Poll.php 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987
  1. <?php
  2. /**
  3. * This file contains the functions for voting, locking, removing and
  4. * editing polls. Note that that posting polls is done in Post.php.
  5. *
  6. * Simple Machines Forum (SMF)
  7. *
  8. * @package SMF
  9. * @author Simple Machines http://www.simplemachines.org
  10. * @copyright 2012 Simple Machines Forum contributors
  11. * @license http://www.simplemachines.org/about/smf/license.php BSD
  12. *
  13. * @version 2.1 Alpha 1
  14. */
  15. if (!defined('SMF'))
  16. die('Hacking attempt...');
  17. /**
  18. * Allow the user to vote.
  19. * It is called to register a vote in a poll.
  20. * Must be called with a topic and option specified.
  21. * Requires the poll_vote permission.
  22. * Upon successful completion of action will direct user back to topic.
  23. * Accessed via ?action=vote.
  24. *
  25. * @uses Post language file.
  26. */
  27. function Vote()
  28. {
  29. global $topic, $txt, $user_info, $smcFunc, $sourcedir, $modSettings;
  30. // Make sure you can vote.
  31. isAllowedTo('poll_vote');
  32. loadLanguage('Post');
  33. // Check if they have already voted, or voting is locked.
  34. $request = $smcFunc['db_query']('', '
  35. SELECT IFNULL(lp.id_choice, -1) AS selected, p.voting_locked, p.id_poll, p.expire_time, p.max_votes, p.change_vote,
  36. p.guest_vote, p.reset_poll, p.num_guest_voters
  37. FROM {db_prefix}topics AS t
  38. INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
  39. LEFT JOIN {db_prefix}log_polls AS lp ON (p.id_poll = lp.id_poll AND lp.id_member = {int:current_member} AND lp.id_member != {int:not_guest})
  40. WHERE t.id_topic = {int:current_topic}
  41. LIMIT 1',
  42. array(
  43. 'current_member' => $user_info['id'],
  44. 'current_topic' => $topic,
  45. 'not_guest' => 0,
  46. )
  47. );
  48. if ($smcFunc['db_num_rows']($request) == 0)
  49. fatal_lang_error('poll_error', false);
  50. $row = $smcFunc['db_fetch_assoc']($request);
  51. $smcFunc['db_free_result']($request);
  52. // If this is a guest can they vote?
  53. if ($user_info['is_guest'])
  54. {
  55. // Guest voting disabled?
  56. if (!$row['guest_vote'])
  57. fatal_lang_error('guest_vote_disabled');
  58. // Guest already voted?
  59. elseif (!empty($_COOKIE['guest_poll_vote']) && preg_match('~^[0-9,;]+$~', $_COOKIE['guest_poll_vote']) && strpos($_COOKIE['guest_poll_vote'], ';' . $row['id_poll'] . ',') !== false)
  60. {
  61. // ;id,timestamp,[vote,vote...]; etc
  62. $guestinfo = explode(';', $_COOKIE['guest_poll_vote']);
  63. // Find the poll we're after.
  64. foreach ($guestinfo as $i => $guestvoted)
  65. {
  66. $guestvoted = explode(',', $guestvoted);
  67. if ($guestvoted[0] == $row['id_poll'])
  68. break;
  69. }
  70. // Has the poll been reset since guest voted?
  71. if ($row['reset_poll'] > $guestvoted[1])
  72. {
  73. // Remove the poll info from the cookie to allow guest to vote again
  74. unset($guestinfo[$i]);
  75. if (!empty($guestinfo))
  76. $_COOKIE['guest_poll_vote'] = ';' . implode(';', $guestinfo);
  77. else
  78. unset($_COOKIE['guest_poll_vote']);
  79. }
  80. else
  81. fatal_lang_error('poll_error', false);
  82. unset($guestinfo, $guestvoted, $i);
  83. }
  84. }
  85. // Is voting locked or has it expired?
  86. if (!empty($row['voting_locked']) || (!empty($row['expire_time']) && time() > $row['expire_time']))
  87. fatal_lang_error('poll_error', false);
  88. // If they have already voted and aren't allowed to change their vote - hence they are outta here!
  89. if (!$user_info['is_guest'] && $row['selected'] != -1 && empty($row['change_vote']))
  90. fatal_lang_error('poll_error', false);
  91. // Otherwise if they can change their vote yet they haven't sent any options... remove their vote and redirect.
  92. elseif (!empty($row['change_vote']) && !$user_info['is_guest'] && empty($_POST['options']))
  93. {
  94. checkSession('request');
  95. $pollOptions = array();
  96. // Find out what they voted for before.
  97. $request = $smcFunc['db_query']('', '
  98. SELECT id_choice
  99. FROM {db_prefix}log_polls
  100. WHERE id_member = {int:current_member}
  101. AND id_poll = {int:id_poll}',
  102. array(
  103. 'current_member' => $user_info['id'],
  104. 'id_poll' => $row['id_poll'],
  105. )
  106. );
  107. while ($choice = $smcFunc['db_fetch_row']($request))
  108. $pollOptions[] = $choice[0];
  109. $smcFunc['db_free_result']($request);
  110. // Just skip it if they had voted for nothing before.
  111. if (!empty($pollOptions))
  112. {
  113. // Update the poll totals.
  114. $smcFunc['db_query']('', '
  115. UPDATE {db_prefix}poll_choices
  116. SET votes = votes - 1
  117. WHERE id_poll = {int:id_poll}
  118. AND id_choice IN ({array_int:poll_options})
  119. AND votes > {int:votes}',
  120. array(
  121. 'poll_options' => $pollOptions,
  122. 'id_poll' => $row['id_poll'],
  123. 'votes' => 0,
  124. )
  125. );
  126. // Delete off the log.
  127. $smcFunc['db_query']('', '
  128. DELETE FROM {db_prefix}log_polls
  129. WHERE id_member = {int:current_member}
  130. AND id_poll = {int:id_poll}',
  131. array(
  132. 'current_member' => $user_info['id'],
  133. 'id_poll' => $row['id_poll'],
  134. )
  135. );
  136. }
  137. // Redirect back to the topic so the user can vote again!
  138. if (empty($_POST['options']))
  139. redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
  140. }
  141. checkSession('request');
  142. // Make sure the option(s) are valid.
  143. if (empty($_POST['options']))
  144. fatal_lang_error('didnt_select_vote', false);
  145. // Too many options checked!
  146. if (count($_REQUEST['options']) > $row['max_votes'])
  147. fatal_lang_error('poll_too_many_votes', false, array($row['max_votes']));
  148. $pollOptions = array();
  149. $inserts = array();
  150. foreach ($_REQUEST['options'] as $id)
  151. {
  152. $id = (int) $id;
  153. $pollOptions[] = $id;
  154. $inserts[] = array($row['id_poll'], $user_info['id'], $id);
  155. }
  156. // Add their vote to the tally.
  157. $smcFunc['db_insert']('insert',
  158. '{db_prefix}log_polls',
  159. array('id_poll' => 'int', 'id_member' => 'int', 'id_choice' => 'int'),
  160. $inserts,
  161. array('id_poll', 'id_member', 'id_choice')
  162. );
  163. $smcFunc['db_query']('', '
  164. UPDATE {db_prefix}poll_choices
  165. SET votes = votes + 1
  166. WHERE id_poll = {int:id_poll}
  167. AND id_choice IN ({array_int:poll_options})',
  168. array(
  169. 'poll_options' => $pollOptions,
  170. 'id_poll' => $row['id_poll'],
  171. )
  172. );
  173. // If it's a guest don't let them vote again.
  174. if ($user_info['is_guest'] && count($pollOptions) > 0)
  175. {
  176. // Time is stored in case the poll is reset later, plus what they voted for.
  177. $_COOKIE['guest_poll_vote'] = empty($_COOKIE['guest_poll_vote']) ? '' : $_COOKIE['guest_poll_vote'];
  178. // ;id,timestamp,[vote,vote...]; etc
  179. $_COOKIE['guest_poll_vote'] .= ';' . $row['id_poll'] . ',' . time() . ',' . (count($pollOptions) > 1 ? explode(',' . $pollOptions) : $pollOptions[0]);
  180. // Increase num guest voters count by 1
  181. $smcFunc['db_query']('', '
  182. UPDATE {db_prefix}polls
  183. SET num_guest_voters = num_guest_voters + 1
  184. WHERE id_poll = {int:id_poll}',
  185. array(
  186. 'id_poll' => $row['id_poll'],
  187. )
  188. );
  189. require_once($sourcedir . '/Subs-Auth.php');
  190. $cookie_url = url_parts(!empty($modSettings['localCookies']), !empty($modSettings['globalCookies']));
  191. smf_setcookie('guest_poll_vote', $_COOKIE['guest_poll_vote'], time() + 2500000, $cookie_url[1], $cookie_url[0], false, false);
  192. }
  193. // Maybe let a social networking mod log this, or something?
  194. call_integration_hook('integrate_poll_vote', array(&$row['id_poll'], &$pollOptions));
  195. // Return to the post...
  196. redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
  197. }
  198. /**
  199. * Lock the voting for a poll.
  200. * Must be called with a topic specified in the URL.
  201. * An admin always has over riding permission to lock a poll.
  202. * If not an admin must have poll_lock_any permission, otherwise must
  203. * be poll starter with poll_lock_own permission.
  204. * Upon successful completion of action will direct user back to topic.
  205. * Accessed via ?action=lockvoting.
  206. */
  207. function LockVoting()
  208. {
  209. global $topic, $user_info, $smcFunc;
  210. checkSession('get');
  211. // Get the poll starter, ID, and whether or not it is locked.
  212. $request = $smcFunc['db_query']('', '
  213. SELECT t.id_member_started, t.id_poll, p.voting_locked
  214. FROM {db_prefix}topics AS t
  215. INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
  216. WHERE t.id_topic = {int:current_topic}
  217. LIMIT 1',
  218. array(
  219. 'current_topic' => $topic,
  220. )
  221. );
  222. list ($memberID, $pollID, $voting_locked) = $smcFunc['db_fetch_row']($request);
  223. // If the user _can_ modify the poll....
  224. if (!allowedTo('poll_lock_any'))
  225. isAllowedTo('poll_lock_' . ($user_info['id'] == $memberID ? 'own' : 'any'));
  226. // It's been locked by a non-moderator.
  227. if ($voting_locked == '1')
  228. $voting_locked = '0';
  229. // Locked by a moderator, and this is a moderator.
  230. elseif ($voting_locked == '2' && allowedTo('moderate_board'))
  231. $voting_locked = '0';
  232. // Sorry, a moderator locked it.
  233. elseif ($voting_locked == '2' && !allowedTo('moderate_board'))
  234. fatal_lang_error('locked_by_admin', 'user');
  235. // A moderator *is* locking it.
  236. elseif ($voting_locked == '0' && allowedTo('moderate_board'))
  237. $voting_locked = '2';
  238. // Well, it's gonna be locked one way or another otherwise...
  239. else
  240. $voting_locked = '1';
  241. // Lock! *Poof* - no one can vote.
  242. $smcFunc['db_query']('', '
  243. UPDATE {db_prefix}polls
  244. SET voting_locked = {int:voting_locked}
  245. WHERE id_poll = {int:id_poll}',
  246. array(
  247. 'voting_locked' => $voting_locked,
  248. 'id_poll' => $pollID,
  249. )
  250. );
  251. redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
  252. }
  253. /**
  254. * Display screen for editing or adding a poll.
  255. * Must be called with a topic specified in the URL.
  256. * If the user is adding a poll to a topic, must contain the variable
  257. * 'add' in the url.
  258. * User must have poll_edit_any/poll_add_any permission for the
  259. * relevant action, otherwise must be poll starter with poll_edit_own
  260. * permission for editing, or be topic starter with poll_add_any permission for adding.
  261. * Accessed via ?action=editpoll.
  262. *
  263. * @uses Post language file.
  264. * @uses Poll template, main sub-template.
  265. */
  266. function EditPoll()
  267. {
  268. global $txt, $user_info, $context, $topic, $board, $smcFunc, $sourcedir, $scripturl;
  269. if (empty($topic))
  270. fatal_lang_error('no_access', false);
  271. loadLanguage('Post');
  272. loadTemplate('Poll');
  273. $context['start'] = (int) $_REQUEST['start'];
  274. $context['is_edit'] = isset($_REQUEST['add']) ? 0 : 1;
  275. // Check if a poll currently exists on this topic, and get the id, question and starter.
  276. $request = $smcFunc['db_query']('', '
  277. SELECT
  278. t.id_member_started, p.id_poll, p.question, p.hide_results, p.expire_time, p.max_votes, p.change_vote,
  279. m.subject, p.guest_vote, p.id_member AS poll_starter
  280. FROM {db_prefix}topics AS t
  281. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
  282. LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
  283. WHERE t.id_topic = {int:current_topic}
  284. LIMIT 1',
  285. array(
  286. 'current_topic' => $topic,
  287. )
  288. );
  289. // Assume the the topic exists, right?
  290. if ($smcFunc['db_num_rows']($request) == 0)
  291. fatal_lang_error('no_board');
  292. // Get the poll information.
  293. $pollinfo = $smcFunc['db_fetch_assoc']($request);
  294. $smcFunc['db_free_result']($request);
  295. // If we are adding a new poll - make sure that there isn't already a poll there.
  296. if (!$context['is_edit'] && !empty($pollinfo['id_poll']))
  297. fatal_lang_error('poll_already_exists');
  298. // Otherwise, if we're editing it, it does exist I assume?
  299. elseif ($context['is_edit'] && empty($pollinfo['id_poll']))
  300. fatal_lang_error('poll_not_found');
  301. // Can you do this?
  302. if ($context['is_edit'] && !allowedTo('poll_edit_any'))
  303. isAllowedTo('poll_edit_' . ($user_info['id'] == $pollinfo['id_member_started'] || ($pollinfo['poll_starter'] != 0 && $user_info['id'] == $pollinfo['poll_starter']) ? 'own' : 'any'));
  304. elseif (!$context['is_edit'] && !allowedTo('poll_add_any'))
  305. isAllowedTo('poll_add_' . ($user_info['id'] == $pollinfo['id_member_started'] ? 'own' : 'any'));
  306. $context['can_moderate_poll'] = isset($_REQUEST['add']) ? true : allowedTo('poll_edit_' . ($user_info['id'] == $pollinfo['id_member_started'] || ($pollinfo['poll_starter'] != 0 && $user_info['id'] == $pollinfo['poll_starter']) ? 'own' : 'any'));
  307. // Do we enable guest voting?
  308. require_once($sourcedir . '/Subs-Members.php');
  309. $groupsAllowedVote = groupsAllowedTo('poll_vote', $board);
  310. // Want to make sure before you actually submit? Must be a lot of options, or something.
  311. if (isset($_POST['preview']))
  312. {
  313. $question = $smcFunc['htmlspecialchars']($_POST['question']);
  314. // Basic theme info...
  315. $context['poll'] = array(
  316. 'id' => $pollinfo['id_poll'],
  317. 'question' => $question,
  318. 'hide_results' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
  319. 'change_vote' => isset($_POST['poll_change_vote']),
  320. 'guest_vote' => isset($_POST['poll_guest_vote']),
  321. 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
  322. 'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
  323. );
  324. // Start at number one with no last id to speak of.
  325. $number = 1;
  326. $last_id = 0;
  327. // Get all the choices - if this is an edit.
  328. if ($context['is_edit'])
  329. {
  330. $request = $smcFunc['db_query']('', '
  331. SELECT label, votes, id_choice
  332. FROM {db_prefix}poll_choices
  333. WHERE id_poll = {int:id_poll}',
  334. array(
  335. 'id_poll' => $pollinfo['id_poll'],
  336. )
  337. );
  338. $context['choices'] = array();
  339. while ($row = $smcFunc['db_fetch_assoc']($request))
  340. {
  341. // Get the highest id so we can add more without reusing.
  342. if ($row['id_choice'] >= $last_id)
  343. $last_id = $row['id_choice'] + 1;
  344. // They cleared this by either omitting it or emptying it.
  345. if (!isset($_POST['options'][$row['id_choice']]) || $_POST['options'][$row['id_choice']] == '')
  346. continue;
  347. censorText($row['label']);
  348. // Add the choice!
  349. $context['choices'][$row['id_choice']] = array(
  350. 'id' => $row['id_choice'],
  351. 'number' => $number++,
  352. 'votes' => $row['votes'],
  353. 'label' => $row['label'],
  354. 'is_last' => false
  355. );
  356. }
  357. $smcFunc['db_free_result']($request);
  358. }
  359. // Work out how many options we have, so we get the 'is_last' field right...
  360. $totalPostOptions = 0;
  361. foreach ($_POST['options'] as $id => $label)
  362. if ($label != '')
  363. $totalPostOptions++;
  364. $count = 1;
  365. // If an option exists, update it. If it is new, add it - but don't reuse ids!
  366. foreach ($_POST['options'] as $id => $label)
  367. {
  368. $label = $smcFunc['htmlspecialchars']($label);
  369. censorText($label);
  370. if (isset($context['choices'][$id]))
  371. $context['choices'][$id]['label'] = $label;
  372. elseif ($label != '')
  373. $context['choices'][] = array(
  374. 'id' => $last_id++,
  375. 'number' => $number++,
  376. 'label' => $label,
  377. 'votes' => -1,
  378. 'is_last' => $count++ == $totalPostOptions && $totalPostOptions > 1 ? true : false,
  379. );
  380. }
  381. // Make sure we have two choices for sure!
  382. if ($totalPostOptions < 2)
  383. {
  384. // Need two?
  385. if ($totalPostOptions == 0)
  386. $context['choices'][] = array(
  387. 'id' => $last_id++,
  388. 'number' => $number++,
  389. 'label' => '',
  390. 'votes' => -1,
  391. 'is_last' => false
  392. );
  393. $poll_errors[] = 'poll_few';
  394. }
  395. // Always show one extra box...
  396. $context['choices'][] = array(
  397. 'id' => $last_id++,
  398. 'number' => $number++,
  399. 'label' => '',
  400. 'votes' => -1,
  401. 'is_last' => true
  402. );
  403. $context['last_choice_id'] = $last_id;
  404. if ($context['can_moderate_poll'])
  405. $context['poll']['expiration'] = $_POST['poll_expire'];
  406. // Check the question/option count for errors.
  407. if (trim($_POST['question']) == '' && empty($context['poll_error']))
  408. $poll_errors[] = 'no_question';
  409. // No check is needed, since nothing is really posted.
  410. checkSubmitOnce('free');
  411. // Take a check for any errors... assuming we haven't already done so!
  412. if (!empty($poll_errors) && empty($context['poll_error']))
  413. {
  414. loadLanguage('Errors');
  415. $context['poll_error'] = array('messages' => array());
  416. foreach ($poll_errors as $poll_error)
  417. {
  418. $context['poll_error'][$poll_error] = true;
  419. $context['poll_error']['messages'][] = $txt['error_' . $poll_error];
  420. }
  421. }
  422. }
  423. else
  424. {
  425. // Basic theme info...
  426. $context['poll'] = array(
  427. 'id' => $pollinfo['id_poll'],
  428. 'question' => $pollinfo['question'],
  429. 'hide_results' => $pollinfo['hide_results'],
  430. 'max_votes' => $pollinfo['max_votes'],
  431. 'change_vote' => !empty($pollinfo['change_vote']),
  432. 'guest_vote' => !empty($pollinfo['guest_vote']),
  433. 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
  434. );
  435. // Poll expiration time?
  436. $context['poll']['expiration'] = empty($pollinfo['expire_time']) || !$context['can_moderate_poll'] ? '' : ceil($pollinfo['expire_time'] <= time() ? -1 : ($pollinfo['expire_time'] - time()) / (3600 * 24));
  437. // Get all the choices - if this is an edit.
  438. if ($context['is_edit'])
  439. {
  440. $request = $smcFunc['db_query']('', '
  441. SELECT label, votes, id_choice
  442. FROM {db_prefix}poll_choices
  443. WHERE id_poll = {int:id_poll}',
  444. array(
  445. 'id_poll' => $pollinfo['id_poll'],
  446. )
  447. );
  448. $context['choices'] = array();
  449. $number = 1;
  450. while ($row = $smcFunc['db_fetch_assoc']($request))
  451. {
  452. censorText($row['label']);
  453. $context['choices'][$row['id_choice']] = array(
  454. 'id' => $row['id_choice'],
  455. 'number' => $number++,
  456. 'votes' => $row['votes'],
  457. 'label' => $row['label'],
  458. 'is_last' => false
  459. );
  460. }
  461. $smcFunc['db_free_result']($request);
  462. $last_id = max(array_keys($context['choices'])) + 1;
  463. // Add an extra choice...
  464. $context['choices'][] = array(
  465. 'id' => $last_id,
  466. 'number' => $number,
  467. 'votes' => -1,
  468. 'label' => '',
  469. 'is_last' => true
  470. );
  471. $context['last_choice_id'] = $last_id;
  472. }
  473. // New poll?
  474. else
  475. {
  476. // Setup the default poll options.
  477. $context['poll'] = array(
  478. 'id' => 0,
  479. 'question' => '',
  480. 'hide_results' => 0,
  481. 'max_votes' => 1,
  482. 'change_vote' => 0,
  483. 'guest_vote' => 0,
  484. 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
  485. 'expiration' => '',
  486. );
  487. // Make all five poll choices empty.
  488. $context['choices'] = array(
  489. array('id' => 0, 'number' => 1, 'votes' => -1, 'label' => '', 'is_last' => false),
  490. array('id' => 1, 'number' => 2, 'votes' => -1, 'label' => '', 'is_last' => false),
  491. array('id' => 2, 'number' => 3, 'votes' => -1, 'label' => '', 'is_last' => false),
  492. array('id' => 3, 'number' => 4, 'votes' => -1, 'label' => '', 'is_last' => false),
  493. array('id' => 4, 'number' => 5, 'votes' => -1, 'label' => '', 'is_last' => true)
  494. );
  495. $context['last_choice_id'] = 4;
  496. }
  497. }
  498. $context['page_title'] = $context['is_edit'] ? $txt['poll_edit'] : $txt['add_poll'];
  499. // Build the link tree.
  500. censorText($pollinfo['subject']);
  501. $context['linktree'][] = array(
  502. 'url' => $scripturl . '?topic=' . $topic . '.0',
  503. 'name' => $pollinfo['subject'],
  504. );
  505. $context['linktree'][] = array(
  506. 'name' => $context['page_title'],
  507. );
  508. // Register this form in the session variables.
  509. checkSubmitOnce('register');
  510. }
  511. /**
  512. * Update the settings for a poll, or add a new one.
  513. * Must be called with a topic specified in the URL.
  514. * The user must have poll_edit_any/poll_add_any permission
  515. * for the relevant action. Otherwise they must be poll starter
  516. * with poll_edit_own permission for editing, or be topic starter
  517. * with poll_add_any permission for adding.
  518. * In the case of an error, this function will redirect back to
  519. * EditPoll and display the relevant error message.
  520. * Upon successful completion of action will direct user back to topic.
  521. * Accessed via ?action=editpoll2.
  522. */
  523. function EditPoll2()
  524. {
  525. global $txt, $topic, $board, $context;
  526. global $modSettings, $user_info, $smcFunc, $sourcedir;
  527. // Sneaking off, are we?
  528. if (empty($_POST))
  529. redirectexit('action=editpoll;topic=' . $topic . '.0');
  530. if (checkSession('post', '', false) != '')
  531. $poll_errors[] = 'session_timeout';
  532. if (isset($_POST['preview']))
  533. return EditPoll();
  534. // HACKERS (!!) can't edit :P.
  535. if (empty($topic))
  536. fatal_lang_error('no_access', false);
  537. // Is this a new poll, or editing an existing?
  538. $isEdit = isset($_REQUEST['add']) ? 0 : 1;
  539. // Get the starter and the poll's ID - if it's an edit.
  540. $request = $smcFunc['db_query']('', '
  541. SELECT t.id_member_started, t.id_poll, p.id_member AS poll_starter, p.expire_time
  542. FROM {db_prefix}topics AS t
  543. LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
  544. WHERE t.id_topic = {int:current_topic}
  545. LIMIT 1',
  546. array(
  547. 'current_topic' => $topic,
  548. )
  549. );
  550. if ($smcFunc['db_num_rows']($request) == 0)
  551. fatal_lang_error('no_board');
  552. $bcinfo = $smcFunc['db_fetch_assoc']($request);
  553. $smcFunc['db_free_result']($request);
  554. // Check their adding/editing is valid.
  555. if (!$isEdit && !empty($bcinfo['id_poll']))
  556. fatal_lang_error('poll_already_exists');
  557. // Are we editing a poll which doesn't exist?
  558. elseif ($isEdit && empty($bcinfo['id_poll']))
  559. fatal_lang_error('poll_not_found');
  560. // Check if they have the power to add or edit the poll.
  561. if ($isEdit && !allowedTo('poll_edit_any'))
  562. isAllowedTo('poll_edit_' . ($user_info['id'] == $bcinfo['id_member_started'] || ($bcinfo['poll_starter'] != 0 && $user_info['id'] == $bcinfo['poll_starter']) ? 'own' : 'any'));
  563. elseif (!$isEdit && !allowedTo('poll_add_any'))
  564. isAllowedTo('poll_add_' . ($user_info['id'] == $bcinfo['id_member_started'] ? 'own' : 'any'));
  565. $optionCount = 0;
  566. $idCount = 0;
  567. // Ensure the user is leaving a valid amount of options - there must be at least two.
  568. foreach ($_POST['options'] as $k => $option)
  569. {
  570. if (trim($option) != '')
  571. {
  572. $optionCount++;
  573. $idCount = max($idCount, $k);
  574. }
  575. }
  576. if ($optionCount < 2)
  577. $poll_errors[] = 'poll_few';
  578. elseif ($optionCount > 256 || $idCount > 255)
  579. $poll_errors[] = 'poll_many';
  580. // Also - ensure they are not removing the question.
  581. if (trim($_POST['question']) == '')
  582. $poll_errors[] = 'no_question';
  583. // Got any errors to report?
  584. if (!empty($poll_errors))
  585. {
  586. loadLanguage('Errors');
  587. // Previewing.
  588. $_POST['preview'] = true;
  589. $context['poll_error'] = array('messages' => array());
  590. foreach ($poll_errors as $poll_error)
  591. {
  592. $context['poll_error'][$poll_error] = true;
  593. $context['poll_error']['messages'][] = $txt['error_' . $poll_error];
  594. }
  595. return EditPoll();
  596. }
  597. // Prevent double submission of this form.
  598. checkSubmitOnce('check');
  599. // Now we've done all our error checking, let's get the core poll information cleaned... question first.
  600. $_POST['question'] = $smcFunc['htmlspecialchars']($_POST['question']);
  601. $_POST['question'] = $smcFunc['truncate']($_POST['question'], 255);
  602. $_POST['poll_hide'] = (int) $_POST['poll_hide'];
  603. $_POST['poll_expire'] = isset($_POST['poll_expire']) ? (int) $_POST['poll_expire'] : 0;
  604. $_POST['poll_change_vote'] = isset($_POST['poll_change_vote']) ? 1 : 0;
  605. $_POST['poll_guest_vote'] = isset($_POST['poll_guest_vote']) ? 1 : 0;
  606. // Make sure guests are actually allowed to vote generally.
  607. if ($_POST['poll_guest_vote'])
  608. {
  609. require_once($sourcedir . '/Subs-Members.php');
  610. $allowedGroups = groupsAllowedTo('poll_vote', $board);
  611. if (!in_array(-1, $allowedGroups['allowed']))
  612. $_POST['poll_guest_vote'] = 0;
  613. }
  614. // Ensure that the number options allowed makes sense, and the expiration date is valid.
  615. if (!$isEdit || allowedTo('moderate_board'))
  616. {
  617. $_POST['poll_expire'] = $_POST['poll_expire'] > 9999 ? 9999 : ($_POST['poll_expire'] < 0 ? 0 : $_POST['poll_expire']);
  618. if (empty($_POST['poll_expire']) && $_POST['poll_hide'] == 2)
  619. $_POST['poll_hide'] = 1;
  620. elseif (!$isEdit || $_POST['poll_expire'] != ceil($bcinfo['expire_time'] <= time() ? -1 : ($bcinfo['expire_time'] - time()) / (3600 * 24)))
  621. $_POST['poll_expire'] = empty($_POST['poll_expire']) ? '0' : time() + $_POST['poll_expire'] * 3600 * 24;
  622. else
  623. $_POST['poll_expire'] = $bcinfo['expire_time'];
  624. if (empty($_POST['poll_max_votes']) || $_POST['poll_max_votes'] <= 0)
  625. $_POST['poll_max_votes'] = 1;
  626. else
  627. $_POST['poll_max_votes'] = (int) $_POST['poll_max_votes'];
  628. }
  629. // If we're editing, let's commit the changes.
  630. if ($isEdit)
  631. {
  632. $smcFunc['db_query']('', '
  633. UPDATE {db_prefix}polls
  634. SET question = {string:question}, change_vote = {int:change_vote},' . (allowedTo('moderate_board') ? '
  635. hide_results = {int:hide_results}, expire_time = {int:expire_time}, max_votes = {int:max_votes},
  636. guest_vote = {int:guest_vote}' : '
  637. hide_results = CASE WHEN expire_time = {int:expire_time_zero} AND {int:hide_results} = 2 THEN 1 ELSE {int:hide_results} END') . '
  638. WHERE id_poll = {int:id_poll}',
  639. array(
  640. 'change_vote' => $_POST['poll_change_vote'],
  641. 'hide_results' => $_POST['poll_hide'],
  642. 'expire_time' => !empty($_POST['poll_expire']) ? $_POST['poll_expire'] : 0,
  643. 'max_votes' => !empty($_POST['poll_max_votes']) ? $_POST['poll_max_votes'] : 0,
  644. 'guest_vote' => $_POST['poll_guest_vote'],
  645. 'expire_time_zero' => 0,
  646. 'id_poll' => $bcinfo['id_poll'],
  647. 'question' => $_POST['question'],
  648. )
  649. );
  650. }
  651. // Otherwise, let's get our poll going!
  652. else
  653. {
  654. // Create the poll.
  655. $smcFunc['db_insert']('',
  656. '{db_prefix}polls',
  657. array(
  658. 'question' => 'string-255', 'hide_results' => 'int', 'max_votes' => 'int', 'expire_time' => 'int', 'id_member' => 'int',
  659. 'poster_name' => 'string-255', 'change_vote' => 'int', 'guest_vote' => 'int'
  660. ),
  661. array(
  662. $_POST['question'], $_POST['poll_hide'], $_POST['poll_max_votes'], $_POST['poll_expire'], $user_info['id'],
  663. $user_info['username'], $_POST['poll_change_vote'], $_POST['poll_guest_vote'],
  664. ),
  665. array('id_poll')
  666. );
  667. // Set the poll ID.
  668. $bcinfo['id_poll'] = $smcFunc['db_insert_id']('{db_prefix}polls', 'id_poll');
  669. // Link the poll to the topic
  670. $smcFunc['db_query']('', '
  671. UPDATE {db_prefix}topics
  672. SET id_poll = {int:id_poll}
  673. WHERE id_topic = {int:current_topic}',
  674. array(
  675. 'current_topic' => $topic,
  676. 'id_poll' => $bcinfo['id_poll'],
  677. )
  678. );
  679. }
  680. // Get all the choices. (no better way to remove all emptied and add previously non-existent ones.)
  681. $request = $smcFunc['db_query']('', '
  682. SELECT id_choice
  683. FROM {db_prefix}poll_choices
  684. WHERE id_poll = {int:id_poll}',
  685. array(
  686. 'id_poll' => $bcinfo['id_poll'],
  687. )
  688. );
  689. $choices = array();
  690. while ($row = $smcFunc['db_fetch_assoc']($request))
  691. $choices[] = $row['id_choice'];
  692. $smcFunc['db_free_result']($request);
  693. $delete_options = array();
  694. foreach ($_POST['options'] as $k => $option)
  695. {
  696. // Make sure the key is numeric for sanity's sake.
  697. $k = (int) $k;
  698. // They've cleared the box. Either they want it deleted, or it never existed.
  699. if (trim($option) == '')
  700. {
  701. // They want it deleted. Bye.
  702. if (in_array($k, $choices))
  703. $delete_options[] = $k;
  704. // Skip the rest...
  705. continue;
  706. }
  707. // Dress the option up for its big date with the database.
  708. $option = $smcFunc['htmlspecialchars']($option);
  709. // If it's already there, update it. If it's not... add it.
  710. if (in_array($k, $choices))
  711. $smcFunc['db_query']('', '
  712. UPDATE {db_prefix}poll_choices
  713. SET label = {string:option_name}
  714. WHERE id_poll = {int:id_poll}
  715. AND id_choice = {int:id_choice}',
  716. array(
  717. 'id_poll' => $bcinfo['id_poll'],
  718. 'id_choice' => $k,
  719. 'option_name' => $option,
  720. )
  721. );
  722. else
  723. $smcFunc['db_insert']('',
  724. '{db_prefix}poll_choices',
  725. array(
  726. 'id_poll' => 'int', 'id_choice' => 'int', 'label' => 'string-255', 'votes' => 'int',
  727. ),
  728. array(
  729. $bcinfo['id_poll'], $k, $option, 0,
  730. ),
  731. array()
  732. );
  733. }
  734. // I'm sorry, but... well, no one was choosing you. Poor options, I'll put you out of your misery.
  735. if (!empty($delete_options))
  736. {
  737. $smcFunc['db_query']('', '
  738. DELETE FROM {db_prefix}log_polls
  739. WHERE id_poll = {int:id_poll}
  740. AND id_choice IN ({array_int:delete_options})',
  741. array(
  742. 'delete_options' => $delete_options,
  743. 'id_poll' => $bcinfo['id_poll'],
  744. )
  745. );
  746. $smcFunc['db_query']('', '
  747. DELETE FROM {db_prefix}poll_choices
  748. WHERE id_poll = {int:id_poll}
  749. AND id_choice IN ({array_int:delete_options})',
  750. array(
  751. 'delete_options' => $delete_options,
  752. 'id_poll' => $bcinfo['id_poll'],
  753. )
  754. );
  755. }
  756. // Shall I reset the vote count, sir?
  757. if (isset($_POST['resetVoteCount']))
  758. {
  759. $smcFunc['db_query']('', '
  760. UPDATE {db_prefix}polls
  761. SET num_guest_voters = {int:no_votes}, reset_poll = {int:time}
  762. WHERE id_poll = {int:id_poll}',
  763. array(
  764. 'no_votes' => 0,
  765. 'id_poll' => $bcinfo['id_poll'],
  766. 'time' => time(),
  767. )
  768. );
  769. $smcFunc['db_query']('', '
  770. UPDATE {db_prefix}poll_choices
  771. SET votes = {int:no_votes}
  772. WHERE id_poll = {int:id_poll}',
  773. array(
  774. 'no_votes' => 0,
  775. 'id_poll' => $bcinfo['id_poll'],
  776. )
  777. );
  778. $smcFunc['db_query']('', '
  779. DELETE FROM {db_prefix}log_polls
  780. WHERE id_poll = {int:id_poll}',
  781. array(
  782. 'id_poll' => $bcinfo['id_poll'],
  783. )
  784. );
  785. }
  786. call_integration_hook('integrate_poll_add_edit', array($bcinfo['id_poll'], $isEdit));
  787. // Off we go.
  788. redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
  789. }
  790. /**
  791. * Remove a poll from a topic without removing the topic.
  792. * Must be called with a topic specified in the URL.
  793. * Requires poll_remove_any permission, unless it's the poll starter
  794. * with poll_remove_own permission.
  795. * Upon successful completion of action will direct user back to topic.
  796. * Accessed via ?action=removepoll.
  797. */
  798. function RemovePoll()
  799. {
  800. global $topic, $user_info, $smcFunc;
  801. // Make sure the topic is not empty.
  802. if (empty($topic))
  803. fatal_lang_error('no_access', false);
  804. // Verify the session.
  805. checkSession('get');
  806. // Check permissions.
  807. if (!allowedTo('poll_remove_any'))
  808. {
  809. $request = $smcFunc['db_query']('', '
  810. SELECT t.id_member_started, p.id_member AS poll_starter
  811. FROM {db_prefix}topics AS t
  812. INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
  813. WHERE t.id_topic = {int:current_topic}
  814. LIMIT 1',
  815. array(
  816. 'current_topic' => $topic,
  817. )
  818. );
  819. if ($smcFunc['db_num_rows']($request) == 0)
  820. fatal_lang_error('no_access', false);
  821. list ($topicStarter, $pollStarter) = $smcFunc['db_fetch_row']($request);
  822. $smcFunc['db_free_result']($request);
  823. isAllowedTo('poll_remove_' . ($topicStarter == $user_info['id'] || ($pollStarter != 0 && $user_info['id'] == $pollStarter) ? 'own' : 'any'));
  824. }
  825. // Retrieve the poll ID.
  826. $request = $smcFunc['db_query']('', '
  827. SELECT id_poll
  828. FROM {db_prefix}topics
  829. WHERE id_topic = {int:current_topic}
  830. LIMIT 1',
  831. array(
  832. 'current_topic' => $topic,
  833. )
  834. );
  835. list ($pollID) = $smcFunc['db_fetch_row']($request);
  836. $smcFunc['db_free_result']($request);
  837. // Remove all user logs for this poll.
  838. $smcFunc['db_query']('', '
  839. DELETE FROM {db_prefix}log_polls
  840. WHERE id_poll = {int:id_poll}',
  841. array(
  842. 'id_poll' => $pollID,
  843. )
  844. );
  845. // Remove all poll choices.
  846. $smcFunc['db_query']('', '
  847. DELETE FROM {db_prefix}poll_choices
  848. WHERE id_poll = {int:id_poll}',
  849. array(
  850. 'id_poll' => $pollID,
  851. )
  852. );
  853. // Remove the poll itself.
  854. $smcFunc['db_query']('', '
  855. DELETE FROM {db_prefix}polls
  856. WHERE id_poll = {int:id_poll}',
  857. array(
  858. 'id_poll' => $pollID,
  859. )
  860. );
  861. // Finally set the topic poll ID back to 0!
  862. $smcFunc['db_query']('', '
  863. UPDATE {db_prefix}topics
  864. SET id_poll = {int:no_poll}
  865. WHERE id_topic = {int:current_topic}',
  866. array(
  867. 'current_topic' => $topic,
  868. 'no_poll' => 0,
  869. )
  870. );
  871. // A mod might have logged this (social network?), so let them remove, it too
  872. call_integration_hook('integrate_poll_remove', array(&$pollID));
  873. // Take the moderator back to the topic.
  874. redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
  875. }
  876. ?>