<h2>File Contents: /home/planet5/public_html/tracking/tracking202/ajax/update_cpc2.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/public_html/tracking/tracking202/ajax/update_cpc2.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php include_once(str_repeat(&quot;../&quot;, 2).&#039;202-config/connect.php&#039;); 

AUTH::require_user();

AUTH::set_timezone($_SESSION[&#039;user_timezone&#039;]);
	
//check variables

	$from = explode(&#039;/&#039;, $_POST[&#039;from&#039;]);
	$from_month = $from[0];
	$from_day = $from[1];
	$from_year = $from[2];

	$to = explode(&#039;/&#039;, $_POST[&#039;to&#039;]);
	$to_month = $to[0];
	$to_day = $to[1];
	$to_year = $to[2];

//if from or to, validate, and if validated, set it accordingly

	if  ((!$_POST[&#039;from&#039;]) and (!$_POST[&#039;to&#039;])) { 
		$error[&#039;time&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;Please enter in the dates from and to like this &lt;strong&gt;mm/dd/yyyy&lt;/strong&gt;&lt;/div&gt;&#039;;      
	}
		$clean[&#039;from&#039;] = mktime(0,0,0,$from_month,$from_day,$from_year);
		$html[&#039;from&#039;] = date(&#039;m/d/y g:ia&#039;, $clean[&#039;from&#039;]);  
	                                                                                                             
		$clean[&#039;to&#039;] = mktime(23,59,59,$to_month,$to_day,$to_year); 
		$html[&#039;to&#039;] = date(&#039;m/d/y g:ia&#039;, $clean[&#039;to&#039;]);             
		
		$mysql[&#039;from&#039;] = $db-&gt;real_escape_string($clean[&#039;from&#039;]);
		$mysql[&#039;to&#039;] = $db-&gt;real_escape_string($clean[&#039;to&#039;]);

//set mysql variables
	$mysql[&#039;user_id&#039;] = $db-&gt;real_escape_string($_SESSION[&#039;user_id&#039;]);	
	
//check Category id, that you own
	if ($_POST[&#039;aff_network_id&#039;]) {
		$mysql[&#039;aff_network_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;aff_network_id&#039;]);    
		$aff_network_sql = &quot;SELECT * FROM 202_aff_networks WHERE aff_network_id=&#039;&quot;.$mysql[&#039;aff_network_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
		$aff_network_result = $db-&gt;query($aff_network_sql) or record_mysql_error($aff_network_sql);
		$aff_network_row = $aff_network_result-&gt;fetch_assoc();
		if (!$aff_network_row) { 
			$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
		} else {
			$html[&#039;aff_network_name&#039;] = htmlentities($aff_network_row[&#039;aff_network_name&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
		} 
	} else {
		$html[&#039;aff_network_name&#039;] = &#039;ALL your Categories&#039;;		
	}

//check aff_campaign id, that you own
	if ($_POST[&#039;aff_campaign_id&#039;]) {
		$mysql[&#039;aff_campaign_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;aff_campaign_id&#039;]);    
		$aff_campaign_sql = &quot;SELECT * FROM 202_aff_campaigns WHERE aff_campaign_id=&#039;&quot;.$mysql[&#039;aff_campaign_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
		$aff_campaign_result = $db-&gt;query($aff_campaign_sql) or record_mysql_error($aff_campaign_sql);
		$aff_campaign_row = $aff_campaign_result-&gt;fetch_assoc();
		if (!$aff_campaign_row) { 
			$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
		} else {
			$html[&#039;aff_campaign_name&#039;] = htmlentities($aff_campaign_row[&#039;aff_campaign_name&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
		} 
	} else {
		$html[&#039;aff_campaign_name&#039;] = &#039;ALL your campaigns in these Categories&#039;;        
	}    
	
//check text_ad id, that you own
	if ($_POST[&#039;text_ad_id&#039;]) {
		$mysql[&#039;text_ad_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;text_ad_id&#039;]);    
		$text_ad_sql = &quot;SELECT * FROM 202_text_ads WHERE text_ad_id=&#039;&quot;.$mysql[&#039;text_ad_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
		$text_ad_result = $db-&gt;query($text_ad_sql) or record_mysql_error($text_ad_sql);
		$text_ad_row = $text_ad_result-&gt;fetch_assoc();
		if (!$text_ad_row) { 
			$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
		} else {
			$html[&#039;text_ad_name&#039;] = htmlentities($text_ad_row[&#039;text_ad_name&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
		} 
	} else {
		$html[&#039;text_ad_name&#039;] = &#039;ALL your text ads in these campaigns&#039;;        
	}
	
//check method of promotion, that you own
	if ($_POST[&#039;method_of_promotion&#039;]) {
		if ($_POST[&#039;method_of_promotion&#039;] == &#039;landingpage&#039;) { 
			$html[&#039;method_of_promotion&#039;] = &#039;Landing pages&#039;;
			//ITS ON 5 NOT EQULA To 5, because 5 IS IN OUR DB, AS A SITE WITH NO URL!!!! AS THE SITE_URL_ID
			$mysql[&#039;method_of_promotion&#039;] = &#039; AND click_landing_site_url_id!=\&#039;0\&#039; &#039;;	
		} else {
			$html[&#039;method_of_promotion&#039;] = &#039;Direct links&#039;;
			$mysql[&#039;method_of_promotion&#039;] = &#039; AND click_landing_site_url_id=\&#039;0\&#039; &#039;;	
		}
	} else {
		$html[&#039;method_of_promotion&#039;] = &#039;BOTH direct links and landing pages&#039;;        
	} 	
	
//check landing_page id, that you own
	if (($_POST[&#039;method_of_promotion&#039;] == &#039;landingpage&#039;) or ($_POST[&#039;tracker_type&#039;] == 1)) { 
		if ($_POST[&#039;landing_page_id&#039;]) {
			$mysql[&#039;landing_page_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;landing_page_id&#039;]);    
			$landing_page_sql = &quot;SELECT * FROM 202_landing_pages WHERE landing_page_id=&#039;&quot;.$mysql[&#039;landing_page_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
			$landing_page_result = $db-&gt;query($landing_page_sql) or record_mysql_error($landing_page_sql);
			$landing_page_row = $landing_page_result-&gt;fetch_assoc();
			if (!$landing_page_row) { 
				$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
			} else {
				$html[&#039;landing_page_name&#039;] = htmlentities($landing_page_row[&#039;landing_page_nickname&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
			} 
		} else {
			$html[&#039;landing_page_name&#039;] = &#039;ALL your landing pages in these campaigns&#039;;        
		}
	} else {
		$html[&#039;landing_page_name&#039;] = &#039;n/a&#039;;  		
	}
	
//check Category id, that you own
	if ($_POST[&#039;ppc_network_id&#039;]) {
		$mysql[&#039;ppc_network_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;ppc_network_id&#039;]);    
		$ppc_network_sql = &quot;SELECT * FROM 202_ppc_networks WHERE ppc_network_id=&#039;&quot;.$mysql[&#039;ppc_network_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
		$ppc_network_result = $db-&gt;query($ppc_network_sql) or record_mysql_error($ppc_network_sql);
		$ppc_network_row = $ppc_network_result-&gt;fetch_assoc();
		if (!$ppc_network_row) { 
			$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
		} else {
			$html[&#039;ppc_network_name&#039;] = htmlentities($ppc_network_row[&#039;ppc_network_name&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
		} 
	} else {
		$html[&#039;ppc_network_name&#039;] = &#039;ALL Your Traffic Sources&#039;;        
	}

//check ppc_account id, that you own
	if ($_POST[&#039;ppc_account_id&#039;]) {
		$mysql[&#039;ppc_account_id&#039;] = $db-&gt;real_escape_string($_POST[&#039;ppc_account_id&#039;]);    
		$ppc_account_sql = &quot;SELECT * FROM 202_ppc_accounts WHERE ppc_account_id=&#039;&quot;.$mysql[&#039;ppc_account_id&#039;].&quot;&#039; AND user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
		$ppc_account_result = $db-&gt;query($ppc_account_sql) or record_mysql_error($ppc_account_sql);
		$ppc_account_row = $ppc_account_result-&gt;fetch_assoc();
		if (!$ppc_account_row) { 
			$error[&#039;user&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You can not modify other peoples cpc history.&lt;/div&gt;&#039;; 
		} else {
			$html[&#039;ppc_account_name&#039;] = htmlentities($ppc_account_row[&#039;ppc_account_name&#039;], ENT_QUOTES, &#039;UTF-8&#039;);
		} 
	} else {
		$html[&#039;ppc_account_name&#039;] = &#039;ALL Your Traffic Source Accounts in these Traffic Sources&#039;;        
	}  
	
	if((!is_numeric($_POST[&#039;cpc_dollars&#039;])) or (!is_numeric($_POST[&#039;cpc_cents&#039;]))) { 
		$error[&#039;cpc&#039;] = &#039;&lt;div class=&quot;error&quot;&gt;You did not input a numeric max CPC.&lt;/div&gt;&#039;; 
	} else {
		$click_cpc = $_POST[&#039;cpc_dollars&#039;] . &#039;.&#039; . $_POST[&#039;cpc_cents&#039;];
		$html[&#039;click_cpc&#039;] = htmlentities(dollar_format($click_cpc), ENT_QUOTES, &#039;UTF-8&#039;);
		$mysql[&#039;click_cpc&#039;] = $db-&gt;real_escape_string($click_cpc);
	}
	
		
//echo error
	echo $error[&#039;time&#039;] . $error[&#039;user&#039;];      

//if there was an error terminate, or else just continue to run
	if ($error) { die(); } 
	
	$de = array();

// update regular clicks
	$sql = &quot;UPDATE  202_clicks LEFT JOIN 202_clicks_advance USING (click_id) 
						   LEFT JOIN 202_clicks_site USING (click_id) 
						   LEFT JOIN 202_aff_campaigns ON (202_clicks.aff_campaign_id = 202_aff_campaigns.aff_campaign_id)
						   LEFT JOIN 202_aff_networks ON (202_aff_campaigns.aff_network_id = 202_aff_networks.aff_network_id)
						   LEFT JOIN 202_ppc_accounts ON (202_ppc_accounts.ppc_account_id = 202_clicks.ppc_account_id)
						   LEFT JOIN 202_ppc_networks ON (202_ppc_networks.ppc_network_id = 202_ppc_accounts.ppc_network_id)
			SET     click_cpc=&#039;&quot;.$mysql[&#039;click_cpc&#039;].&quot;&#039;
			WHERE   202_clicks.user_id=&#039;&quot;.$mysql[&#039;user_id&#039;].&quot;&#039;&quot;;
	if ($mysql[&#039;aff_network_id&#039;]) { 
		$sql .= &quot; AND 202_aff_networks.aff_network_id=&#039;&quot;.$mysql[&#039;aff_network_id&#039;].&quot;&#039; &quot;;	
	} if ($mysql[&#039;aff_campaign_id&#039;]) { 
		$sql .= &quot; AND 202_clicks.aff_campaign_id=&#039;&quot;.$mysql[&#039;aff_campaign_id&#039;].&quot;&#039; &quot;;    
	} if ($mysql[&#039;text_ad_id&#039;]) { 
		$sql .= &quot; AND 202_clicks_advance.text_ad_id=&#039;&quot;.$mysql[&#039;text_ad_id&#039;].&quot;&#039; &quot;;    
	} if ($mysql[&#039;landing_page_id&#039;]) { 
		$sql .= &quot; AND 202_clicks.landing_page_id=&#039;&quot;.$mysql[&#039;landing_page_id&#039;].&quot;&#039; &quot;;    
	} if ($mysql[&#039;ppc_network_id&#039;]) { 
		$sql .= &quot; AND 202_ppc_networks.ppc_network_id=&#039;&quot;.$mysql[&#039;ppc_network_id&#039;].&quot;&#039; &quot;;    
	} if ($mysql[&#039;ppc_account_id&#039;]) { 
		$sql .= &quot; AND 202_clicks.ppc_account_id=&#039;&quot;.$mysql[&#039;ppc_account_id&#039;].&quot;&#039; &quot;;
	} 
	
	$sql .= $mysql[&#039;method_of_promotion&#039;];    
	$sql .= &quot; AND click_time &gt;=&#039; &quot;.$mysql[&#039;from&#039;].&quot;&#039; AND click_time &lt;= &#039;&quot;.$mysql[&#039;to&#039;].&quot;&#039;&quot;;
	$result = $db-&gt;query($sql) or record_mysql_error($sql);
	$clicks_updated = $db-&gt;affected_rows;

	if ($mysql[&#039;aff_campaign_id&#039;]) { $de[&#039;aff_campaign_id&#039;] = $mysql[&#039;aff_campaign_id&#039;]; } else { $de[&#039;aff_campaign_id&#039;] = 0; }
	if ($mysql[&#039;ppc_account_id&#039;]) { $de[&#039;ppc_account_id&#039;] = $mysql[&#039;ppc_account_id&#039;]; } else { $de[&#039;ppc_account_id&#039;] = 0; }

    $de[&#039;user_id&#039;] = $mysql[&#039;user_id&#039;];
    $de[&#039;click_time_from&#039;] = $mysql[&#039;from&#039;];
    $de[&#039;click_time_to&#039;] = $mysql[&#039;to&#039;];

	$dirty_hours_sql = &quot;INSERT IGNORE INTO 
						202_dirty_hours 
						SET 
						ppc_account_id = &#039;&quot;.$de[&#039;ppc_account_id&#039;].&quot;&#039;, 
						aff_campaign_id = &#039;&quot;.$de[&#039;aff_campaign_id&#039;].&quot;&#039;,
						user_id = &#039;&quot;.$de[&#039;user_id&#039;].&quot;&#039;,
						click_time_from = &#039;&quot;.$de[&#039;click_time_from&#039;].&quot;&#039;,
						click_time_to = &#039;&quot;.$de[&#039;click_time_to&#039;].&quot;&#039;&quot;;

	if ($mysql[&#039;aff_network_id&#039;]) { 
		$dirty_hours_sql .= &quot;, aff_network_id = &#039;&quot;.$mysql[&#039;aff_network_id&#039;].&quot;&#039;&quot;;
	} if ($mysql[&#039;text_ad_id&#039;]) {
		$dirty_hours_sql .= &quot;, text_ad_id = &#039;&quot;.$mysql[&#039;text_ad_id&#039;].&quot;&#039;&quot;; 
	} if ($mysql[&#039;landing_page_id&#039;]) { 
		$dirty_hours_sql .= &quot;, landing_page_id = &#039;&quot;.$mysql[&#039;landing_page_id&#039;].&quot;&#039;&quot;; 
	} if ($mysql[&#039;ppc_network_id&#039;]) { 
		$dirty_hours_sql .= &quot;, ppc_network_id = &#039;&quot;.$mysql[&#039;ppc_network_id&#039;].&quot;&#039;&quot;;   
	}

    $db-&gt;query($dirty_hours_sql);

	echo &#039;&lt;p style=&quot;text-align: center; font-weight: bold;&quot;&gt;&#039;.$clicks_updated . &#039; clicks updated.&lt;/p&gt;&#039;;</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fpublic_html%2Ftracking%2Ftracking202%2Fajax'>⬅ Back to Directory</a>