|
Affiliate User Page
Welcome to the Benjamin Institute online webinars affiliate program. You can see all of our current offerings below. You can earn a free webinar for every 3 single webinar referrals or every webinar series referral.
//init recaptcha
require_once('recaptchalib.php');
$publickey = "6LfaMb4SAAAAAGVLH8WoqtH2x9b-4hsobzkIlXlt";
echo '
';
//do logout
if ($_GET['logout'] == 1) {
//expire the session
mysql_query("UPDATE PP_userSession SET expired = 1 WHERE id = '$_SESSION[id]'");
//kill the session
session_unset();
session_destroy();
}
//catch registration or login
if (isset($_POST['type'])) {
//setup error array
$errors = Array();
//get the ip
if( isset( $_SERVER ['HTTP_X_FORWARDED_FOR'] ) ) $ip = $_SERVER ['HTTP_X_FORWARDED_FOR'];
elseif( isset( $_SERVER ['HTTP_VIA'] ) ) $ip = $_SERVER ['HTTP_VIA'];
elseif( isset( $_SERVER ['REMOTE_ADDR'] ) ) $ip = $_SERVER ['REMOTE_ADDR'];
else $ip = "Anonima";
if ($_POST['type'] == "register") {
//cast variables
$password = mysql_real_escape_string($_POST['password']);$fName = mysql_real_escape_string($_POST['fName']);$lName = mysql_real_escape_string($_POST['lName']);$email = mysql_real_escape_string($_POST['email']);$user_id = mysql_real_escape_string($_POST['user_id']);
//verify password is the same
if ($_POST['password'] != $_POST['password2']) array_push($errors,"Your Passwords Do Not Match");
if (preg_match('|^(?=.*[0-9]+.*)(?=.*[a-zA-Z]+.*)[0-9a-zA-Z]{6,}$|',$_POST['password']) == 0) array_push($errors,"Your Passwords must be between 6 and 10 characters and contain at least 1 letter and 1 number");
if (strlen($_POST['fName']) < 2) array_push($errors,"Please enter a first name");
if (strlen($_POST['lName']) < 2) array_push($errors,"Please enter a last name");
if (preg_match("|^([a-zA-Z0-9_\-\.]+)@([a-zA-Z0-9_\-\.]+)\.([a-zA-Z]{2,5})$|",$_POST['email']) == 0) array_push($errors,"Please enter a proper email address");
if (strlen($_POST['user_id']) < 2) array_push($errors,"Please enter a user name");
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE user_id = '$user_id'")) > 0) array_push($errors,"Your user name is already taken");
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE email = '$email'")) > 0) array_push($errors,"Your email address is already used");
$privatekey = "6LfaMb4SAAAAAKHF28NF8zO8Dp2quQiyZY3O8dT9";
$resp = recaptcha_check_answer ($privatekey,
$_SERVER["REMOTE_ADDR"],
$_POST["recaptcha_challenge_field"],
$_POST["recaptcha_response_field"]);
if (!$resp->is_valid) {
array_push($errors,"Your must correctly enter the CAPTCHA in the box below.");
}
if (count($errors) > 0 ) {
echo " Registration Errors";
foreach($errors as $err) {
echo "- $err
";
}
echo " ";
echo '';
}
else {
//generate refCode
function genRef() {
$ref = get_rand_id(25);
//determine if this code is used
if ((mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE refCode = '$ref'"))) > 0) genRef();
else return $ref;
}
$refCode = genRef();
//do registration
$query = "INSERT into PP_users (user_id,pass,fName,lName,email,refCode) VALUES ('$user_id',SHA1('$password'),'$fName','$lName','$email','$refCode')";
//echo $query;
mysql_query($query);
echo mysql_error();
//do session
$query = "INSERT INTO PP_userSession (user_id,ip,session_time) VALUES ('$user_id','$ip',NOW())";
mysql_query($query);
//echo mysql_error();
//do welcome message
echo " Registration SuccessfulThank you for registering for the Ben Benjamin Affiliate System. ";
$_SESSION['id'] = mysql_result(mysql_query("SELECT LAST_INSERT_ID()"),0);
$_SESSION['user_id'] = $_POST['user_id'];
unset($GLOBALS['_POST']);
}
}
if ($_POST['type'] == 'login') {
//cast variables
$password = mysql_real_escape_string($_POST['password']);$user_id_l = mysql_real_escape_string($_POST['user_id_l']);
//check login
$loginQ = "SELECT id FROM PP_users WHERE user_id = '$user_id_l' AND pass = SHA1('$password')";
if(mysql_num_rows(mysql_query($loginQ))) {
//log is successful, set session
$query = "INSERT INTO PP_userSession (user_id,ip,session_time) VALUES ('$user_id_l','$ip',NOW())";
mysql_query($query);
$_SESSION['id'] = mysql_result(mysql_query("SELECT LAST_INSERT_ID()"),0);
$_SESSION['user_id'] = $user_id_l;
}
else {
echo " Login ErrorsYour user id and password combination do not match our system. ";
}
}
if ($_POST['type'] == 'recoverUser') {
$email = mysql_real_escape_string($_POST['email']);
if (preg_match("|^([a-zA-Z0-9_\-\.]+)@([a-zA-Z0-9_\-\.]+)\.([a-zA-Z]{2,5})$|",$_POST['email']) == 0) array_push($errors,"Please enter a proper email address");
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE email = '$email'")) == 0) array_push($errors,"Your email address does not exist in our system");
if (count($errors) > 0 ) {
echo " Error";
foreach($errors as $err) {
echo "- $err
";
}
echo " ";
$_GET['recover'] = "user";
}
else {
echo " SuccessYour User ID has been sent to $email ";
//email the user name
$userName = mysql_result(mysql_query("SELECT user_id FROM PP_users WHERE email = '$email'"),0);
$headers = 'From: Benjamin Institute ' . "\r\n";
$headers = 'From: Benjamin Institute ' . "\r\n" .
'Reply-To: webinars@benbenjamin.com' . "\r\n" .
'X-Mailer: PHP/' . phpversion();
mail($email,"Benjamin Institute Affiliate User ID Reminder","Your User ID is $userName",$headers);
}
}
if ($_POST['type'] == 'recoverPass') {
$email = mysql_real_escape_string($_POST['email']);
if (preg_match("|^([a-zA-Z0-9_\-\.]+)@([a-zA-Z0-9_\-\.]+)\.([a-zA-Z]{2,5})$|",$_POST['email']) == 0) array_push($errors,"Please enter a proper email address");
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE email = '$email'")) == 0) array_push($errors,"Your email address does not exist in our system");
if (count($errors) > 0 ) {
echo "Error";
foreach($errors as $err) {
echo "- $err
";
}
echo " ";
$_GET['recover'] = "user";
}
else {
echo "Success A temporary password has been sent to $email. You should change this password ASAP.
";
//email the user name
$id = mysql_result(mysql_query("SELECT id FROM PP_users WHERE email = '$email'"),0);
//reset the password
$newPass = get_rand_id(12);
mysql_query("UPDATE PP_users SET pass = SHA1('$newPass') WHERE id = '$id'");
$headers = 'From: Benjamin Institute ' . "\r\n";
mail($email,"Benjamin Institute Affiliate Temp Password","Your temporary password is $newPass. You should change this password ASAP.",$headers);
}
}
if ($_POST['type'] == 'updateInfo') {
//cast variables
$email = mysql_real_escape_string($_POST['email']);$fName = mysql_real_escape_string($_POST['fName']);$lName = mysql_real_escape_string($_POST['lName']);$password = mysql_real_escape_string($_POST['password']);$newPass = mysql_real_escape_string($_POST['newPass']);$newPass2 = mysql_real_escape_string($_POST['newPass2']);
//validate
if (strlen($password) > 1) {
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE user_id = '$_SESSION[user_id]' AND pass = SHA1('$password')")) == 0) array_push($errors,"Your current password does not match our records");
}
else array_push($errors,"Your must enter your current password");
if (mysql_num_rows(mysql_query("SELECT id FROM PP_users WHERE email = '$email' AND user_id <> '$_SESSION[user_id]'")) > 0) array_push($errors,"Your new email address is already used");
if (strlen($_POST['fName']) < 2) array_push($errors,"Please enter a first name");
if (strlen($_POST['lName']) < 2) array_push($errors,"Please enter a last name");
if (preg_match("|^([a-zA-Z0-9_\-\.]+)@([a-zA-Z0-9_\-\.]+)\.([a-zA-Z]{2,5})$|",$email) == 0) array_push($errors,"Please enter a proper email address");
//validate new password?
if (strlen($newPass) > 1) {
if ($_POST['newPass'] != $_POST['newPass2']) array_push($errors,"Your new passwords do not match");
if (preg_match('|^(?=.*[0-9]+.*)(?=.*[a-zA-Z]+.*)[0-9a-zA-Z]{6,}$|',$_POST['newPass']) == 0) array_push($errors,"Your new password must be between 6 and 10 characters and contain at least 1 letter and 1 number");
}
//errors
if (count($errors) > 0 ) {
echo "Error";
foreach($errors as $err) {
echo "- $err
";
}
echo " ";
}
else {
//update user info
mysql_query("UPDATE PP_users SET fName = '$fName',lName='$lName',email='$email' WHERE user_id = '$_SESSION[user_id]'");
//update password
if (strlen($newPass) > 1) {
mysql_query("UPDATE PP_users SET pass = SHA1('$newPass') WHERE user_id = '$_SESSION[user_id]'");
//expire the session
mysql_query("UPDATE PP_userSession SET expired = 1 WHERE id = '$_SESSION[id]'");
//kill the session
session_unset();
session_destroy();
echo "Success Your information has been updated. Since you changed your password, you have been logged out.
";
}
else echo "Success Your information has been updated
";
}
}
}
function printWebinarSelector() {
echo '
';
}
//user must be logged in
if ($_SESSION['id'] > 1) {
//verify the session
$sessQ = "SELECT id FROM PP_userSession WHERE id = '$_SESSION[id]' AND session_time > DATE_SUB(NOW(),INTERVAL 30 MINUTE) AND expired = 0";
$sess = mysql_num_rows(mysql_query($sessQ));
if (!$sess) {
echo "Session Expired Please login again.";
mysql_query("UPDATE PP_userSession SET expired = 1 WHERE id = '$_SESSION[id]'");
//kill the session
session_unset();
session_destroy();
die();
}
echo "";
$user = mysql_fetch_assoc(mysql_query("SELECT * FROM PP_users WHERE user_id = '$_SESSION[user_id]'"));
echo "Welcome $user[fName], below you can see your referrals as well as your available coupons.
";
//referral link section
echo "My Affiliate Link ";
echo "Please share the link below with your freinds. Anytime someone you share the link with purchases a webinar, you will receive credit. ";
echo "http://www.benbenjamin.com/webinars.php?ref=$user[refCode]
";
echo 'Use the following links to share as well:
';
//coupons
echo "My Available Coupons ";
$totalCoupons = mysql_result(mysql_query("SELECT count(id) FROM PP_userCoupons WHERE user_id = '$_SESSION[user_id]' and used = 0"),0);
echo "You have $totalCoupons available for use. You may use 1 coupon to receive a free webinar or to receive $25 off the purchase of a series. Please select an option below if available. You can view our current webinars at our webinars page.
My Past Sales ";
echo "Please view your past sales below. Once a coupon is issued for either 3 single webinar referrals or 1 webinar series referral, you will see it above.
";
echo "";
echo "Date | Name | Webinar Title | Coupon | ";
//get sales
$sales = mysql_query("SELECT t1.couponIssued,DATE_FORMAT(t2.txn_date,'%m%/%d%/%Y') as txn_date,t2.payer_name,t2.seminar_name FROM PP_userSales t1 JOIN PP_transactions t2 ON t1.txn_id = t2.txn_id WHERE t1.user_id = '$_SESSION[user_id]' ORDER BY t2.txn_date DESC");
while ($sale = mysql_fetch_assoc($sales)) {
$issue = "No";
if ($sale['couponIssued'] == 1) $issue = "Yes";
echo "";
echo "
$sale[txn_date] |
$sale[payer_name] |
$sale[seminar_name] |
$issue |
";
echo " ";
}
echo "
";
//user info
echo "My Information You may update your account information below.
";
echo "
";
}
else {
//password or user recovery
if (isset($_GET['recover'])) {
if ($_GET['recover'] == "user") {
echo "
";
}
if ($_GET['recover'] == "password") {
echo "
";
}
}
else {
//show login / registration form
echo "";
}
}
?>
|
|
|