# HG changeset patch
# User Matti Hamalainen <ccr@tnsp.org>
# Date 1382117163 -10800
# Node ID f36ebd03afd64ff0ceb517a72e27c4b2fc1857d9
# Parent  8efda89e765ac1fb5120f60267d3d6f838770cac
User AJAX.

diff -r 8efda89e765a -r f36ebd03afd6 usrajax.php
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/usrajax.php	Fri Oct 18 20:26:03 2013 +0300
@@ -0,0 +1,113 @@
+<?
+//
+// AJAX request handler backend module
+//
+$sessionType = "user";
+require "mconfig.inc.php";
+require "msite.inc.php";
+require "msession.inc.php";
+
+
+function stSubmitOneVote($voter_id, $entry_id, $vote)
+{
+  $sql = stPrepareSQL("SELECT id FROM votes WHERE voter_id=%d AND entry_id=%d",
+    $voter_id, $entry_id);
+
+  if (($res = stFetchSQLColumn($sql)) === false)
+  {
+    $sql = stPrepareSQL(
+      "INSERT INTO votes (voter_id,entry_id,value) VALUES (%d,%d,%d)",
+      $voter_id, $entry_id, $vote);
+
+    if (stExecSQL($sql) === false)
+      return FALSE;
+  }
+  else
+  {
+    $sql = stPrepareSQL(
+      "UPDATE votes SET value=%d WHERE voter_id=%d AND entry_id=%d",
+      $vote, $voter_id, $eid);
+
+    if (stExecSQL($sql) === false)
+      return FALSE;
+  }
+
+  return TRUE;
+}
+
+
+
+// Check if we are allowed to execute
+if (!stUserSessionAuth())
+{
+  stSetupCacheControl();
+
+  stSessionEnd(SESS_USER);
+
+  header("Location: news");
+  exit;
+}
+
+stSetupCacheControl();
+
+// Initiate SQL database connection
+if (!stConnectSQLDB())
+  die("Could not connect to SQL database.");
+
+// Fetch non-"hardcoded" settings from SQL database
+stReloadSettings();
+
+
+// XMLHttp responses
+$action = "ERROR";
+if (stChkRequestItem("action") && stChkRequestItem("type"))
+{
+  $action = $_REQUEST["action"];
+  $type = $_REQUEST["type"];
+}
+
+switch ($action)
+{
+  case "get":
+    //
+    // Get specific data
+    //
+    switch ($type)
+    {
+      case "votes":
+        $sql = "SELECT * FROM votes ORDER BY utime DESC";
+        break;
+    }
+    
+    //
+    // Perform query if we need to, output results
+    //
+    if (isset($sql) && ($res = stExecSQLCond($sql, "")) !== FALSE)
+    {
+      if ($type == "votes")
+      {
+      }
+    }
+    break;
+
+  case "set":
+    //
+    // Set vote
+    //
+    if ($type == "votes" && stChkRequestItem("voter_id") &&
+      stChkRequestItem("entry_id") && stChkRequestItem("vote"))
+    {
+      stGetCompoList(FALSE);
+      
+      stSubmitOneVote(stGetRequestItem("voter_id"), stGetRequestItem("entry_id"), stGetRequestItem("vote"));
+    }
+    else
+      stSetStatus(902, "No data.");
+    break;
+
+  default:
+    stSetStatus(404, "Not Found");
+    break;
+}
+
+?>
\ No newline at end of file