<h2>File Contents: /home/planet5/.trash/tracking202/ajax/set_user_prefs.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/.trash/tracking202/ajax/set_user_prefs.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

include_once (substr(dirname(__FILE__), 0, - 17) . &#039;/202-config/connect.php&#039;);
include_once (substr(dirname(__FILE__), 0, - 17) . &#039;/202-config/class-filterengine.php&#039;);
AUTH::require_user();
print_r($_POST);
// set the timezone for the user, for entering their dates.
AUTH::set_timezone($_SESSION[&#039;user_timezone&#039;]);

if ($_SERVER[&#039;REQUEST_METHOD&#039;] == &#039;POST&#039;) {
    
    // start - update user user_preferences
    $mysql[&#039;user_id&#039;] = $db-&gt;real_escape_string($_SESSION[&#039;user_id&#039;]);
    $mysql[&#039;user_pref_adv&#039;] = $db-&gt;real_escape_string($_POST[&#039;user_pref_adv&#039;]);
    $mysql[&#039;user_pref_ppc_network_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;ppc_network_id&#039;]);
    $mysql[&#039;user_pref_ppc_account_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;ppc_account_id&#039;]);
    $mysql[&#039;user_pref_aff_network_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;aff_network_id&#039;]);
    $mysql[&#039;user_pref_aff_campaign_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;aff_campaign_id&#039;]);
    $mysql[&#039;user_pref_text_ad_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;text_ad_id&#039;]);
    $mysql[&#039;user_pref_method_of_promotion&#039;] = $db-&gt;real_escape_string($_POST[&#039;method_of_promotion&#039;]);
    $mysql[&#039;user_pref_landing_page_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;landing_page_id&#039;]);
    $mysql[&#039;user_pref_country_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;country_id&#039;]);
    $mysql[&#039;user_pref_region_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;region_id&#039;]);
    $mysql[&#039;user_pref_isp_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;isp_id&#039;]);
    if (is_numeric($_POST[&#039;subid&#039;]) &amp;&amp; $_POST[&#039;subid&#039;] &gt; 0) {
        $mysql[&#039;user_pref_subid&#039;] = $db-&gt;real_escape_string($_POST[&#039;subid&#039;]);
    } else {
        $mysql[&#039;user_pref_subid&#039;] = &#039;&#039;;
    }
    $mysql[&#039;filter_name1&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_name_1&#039;]);
    $mysql[&#039;filter_condition1&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_condition_1&#039;]);
    if (is_numeric($_POST[&#039;filter_value_1&#039;])) {
        $mysql[&#039;filter_value1&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_value_1&#039;]);
    } else {
        $mysql[&#039;filter_value1&#039;] = &#039;&#039;;
    }
    
    $mysql[&#039;filter_name2&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_name_2&#039;]);
    $mysql[&#039;filter_condition2&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_condition_2&#039;]);
    if (is_numeric($_POST[&#039;filter_value_2&#039;])) {
        $mysql[&#039;filter_value2&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_value_2&#039;]);
    } else {
        $mysql[&#039;filter_value2&#039;] = &#039;&#039;;
    }
    
    $mysql[&#039;filter_name3&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_name_3&#039;]);
    $mysql[&#039;filter_condition3&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_condition_3&#039;]);
    if (is_numeric($_POST[&#039;filter_value_3&#039;])) {
        $mysql[&#039;filter_value3&#039;] = $db-&gt;real_escape_string($_POST[&#039;filter_value_3&#039;]);
    } else {
        $mysql[&#039;filter_value3&#039;] = &#039;&#039;;
    }
    $mysql[&#039;user_pref_ip&#039;] = $db-&gt;real_escape_string($_POST[&#039;ip&#039;]);
    $mysql[&#039;user_pref_ref&#039;] = $db-&gt;real_escape_string($_POST[&#039;referer&#039;]);
    $mysql[&#039;user_pref_keyword&#039;] = $db-&gt;real_escape_string($_POST[&#039;keyword&#039;]);
    $mysql[&#039;user_pref_limit&#039;] = $db-&gt;real_escape_string($_POST[&#039;user_pref_limit&#039;]);
    $mysql[&#039;user_pref_breakdown&#039;] = $db-&gt;real_escape_string($_POST[&#039;user_pref_breakdown&#039;]);
    $mysql[&#039;user_cpc_or_cpv&#039;] = $db-&gt;real_escape_string($_POST[&#039;user_cpc_or_cpv&#039;]);
    $mysql[&#039;user_pref_show&#039;] = $db-&gt;real_escape_string($_POST[&#039;user_pref_show&#039;]);
    $mysql[&#039;user_pref_device_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;device_id&#039;]);
    $mysql[&#039;user_pref_browser_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;browser_id&#039;]);
    $mysql[&#039;user_pref_platform_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;platform_id&#039;]);
    if (is_array($_POST[&#039;details&#039;])) {
        foreach ($_POST[&#039;details&#039;] as $key =&gt; $value) {
            $mysql[&#039;user_pref_group_&#039; . ($key + 1)] = $db-&gt;real_escape_string($value);
        }
    }
}

//only do this if the FilterEngine is Defined
if (class_exists(&#039;FilterEngine&#039;)) {
$_SESSION[&#039;avg_cpc&#039;] = $db-&gt;real_escape_string($_POST[&#039;avg_cpc&#039;]);

// set filterEngine
$filterEngine = new FilterEngine();
$filterEngine-&gt;setFilter($mysql[&#039;filter_name1&#039;], $mysql[&#039;filter_condition1&#039;], $mysql[&#039;filter_value1&#039;], 1);
$filterEngine-&gt;setFilter($mysql[&#039;filter_name2&#039;], $mysql[&#039;filter_condition2&#039;], $mysql[&#039;filter_value2&#039;], 2);
$filterEngine-&gt;setFilter($mysql[&#039;filter_name3&#039;], $mysql[&#039;filter_condition3&#039;], $mysql[&#039;filter_value3&#039;], 3);
}
// predefined timelimit set, set the options
if ($_POST[&#039;user_pref_time_predefined&#039;] != &#039;&#039;) {
    switch ($_POST[&#039;user_pref_time_predefined&#039;]) {
        case &#039;today&#039;:
        case &#039;yesterday&#039;:
        case &#039;last7&#039;:
        case &#039;last14&#039;:
        case &#039;last30&#039;:
        case &#039;thismonth&#039;:
        case &#039;lastmonth&#039;:
        case &#039;thisyear&#039;:
        case &#039;lastyear&#039;:
        case &#039;alltime&#039;:
            $clean[&#039;user_pref_time_predefined&#039;] = $_POST[&#039;user_pref_time_predefined&#039;];
            break;
    }
    
    if (! isset($clean[&#039;user_pref_time_predefined&#039;])) {
        $error[&#039;user_pref_time_predefined&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You choose an incorrect time user_preference&lt;/div&gt;&#039;;
    }
} else {
    
    $from = explode(&#039;/&#039;, $_POST[&#039;from&#039;]);
    $from_month = trim($from[0]);
    $from_day = trim($from[1]);
    $from_year = trim($from[2]);
    
    $to = explode(&#039;/&#039;, $_POST[&#039;to&#039;]);
    $to_month = trim($to[0]);
    $to_day = trim($to[1]);
    $to_year = trim($to[2]);
    
    // if from or to, validate, and if validated, set it accordingly
    if (($from != &#039;&#039;) and (checkdate($from_month, $from_day, $from_year) == false)) {
        $error[&#039;date&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;Wrong date format, you must use the following military time format:   &lt;strong&gt;mm/dd/yyyy - hh:mms&lt;/strong&gt;&lt;/div&gt;&#039;;
    } else {
        $clean[&#039;user_pref_time_from&#039;] = mktime(0, 00, 0, $from_month, $from_day, $from_year);
    }
    
    if (($to != &#039;&#039;) and (checkdate($to_month, $to_day, $to_year) == false)) {
        $error[&#039;date&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;Wrong date format, you must use the following military time format:   &lt;strong&gt;mm/dd/yyyy - hh:mm&lt;/strong&gt;&lt;/div&gt;&#039;;
    } else {
        $clean[&#039;user_pref_time_to&#039;] = mktime(23, 59, 59, $to_month, $to_day, $to_year);
    }
}

echo $error[&#039;date&#039;] . $error[&#039;user_pref_time_predefined&#039;] . $error[&#039;user_pref_limit&#039;] . $error[&#039;user_pref_show&#039;];

if (! $error) {
    
    $mysql[&#039;user_pref_time_predefined&#039;] = $db-&gt;real_escape_string($clean[&#039;user_pref_time_predefined&#039;]);
    $mysql[&#039;user_pref_time_from&#039;] = $db-&gt;real_escape_string($clean[&#039;user_pref_time_from&#039;]);
    $mysql[&#039;user_pref_time_to&#039;] = $db-&gt;real_escape_string($clean[&#039;user_pref_time_to&#039;]);
    
    $user_sql = &quot;   UPDATE  `202_users_pref`
					SET     `user_pref_adv`=&#039;&quot; . $mysql[&#039;user_pref_adv&#039;] . &quot;&#039;,&quot;;
    if ($_POST[&#039;ppc_network_id&#039;] == &#039;&#039;) {
        $user_sql .= &quot;`user_pref_ppc_network_id`=null,&quot;;
    } else 
        if ($_POST[&#039;ppc_network_id&#039;] != &#039;&#039;) {
            $user_sql .= &quot;`user_pref_ppc_network_id`=&#039;&quot; . $mysql[&#039;user_pref_ppc_network_id&#039;] . &quot;&#039;,&quot;;
        }
    $user_sql .= &quot;`user_pref_ppc_account_id`=&#039;&quot; . $mysql[&#039;user_pref_ppc_account_id&#039;] . &quot;&#039;,
							`user_pref_aff_network_id`=&#039;&quot; . $mysql[&#039;user_pref_aff_network_id&#039;] . &quot;&#039;,
							`user_pref_aff_campaign_id`=&#039;&quot; . $mysql[&#039;user_pref_aff_campaign_id&#039;] . &quot;&#039;,
							`user_pref_text_ad_id`=&#039;&quot; . $mysql[&#039;user_pref_text_ad_id&#039;] . &quot;&#039;,
							`user_pref_method_of_promotion`=&#039;&quot; . $mysql[&#039;user_pref_method_of_promotion&#039;] . &quot;&#039;,
							`user_pref_landing_page_id`=&#039;&quot; . $mysql[&#039;user_pref_landing_page_id&#039;] . &quot;&#039;,
							`user_pref_country_id`=&#039;&quot; . $mysql[&#039;user_pref_country_id&#039;] . &quot;&#039;,
							`user_pref_region_id`=&#039;&quot; . $mysql[&#039;user_pref_region_id&#039;] . &quot;&#039;,
							`user_pref_isp_id`=&#039;&quot; . $mysql[&#039;user_pref_isp_id&#039;] . &quot;&#039;,
							`user_pref_ip`=&#039;&quot; . $mysql[&#039;user_pref_ip&#039;] . &quot;&#039;,
							`user_pref_subid`=&#039;&quot; . $mysql[&#039;user_pref_subid&#039;] . &quot;&#039;,
							`user_pref_referer`=&#039;&quot; . $mysql[&#039;user_pref_ref&#039;] . &quot;&#039;,
							`user_pref_keyword`=&#039;&quot; . $mysql[&#039;user_pref_keyword&#039;] . &quot;&#039;,
							`user_pref_limit`=&#039;&quot; . $mysql[&#039;user_pref_limit&#039;] . &quot;&#039;,
							`user_pref_show`=&#039;&quot; . $mysql[&#039;user_pref_show&#039;] . &quot;&#039;,
							`user_pref_breakdown`=&#039;&quot; . $mysql[&#039;user_pref_breakdown&#039;] . &quot;&#039;,
							`user_cpc_or_cpv`=&#039;&quot; . $mysql[&#039;user_cpc_or_cpv&#039;] . &quot;&#039;,
							`user_pref_time_predefined`=&#039;&quot; . $mysql[&#039;user_pref_time_predefined&#039;] . &quot;&#039;,
							`user_pref_time_from`=&#039;&quot; . $mysql[&#039;user_pref_time_from&#039;] . &quot;&#039;,
							`user_pref_time_to`=&#039;&quot; . $mysql[&#039;user_pref_time_to&#039;] . &quot;&#039;,
							`user_pref_group_1`=&#039;&quot; . $mysql[&#039;user_pref_group_1&#039;] . &quot;&#039;,
							`user_pref_group_2`=&#039;&quot; . $mysql[&#039;user_pref_group_2&#039;] . &quot;&#039;,
							`user_pref_group_3`=&#039;&quot; . $mysql[&#039;user_pref_group_3&#039;] . &quot;&#039;,
							`user_pref_group_4`=&#039;&quot; . $mysql[&#039;user_pref_group_4&#039;] . &quot;&#039;,
							`user_pref_device_id`=&#039;&quot; . $mysql[&#039;user_pref_device_id&#039;] . &quot;&#039;,
							`user_pref_browser_id`=&#039;&quot; . $mysql[&#039;user_pref_browser_id&#039;] . &quot;&#039;,
							`user_pref_platform_id`=&#039;&quot; . $mysql[&#039;user_pref_platform_id&#039;] . &quot;&#039;
					WHERE   `user_id`=&#039;&quot; . $mysql[&#039;user_id&#039;] . &quot;&#039;&quot;;
    // echo $user_sql;
    $user_result = $db-&gt;query($user_sql) or record_mysql_error($user_sql);
}</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2F.trash%2Ftracking202%2Fajax'>⬅ Back to Directory</a>