<!-- script adding Points to a user who had posted a form -->
<?php
## DATAS SENTS BACK BY THE FORM
$MYSECRETKEY = 'mysecretkey';

$docId		= (int) $_GET['docId'];
$uid		= $_GET['uid'];
$awards		= (int) $_GET['awards'];
$trId		= $_GET['trId'];
$promoId	= ((isset($_GET['promoId'])) ? (int) $_GET['promoId'] : 0 );
$hash		= $_GET['hash'];

## DATAS NEEDED TO ADD POINTS TO THE CORRECT USER
$database			= 'my_jommla_database'
$host				= 'localhost'
$main_AUP_table 	= 'jos_alpha_userpoints'
$custom_AUP_table 	= 'jos_alpha_userpoints_history_payments'
$DB_user			= 'myDBuser'
$DB_password		= 'myPassword'

## CHECK HASH VALUE	
if(md5($uid . $awards . $trId . $MYSECRETKEY) == $hash) {
	# DB connect
	$cnx = mysql_connect($host, $DB_user, $DB_password);
	mysql_select_db($database, $cnx);
	
	
	$rs = mysql_query('SELECT COUNT(1) AS NB FROM $custom_AUP_table WHERE external_reference = ''.addslashes($trId).''', $cnx);
	$ifFindTr = (int) mysql_result($rs, 0, 'NB');
	unset($rs);
	
	if($ifFindTr == 0) {
		# all is OK
		# we can add $awards points to the user and save transaction
		
		# Adding points
		mysql_query( 'UPDATE $main_AUP_table SET points=points+'.$awards.' WHERE userid=''.addslashes($uid).''', $cnx); 
		
		# Register in jos_alpha_userpoints_history_payments
		mysql_query( 'INSERT INTO $custom_AUP_table (doc_id, user_id, awards, external_reference, promo_id, date) ' 
					.'VALUE('.$docId.', ''.addslashes($uid).'', '.$awards.', ''.addslashes($trId).'', '.$promoId.', NOW())', $cnx);
		
		echo 'OK';
		
	}
	else {
		# this transaction reference already added
		# add in error log 	
		
		echo 'this transaction reference already added';
	}
	
	mysql_close($cnx);
}
else {
	# hash error
	# add in error log 	
	
	echo 'hash error';
	
}




?>