secmemid`=".intval($secmemid). + ",`document`='".$document."',`date`=NOW(), `active`=".intval($active).",`method`='".$method."',`comment`='".$comment."'" ; $res = mysql_query($query); } /** * check_date_format() + * checks if the date is entered in the right date format YYYY-MM-DD and + * if the date is after the 1st January of the given year * * @param mixed $date * @param integer $year * @return */ function check_date_format($date, $year=2000){ - //checks if the date is entered in the right date format YYYY-MM-DD and if if (!strpos($date,'-')) { return FALSE; } $arr=explode('-',$date); + + if ((count($arr)!=3)) { + return FALSE; + } if (intval($arr[0])<=$year) { return FALSE; } - return checkdate(intval($arr[1]), intval($arr[2]), intval($arr[0])); + if (intval($arr[1])>12 or intval($arr[1])<=0) { + return FALSE; + } + if (intval($arr[2])>31 or intval($arr[2])<=0) { + return FALSE; + } + + return checkdate( intval($arr[1]), intval($arr[2]), intval($arr[0])); } /** * check_date_differnce() + * returns false if the date is larger then today + time diffrence * * @param mixed $date * @param integer $diff * @return */ function check_date_differnce($date, $diff=1){ - //returns false if the date is larger then today + time diffrence return (strtotime($date)<=time()+$diff*86400); } |