123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987 |
- <?php
- if (!defined('SMF'))
- die('Hacking attempt...');
- function Vote()
- {
- global $topic, $txt, $user_info, $smcFunc, $sourcedir, $modSettings;
-
- isAllowedTo('poll_vote');
- loadLanguage('Post');
-
- $request = $smcFunc['db_query']('', '
- SELECT IFNULL(lp.id_choice, -1) AS selected, p.voting_locked, p.id_poll, p.expire_time, p.max_votes, p.change_vote,
- p.guest_vote, p.reset_poll, p.num_guest_voters
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
- LEFT JOIN {db_prefix}log_polls AS lp ON (p.id_poll = lp.id_poll AND lp.id_member = {int:current_member} AND lp.id_member != {int:not_guest})
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_member' => $user_info['id'],
- 'current_topic' => $topic,
- 'not_guest' => 0,
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('poll_error', false);
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
-
- if ($user_info['is_guest'])
- {
-
- if (!$row['guest_vote'])
- fatal_lang_error('guest_vote_disabled');
-
- elseif (!empty($_COOKIE['guest_poll_vote']) && preg_match('~^[0-9,;]+$~', $_COOKIE['guest_poll_vote']) && strpos($_COOKIE['guest_poll_vote'], ';' . $row['id_poll'] . ',') !== false)
- {
-
- $guestinfo = explode(';', $_COOKIE['guest_poll_vote']);
-
- foreach ($guestinfo as $i => $guestvoted)
- {
- $guestvoted = explode(',', $guestvoted);
- if ($guestvoted[0] == $row['id_poll'])
- break;
- }
-
- if ($row['reset_poll'] > $guestvoted[1])
- {
-
- unset($guestinfo[$i]);
- if (!empty($guestinfo))
- $_COOKIE['guest_poll_vote'] = ';' . implode(';', $guestinfo);
- else
- unset($_COOKIE['guest_poll_vote']);
- }
- else
- fatal_lang_error('poll_error', false);
- unset($guestinfo, $guestvoted, $i);
- }
- }
-
- if (!empty($row['voting_locked']) || (!empty($row['expire_time']) && time() > $row['expire_time']))
- fatal_lang_error('poll_error', false);
-
- if (!$user_info['is_guest'] && $row['selected'] != -1 && empty($row['change_vote']))
- fatal_lang_error('poll_error', false);
-
- elseif (!empty($row['change_vote']) && !$user_info['is_guest'] && empty($_POST['options']))
- {
- checkSession('request');
- $pollOptions = array();
-
- $request = $smcFunc['db_query']('', '
- SELECT id_choice
- FROM {db_prefix}log_polls
- WHERE id_member = {int:current_member}
- AND id_poll = {int:id_poll}',
- array(
- 'current_member' => $user_info['id'],
- 'id_poll' => $row['id_poll'],
- )
- );
- while ($choice = $smcFunc['db_fetch_row']($request))
- $pollOptions[] = $choice[0];
- $smcFunc['db_free_result']($request);
-
- if (!empty($pollOptions))
- {
-
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}poll_choices
- SET votes = votes - 1
- WHERE id_poll = {int:id_poll}
- AND id_choice IN ({array_int:poll_options})
- AND votes > {int:votes}',
- array(
- 'poll_options' => $pollOptions,
- 'id_poll' => $row['id_poll'],
- 'votes' => 0,
- )
- );
-
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_polls
- WHERE id_member = {int:current_member}
- AND id_poll = {int:id_poll}',
- array(
- 'current_member' => $user_info['id'],
- 'id_poll' => $row['id_poll'],
- )
- );
- }
-
- if (empty($_POST['options']))
- redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
- }
- checkSession('request');
-
- if (empty($_POST['options']))
- fatal_lang_error('didnt_select_vote', false);
-
- if (count($_REQUEST['options']) > $row['max_votes'])
- fatal_lang_error('poll_too_many_votes', false, array($row['max_votes']));
- $pollOptions = array();
- $inserts = array();
- foreach ($_REQUEST['options'] as $id)
- {
- $id = (int) $id;
- $pollOptions[] = $id;
- $inserts[] = array($row['id_poll'], $user_info['id'], $id);
- }
-
- $smcFunc['db_insert']('insert',
- '{db_prefix}log_polls',
- array('id_poll' => 'int', 'id_member' => 'int', 'id_choice' => 'int'),
- $inserts,
- array('id_poll', 'id_member', 'id_choice')
- );
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}poll_choices
- SET votes = votes + 1
- WHERE id_poll = {int:id_poll}
- AND id_choice IN ({array_int:poll_options})',
- array(
- 'poll_options' => $pollOptions,
- 'id_poll' => $row['id_poll'],
- )
- );
-
- if ($user_info['is_guest'] && count($pollOptions) > 0)
- {
-
- $_COOKIE['guest_poll_vote'] = empty($_COOKIE['guest_poll_vote']) ? '' : $_COOKIE['guest_poll_vote'];
-
- $_COOKIE['guest_poll_vote'] .= ';' . $row['id_poll'] . ',' . time() . ',' . (count($pollOptions) > 1 ? explode(',' . $pollOptions) : $pollOptions[0]);
-
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}polls
- SET num_guest_voters = num_guest_voters + 1
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $row['id_poll'],
- )
- );
- require_once($sourcedir . '/Subs-Auth.php');
- $cookie_url = url_parts(!empty($modSettings['localCookies']), !empty($modSettings['globalCookies']));
- smf_setcookie('guest_poll_vote', $_COOKIE['guest_poll_vote'], time() + 2500000, $cookie_url[1], $cookie_url[0], false, false);
- }
-
- call_integration_hook('integrate_poll_vote', array(&$row['id_poll'], &$pollOptions));
-
- redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
- }
- function LockVoting()
- {
- global $topic, $user_info, $smcFunc;
- checkSession('get');
-
- $request = $smcFunc['db_query']('', '
- SELECT t.id_member_started, t.id_poll, p.voting_locked
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
- list ($memberID, $pollID, $voting_locked) = $smcFunc['db_fetch_row']($request);
-
- if (!allowedTo('poll_lock_any'))
- isAllowedTo('poll_lock_' . ($user_info['id'] == $memberID ? 'own' : 'any'));
-
- if ($voting_locked == '1')
- $voting_locked = '0';
-
- elseif ($voting_locked == '2' && allowedTo('moderate_board'))
- $voting_locked = '0';
-
- elseif ($voting_locked == '2' && !allowedTo('moderate_board'))
- fatal_lang_error('locked_by_admin', 'user');
-
- elseif ($voting_locked == '0' && allowedTo('moderate_board'))
- $voting_locked = '2';
-
- else
- $voting_locked = '1';
-
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}polls
- SET voting_locked = {int:voting_locked}
- WHERE id_poll = {int:id_poll}',
- array(
- 'voting_locked' => $voting_locked,
- 'id_poll' => $pollID,
- )
- );
- redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
- }
- function EditPoll()
- {
- global $txt, $user_info, $context, $topic, $board, $smcFunc, $sourcedir, $scripturl;
- if (empty($topic))
- fatal_lang_error('no_access', false);
- loadLanguage('Post');
- loadTemplate('Poll');
- $context['start'] = (int) $_REQUEST['start'];
- $context['is_edit'] = isset($_REQUEST['add']) ? 0 : 1;
-
- $request = $smcFunc['db_query']('', '
- SELECT
- t.id_member_started, p.id_poll, p.question, p.hide_results, p.expire_time, p.max_votes, p.change_vote,
- m.subject, p.guest_vote, p.id_member AS poll_starter
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
- LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
-
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_board');
-
- $pollinfo = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
-
- if (!$context['is_edit'] && !empty($pollinfo['id_poll']))
- fatal_lang_error('poll_already_exists');
-
- elseif ($context['is_edit'] && empty($pollinfo['id_poll']))
- fatal_lang_error('poll_not_found');
-
- if ($context['is_edit'] && !allowedTo('poll_edit_any'))
- isAllowedTo('poll_edit_' . ($user_info['id'] == $pollinfo['id_member_started'] || ($pollinfo['poll_starter'] != 0 && $user_info['id'] == $pollinfo['poll_starter']) ? 'own' : 'any'));
- elseif (!$context['is_edit'] && !allowedTo('poll_add_any'))
- isAllowedTo('poll_add_' . ($user_info['id'] == $pollinfo['id_member_started'] ? 'own' : 'any'));
- $context['can_moderate_poll'] = isset($_REQUEST['add']) ? true : allowedTo('poll_edit_' . ($user_info['id'] == $pollinfo['id_member_started'] || ($pollinfo['poll_starter'] != 0 && $user_info['id'] == $pollinfo['poll_starter']) ? 'own' : 'any'));
-
- require_once($sourcedir . '/Subs-Members.php');
- $groupsAllowedVote = groupsAllowedTo('poll_vote', $board);
-
- if (isset($_POST['preview']))
- {
- $question = $smcFunc['htmlspecialchars']($_POST['question']);
-
- $context['poll'] = array(
- 'id' => $pollinfo['id_poll'],
- 'question' => $question,
- 'hide_results' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
- 'change_vote' => isset($_POST['poll_change_vote']),
- 'guest_vote' => isset($_POST['poll_guest_vote']),
- 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
- 'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
- );
-
- $number = 1;
- $last_id = 0;
-
- if ($context['is_edit'])
- {
- $request = $smcFunc['db_query']('', '
- SELECT label, votes, id_choice
- FROM {db_prefix}poll_choices
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $pollinfo['id_poll'],
- )
- );
- $context['choices'] = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
-
- if ($row['id_choice'] >= $last_id)
- $last_id = $row['id_choice'] + 1;
-
- if (!isset($_POST['options'][$row['id_choice']]) || $_POST['options'][$row['id_choice']] == '')
- continue;
- censorText($row['label']);
-
- $context['choices'][$row['id_choice']] = array(
- 'id' => $row['id_choice'],
- 'number' => $number++,
- 'votes' => $row['votes'],
- 'label' => $row['label'],
- 'is_last' => false
- );
- }
- $smcFunc['db_free_result']($request);
- }
-
- $totalPostOptions = 0;
- foreach ($_POST['options'] as $id => $label)
- if ($label != '')
- $totalPostOptions++;
- $count = 1;
-
- foreach ($_POST['options'] as $id => $label)
- {
- $label = $smcFunc['htmlspecialchars']($label);
- censorText($label);
- if (isset($context['choices'][$id]))
- $context['choices'][$id]['label'] = $label;
- elseif ($label != '')
- $context['choices'][] = array(
- 'id' => $last_id++,
- 'number' => $number++,
- 'label' => $label,
- 'votes' => -1,
- 'is_last' => $count++ == $totalPostOptions && $totalPostOptions > 1 ? true : false,
- );
- }
-
- if ($totalPostOptions < 2)
- {
-
- if ($totalPostOptions == 0)
- $context['choices'][] = array(
- 'id' => $last_id++,
- 'number' => $number++,
- 'label' => '',
- 'votes' => -1,
- 'is_last' => false
- );
- $poll_errors[] = 'poll_few';
- }
-
- $context['choices'][] = array(
- 'id' => $last_id++,
- 'number' => $number++,
- 'label' => '',
- 'votes' => -1,
- 'is_last' => true
- );
- $context['last_choice_id'] = $last_id;
- if ($context['can_moderate_poll'])
- $context['poll']['expiration'] = $_POST['poll_expire'];
-
- if (trim($_POST['question']) == '' && empty($context['poll_error']))
- $poll_errors[] = 'no_question';
-
- checkSubmitOnce('free');
-
- if (!empty($poll_errors) && empty($context['poll_error']))
- {
- loadLanguage('Errors');
- $context['poll_error'] = array('messages' => array());
- foreach ($poll_errors as $poll_error)
- {
- $context['poll_error'][$poll_error] = true;
- $context['poll_error']['messages'][] = $txt['error_' . $poll_error];
- }
- }
- }
- else
- {
-
- $context['poll'] = array(
- 'id' => $pollinfo['id_poll'],
- 'question' => $pollinfo['question'],
- 'hide_results' => $pollinfo['hide_results'],
- 'max_votes' => $pollinfo['max_votes'],
- 'change_vote' => !empty($pollinfo['change_vote']),
- 'guest_vote' => !empty($pollinfo['guest_vote']),
- 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
- );
-
- $context['poll']['expiration'] = empty($pollinfo['expire_time']) || !$context['can_moderate_poll'] ? '' : ceil($pollinfo['expire_time'] <= time() ? -1 : ($pollinfo['expire_time'] - time()) / (3600 * 24));
-
- if ($context['is_edit'])
- {
- $request = $smcFunc['db_query']('', '
- SELECT label, votes, id_choice
- FROM {db_prefix}poll_choices
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $pollinfo['id_poll'],
- )
- );
- $context['choices'] = array();
- $number = 1;
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- censorText($row['label']);
- $context['choices'][$row['id_choice']] = array(
- 'id' => $row['id_choice'],
- 'number' => $number++,
- 'votes' => $row['votes'],
- 'label' => $row['label'],
- 'is_last' => false
- );
- }
- $smcFunc['db_free_result']($request);
- $last_id = max(array_keys($context['choices'])) + 1;
-
- $context['choices'][] = array(
- 'id' => $last_id,
- 'number' => $number,
- 'votes' => -1,
- 'label' => '',
- 'is_last' => true
- );
- $context['last_choice_id'] = $last_id;
- }
-
- else
- {
-
- $context['poll'] = array(
- 'id' => 0,
- 'question' => '',
- 'hide_results' => 0,
- 'max_votes' => 1,
- 'change_vote' => 0,
- 'guest_vote' => 0,
- 'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
- 'expiration' => '',
- );
-
- $context['choices'] = array(
- array('id' => 0, 'number' => 1, 'votes' => -1, 'label' => '', 'is_last' => false),
- array('id' => 1, 'number' => 2, 'votes' => -1, 'label' => '', 'is_last' => false),
- array('id' => 2, 'number' => 3, 'votes' => -1, 'label' => '', 'is_last' => false),
- array('id' => 3, 'number' => 4, 'votes' => -1, 'label' => '', 'is_last' => false),
- array('id' => 4, 'number' => 5, 'votes' => -1, 'label' => '', 'is_last' => true)
- );
- $context['last_choice_id'] = 4;
- }
- }
- $context['page_title'] = $context['is_edit'] ? $txt['poll_edit'] : $txt['add_poll'];
-
- censorText($pollinfo['subject']);
- $context['linktree'][] = array(
- 'url' => $scripturl . '?topic=' . $topic . '.0',
- 'name' => $pollinfo['subject'],
- );
- $context['linktree'][] = array(
- 'name' => $context['page_title'],
- );
-
- checkSubmitOnce('register');
- }
- function EditPoll2()
- {
- global $txt, $topic, $board, $context;
- global $modSettings, $user_info, $smcFunc, $sourcedir;
-
- if (empty($_POST))
- redirectexit('action=editpoll;topic=' . $topic . '.0');
- if (checkSession('post', '', false) != '')
- $poll_errors[] = 'session_timeout';
- if (isset($_POST['preview']))
- return EditPoll();
-
- if (empty($topic))
- fatal_lang_error('no_access', false);
-
- $isEdit = isset($_REQUEST['add']) ? 0 : 1;
-
- $request = $smcFunc['db_query']('', '
- SELECT t.id_member_started, t.id_poll, p.id_member AS poll_starter, p.expire_time
- FROM {db_prefix}topics AS t
- LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_board');
- $bcinfo = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
-
- if (!$isEdit && !empty($bcinfo['id_poll']))
- fatal_lang_error('poll_already_exists');
-
- elseif ($isEdit && empty($bcinfo['id_poll']))
- fatal_lang_error('poll_not_found');
-
- if ($isEdit && !allowedTo('poll_edit_any'))
- isAllowedTo('poll_edit_' . ($user_info['id'] == $bcinfo['id_member_started'] || ($bcinfo['poll_starter'] != 0 && $user_info['id'] == $bcinfo['poll_starter']) ? 'own' : 'any'));
- elseif (!$isEdit && !allowedTo('poll_add_any'))
- isAllowedTo('poll_add_' . ($user_info['id'] == $bcinfo['id_member_started'] ? 'own' : 'any'));
- $optionCount = 0;
- $idCount = 0;
-
- foreach ($_POST['options'] as $k => $option)
- {
- if (trim($option) != '')
- {
- $optionCount++;
- $idCount = max($idCount, $k);
- }
- }
- if ($optionCount < 2)
- $poll_errors[] = 'poll_few';
- elseif ($optionCount > 256 || $idCount > 255)
- $poll_errors[] = 'poll_many';
-
- if (trim($_POST['question']) == '')
- $poll_errors[] = 'no_question';
-
- if (!empty($poll_errors))
- {
- loadLanguage('Errors');
-
- $_POST['preview'] = true;
- $context['poll_error'] = array('messages' => array());
- foreach ($poll_errors as $poll_error)
- {
- $context['poll_error'][$poll_error] = true;
- $context['poll_error']['messages'][] = $txt['error_' . $poll_error];
- }
- return EditPoll();
- }
-
- checkSubmitOnce('check');
-
- $_POST['question'] = $smcFunc['htmlspecialchars']($_POST['question']);
- $_POST['question'] = $smcFunc['truncate']($_POST['question'], 255);
- $_POST['poll_hide'] = (int) $_POST['poll_hide'];
- $_POST['poll_expire'] = isset($_POST['poll_expire']) ? (int) $_POST['poll_expire'] : 0;
- $_POST['poll_change_vote'] = isset($_POST['poll_change_vote']) ? 1 : 0;
- $_POST['poll_guest_vote'] = isset($_POST['poll_guest_vote']) ? 1 : 0;
-
- if ($_POST['poll_guest_vote'])
- {
- require_once($sourcedir . '/Subs-Members.php');
- $allowedGroups = groupsAllowedTo('poll_vote', $board);
- if (!in_array(-1, $allowedGroups['allowed']))
- $_POST['poll_guest_vote'] = 0;
- }
-
- if (!$isEdit || allowedTo('moderate_board'))
- {
- $_POST['poll_expire'] = $_POST['poll_expire'] > 9999 ? 9999 : ($_POST['poll_expire'] < 0 ? 0 : $_POST['poll_expire']);
- if (empty($_POST['poll_expire']) && $_POST['poll_hide'] == 2)
- $_POST['poll_hide'] = 1;
- elseif (!$isEdit || $_POST['poll_expire'] != ceil($bcinfo['expire_time'] <= time() ? -1 : ($bcinfo['expire_time'] - time()) / (3600 * 24)))
- $_POST['poll_expire'] = empty($_POST['poll_expire']) ? '0' : time() + $_POST['poll_expire'] * 3600 * 24;
- else
- $_POST['poll_expire'] = $bcinfo['expire_time'];
- if (empty($_POST['poll_max_votes']) || $_POST['poll_max_votes'] <= 0)
- $_POST['poll_max_votes'] = 1;
- else
- $_POST['poll_max_votes'] = (int) $_POST['poll_max_votes'];
- }
-
- if ($isEdit)
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}polls
- SET question = {string:question}, change_vote = {int:change_vote},' . (allowedTo('moderate_board') ? '
- hide_results = {int:hide_results}, expire_time = {int:expire_time}, max_votes = {int:max_votes},
- guest_vote = {int:guest_vote}' : '
- hide_results = CASE WHEN expire_time = {int:expire_time_zero} AND {int:hide_results} = 2 THEN 1 ELSE {int:hide_results} END') . '
- WHERE id_poll = {int:id_poll}',
- array(
- 'change_vote' => $_POST['poll_change_vote'],
- 'hide_results' => $_POST['poll_hide'],
- 'expire_time' => !empty($_POST['poll_expire']) ? $_POST['poll_expire'] : 0,
- 'max_votes' => !empty($_POST['poll_max_votes']) ? $_POST['poll_max_votes'] : 0,
- 'guest_vote' => $_POST['poll_guest_vote'],
- 'expire_time_zero' => 0,
- 'id_poll' => $bcinfo['id_poll'],
- 'question' => $_POST['question'],
- )
- );
- }
-
- else
- {
-
- $smcFunc['db_insert']('',
- '{db_prefix}polls',
- array(
- 'question' => 'string-255', 'hide_results' => 'int', 'max_votes' => 'int', 'expire_time' => 'int', 'id_member' => 'int',
- 'poster_name' => 'string-255', 'change_vote' => 'int', 'guest_vote' => 'int'
- ),
- array(
- $_POST['question'], $_POST['poll_hide'], $_POST['poll_max_votes'], $_POST['poll_expire'], $user_info['id'],
- $user_info['username'], $_POST['poll_change_vote'], $_POST['poll_guest_vote'],
- ),
- array('id_poll')
- );
-
- $bcinfo['id_poll'] = $smcFunc['db_insert_id']('{db_prefix}polls', 'id_poll');
-
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}topics
- SET id_poll = {int:id_poll}
- WHERE id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- }
-
- $request = $smcFunc['db_query']('', '
- SELECT id_choice
- FROM {db_prefix}poll_choices
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- $choices = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $choices[] = $row['id_choice'];
- $smcFunc['db_free_result']($request);
- $delete_options = array();
- foreach ($_POST['options'] as $k => $option)
- {
-
- $k = (int) $k;
-
- if (trim($option) == '')
- {
-
- if (in_array($k, $choices))
- $delete_options[] = $k;
-
- continue;
- }
-
- $option = $smcFunc['htmlspecialchars']($option);
-
- if (in_array($k, $choices))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}poll_choices
- SET label = {string:option_name}
- WHERE id_poll = {int:id_poll}
- AND id_choice = {int:id_choice}',
- array(
- 'id_poll' => $bcinfo['id_poll'],
- 'id_choice' => $k,
- 'option_name' => $option,
- )
- );
- else
- $smcFunc['db_insert']('',
- '{db_prefix}poll_choices',
- array(
- 'id_poll' => 'int', 'id_choice' => 'int', 'label' => 'string-255', 'votes' => 'int',
- ),
- array(
- $bcinfo['id_poll'], $k, $option, 0,
- ),
- array()
- );
- }
-
- if (!empty($delete_options))
- {
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_polls
- WHERE id_poll = {int:id_poll}
- AND id_choice IN ({array_int:delete_options})',
- array(
- 'delete_options' => $delete_options,
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}poll_choices
- WHERE id_poll = {int:id_poll}
- AND id_choice IN ({array_int:delete_options})',
- array(
- 'delete_options' => $delete_options,
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- }
-
- if (isset($_POST['resetVoteCount']))
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}polls
- SET num_guest_voters = {int:no_votes}, reset_poll = {int:time}
- WHERE id_poll = {int:id_poll}',
- array(
- 'no_votes' => 0,
- 'id_poll' => $bcinfo['id_poll'],
- 'time' => time(),
- )
- );
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}poll_choices
- SET votes = {int:no_votes}
- WHERE id_poll = {int:id_poll}',
- array(
- 'no_votes' => 0,
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_polls
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $bcinfo['id_poll'],
- )
- );
- }
- call_integration_hook('integrate_poll_add_edit', array($bcinfo['id_poll'], $isEdit));
-
- redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
- }
- function RemovePoll()
- {
- global $topic, $user_info, $smcFunc;
-
- if (empty($topic))
- fatal_lang_error('no_access', false);
-
- checkSession('get');
-
- if (!allowedTo('poll_remove_any'))
- {
- $request = $smcFunc['db_query']('', '
- SELECT t.id_member_started, p.id_member AS poll_starter
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_access', false);
- list ($topicStarter, $pollStarter) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- isAllowedTo('poll_remove_' . ($topicStarter == $user_info['id'] || ($pollStarter != 0 && $user_info['id'] == $pollStarter) ? 'own' : 'any'));
- }
-
- $request = $smcFunc['db_query']('', '
- SELECT id_poll
- FROM {db_prefix}topics
- WHERE id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
- list ($pollID) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
-
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_polls
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $pollID,
- )
- );
-
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}poll_choices
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $pollID,
- )
- );
-
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}polls
- WHERE id_poll = {int:id_poll}',
- array(
- 'id_poll' => $pollID,
- )
- );
-
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}topics
- SET id_poll = {int:no_poll}
- WHERE id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- 'no_poll' => 0,
- )
- );
-
- call_integration_hook('integrate_poll_remove', array(&$pollID));
-
- redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
- }
- ?>
|