File: /home/retile.ru/public_html/catalog/model/extension/module/uni_subscribe.php
<?php
class ModelExtensionModuleUniSubscribe extends Model {
	private $email = 'subscribe@localhost.com';
	
	public function editSubscribe($customer_id, $newsletter) {
		$this->db->query("UPDATE `".DB_PREFIX."customer` SET newsletter = '".(int)$newsletter."' WHERE customer_id = '".(int)$customer_id."'");
	}
	
	public function getRewards($customer_id, $description, $points) {
		$query = $this->db->query("SELECT * FROM `".DB_PREFIX."customer_reward` WHERE customer_id = '".(int)$customer_id."' AND description = '".$this->db->escape($description)."' AND points = '".(int)$points."'");
		
		return $query->row;
	}
	
	public function addReward($customer_id, $description, $points, $order_id = 0) {
		$this->db->query("INSERT INTO `".DB_PREFIX."customer_reward` SET customer_id = '".(int)$customer_id."', order_id = '".(int)$order_id."', points = '".(int)$points."', description = '".$this->db->escape($description)."', date_added = NOW()");
	}
	
	public function getAttempts($ip) {
		$email = $this->email;
		
		$query = $this->db->query("SELECT * FROM `".DB_PREFIX."customer_login` WHERE email = '".$this->db->escape(mb_strtolower($email))."' AND ip = '".$this->db->escape($ip)."'");
		return $query->row;
	}
	
	public function addAttempt($ip) {
		$email = $this->email;
		
		$query = $this->db->query("SELECT * FROM `".DB_PREFIX."customer_login` WHERE email = '".$this->db->escape(mb_strtolower($email))."' AND ip = '".$this->db->escape($ip)."'");
		
		if (!$query->num_rows) {
			$this->db->query("INSERT INTO `".DB_PREFIX."customer_login` SET email = '".$this->db->escape(mb_strtolower($email))."', ip = '".$this->db->escape($ip)."', total = 1, date_added = '".$this->db->escape(date('Y-m-d H:i:s'))."', date_modified = '".$this->db->escape(date('Y-m-d H:i:s'))."'");
		} else {
			$total = strtotime($query->row['date_modified']) < strtotime('-1 hour') ? 1 : '(total + 1)';
			
			$this->db->query("UPDATE `".DB_PREFIX."customer_login` SET total = ".$total.", date_modified = '".$this->db->escape(date('Y-m-d H:i:s'))."' WHERE customer_login_id = '".(int)$query->row['customer_login_id']."'");
		}
	}
}
?>