annotate usrajax.php @ 294:efba5a51f8fa

Fix some 10L's ... durr.
author Matti Hamalainen <ccr@tnsp.org>
date Mon, 25 Nov 2013 03:19:58 +0200
parents bb96aef874a9
children 8098b5b80f8c
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
1 <?
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
2 //
155
5b92f130ba87 Add copyright header blurbs.
Matti Hamalainen <ccr@tnsp.org>
parents: 153
diff changeset
3 // FAPWeb Simple Demoparty System
5b92f130ba87 Add copyright header blurbs.
Matti Hamalainen <ccr@tnsp.org>
parents: 153
diff changeset
4 // User actions page AJAX backend module
5b92f130ba87 Add copyright header blurbs.
Matti Hamalainen <ccr@tnsp.org>
parents: 153
diff changeset
5 // (C) Copyright 2012-2013 Tecnic Software productions (TNSP)
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
6 //
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
7 $sessionType = "user";
175
8df523e6326a User require_once instead of require.
Matti Hamalainen <ccr@tnsp.org>
parents: 165
diff changeset
8 require_once "mconfig.inc.php";
8df523e6326a User require_once instead of require.
Matti Hamalainen <ccr@tnsp.org>
parents: 165
diff changeset
9 require_once "msite.inc.php";
8df523e6326a User require_once instead of require.
Matti Hamalainen <ccr@tnsp.org>
parents: 165
diff changeset
10 require_once "msession.inc.php";
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
11
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
12
161
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
13 //
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
14 // "Submit" one vote into the database
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
15 //
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
16 function stSubmitOneVote($voter_id, $entry_id, $vote)
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
17 {
161
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
18 // Check if the entry_id is actually valid
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
19 $sql = stPrepareSQL("SELECT * FROM entries WHERE id=%d", $entry_id);
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
20 if (($entry = stFetchSQL($sql)) === false)
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
21 return FALSE;
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
22
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
23 // Check if the compo is valid for the entry
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
24 $sql = stPrepareSQL("SELECT * FROM compos WHERE id=%d", $entry["compo_id"]);
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
25 if (($compo = stFetchSQL($sql)) === false || $compo["voting"] == 0)
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
26 return FALSE;
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
27
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
28 // Check if the vote already exists
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
29 $sql = stPrepareSQL("SELECT id FROM votes WHERE voter_id=%d AND entry_id=%d",
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
30 $voter_id, $entry_id);
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
31
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
32 if (($res = stFetchSQLColumn($sql)) === false)
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
33 {
161
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
34 // Didn't exist, insert it
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
35 $sql = stPrepareSQL(
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
36 "INSERT INTO votes (voter_id,entry_id,value) VALUES (%d,%d,%d)",
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
37 $voter_id, $entry_id, $vote);
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
38 }
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
39 else
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
40 {
161
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
41 // Existed, thusly update
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
42 $sql = stPrepareSQL(
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
43 "UPDATE votes SET value=%d WHERE voter_id=%d AND entry_id=%d",
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
44 $vote, $voter_id, $eid);
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
45 }
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
46
225
1bb4f4bcb027 Cleanups.
Matti Hamalainen <ccr@tnsp.org>
parents: 216
diff changeset
47 return stExecSQL($sql);
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
48 }
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
49
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
50
165
15182643d672 Cosmetics.
Matti Hamalainen <ccr@tnsp.org>
parents: 162
diff changeset
51 //
15182643d672 Cosmetics.
Matti Hamalainen <ccr@tnsp.org>
parents: 162
diff changeset
52 // Initialize
15182643d672 Cosmetics.
Matti Hamalainen <ccr@tnsp.org>
parents: 162
diff changeset
53 //
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
54 if (!stUserSessionAuth())
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
55 {
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
56 stSetupCacheControl();
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
57
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
58 stSessionEnd(SESS_USER);
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
59
123
5837b9333964 Add new "about" page, and setting for default page.
Matti Hamalainen <ccr@tnsp.org>
parents: 101
diff changeset
60 header("Location: ".stGetSetting("defaultPage"));
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
61 exit;
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
62 }
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
63
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
64 stSetupCacheControl();
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
65
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
66 if (!stConnectSQLDB())
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
67 die("Could not connect to SQL database.");
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
68
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
69 stReloadSettings();
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
70
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
71 $userKeyLen = stGetSetting("userKeyLength");
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
72 $voteMin = stGetSetting("voteMin");
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
73 $voteMax = stGetSetting("voteMax");
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
74
161
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
75 //
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
76 // Handle the request
50032763bc79 Clean up the code a bit.
Matti Hamalainen <ccr@tnsp.org>
parents: 155
diff changeset
77 //
216
bcc3c4696b3e Some more work.
Matti Hamalainen <ccr@tnsp.org>
parents: 211
diff changeset
78 switch (stGetRequestItem("action"))
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
79 {
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
80 case "set":
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
81 //
153
aecf145e7c70 Some work on the voting backend.
Matti Hamalainen <ccr@tnsp.org>
parents: 123
diff changeset
82 // Set vote, if voting is enabled
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
83 //
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
84 if (!stChkSetting("allowVoting"))
294
efba5a51f8fa Fix some 10L's ... durr.
Matti Hamalainen <ccr@tnsp.org>
parents: 245
diff changeset
85 stError("Voting is not enabled.");
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
86 else
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
87 if (stChkRequestItem("entry_id", $entry_id,
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
88 array(CHK_TYPE, VT_INT, "Invalid data.")) &&
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
89 stChkRequestItem("vote", $vote,
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
90 array(CHK_TYPE, VT_INT, "Invalid data."),
294
efba5a51f8fa Fix some 10L's ... durr.
Matti Hamalainen <ccr@tnsp.org>
parents: 245
diff changeset
91 array(CHK_RANGE, VT_INT, array($voteMin, $voteMax), "Invalid vote value.")))
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
92 {
153
aecf145e7c70 Some work on the voting backend.
Matti Hamalainen <ccr@tnsp.org>
parents: 123
diff changeset
93 // Check if voting is enabled on the compo and voter is valid
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
94 $sql = stPrepareSQL("SELECT * FROM votekeys WHERE key=%s", stGetSessionItem("key"));
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
95 if (($votekey = stFetchSQL($sql)) !== false)
153
aecf145e7c70 Some work on the voting backend.
Matti Hamalainen <ccr@tnsp.org>
parents: 123
diff changeset
96 {
aecf145e7c70 Some work on the voting backend.
Matti Hamalainen <ccr@tnsp.org>
parents: 123
diff changeset
97 }
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
98 else
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
99 stError("Invalid data.");
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
100 }
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
101 break;
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
102
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
103 case "submit":
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
104 if (!stChkSetting("allowVoting"))
294
efba5a51f8fa Fix some 10L's ... durr.
Matti Hamalainen <ccr@tnsp.org>
parents: 245
diff changeset
105 stError("Voting is not enabled.");
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
106 else
245
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
107 {
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
108 $sql = stPrepareSQL("SELECT * FROM votekeys WHERE key=%s", stGetSessionItem("key"));
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
109 if (($votekey = stFetchSQL($sql)) !== false)
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
110 {
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
111 }
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
112 else
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
113 stError("Invalid data.");
bb96aef874a9 Work on the voting backend code.
Matti Hamalainen <ccr@tnsp.org>
parents: 225
diff changeset
114 }
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
115 break;
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
116
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
117 default:
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
118 stSetStatus(404, "Not Found");
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
119 break;
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
120 }
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
121
211
5bae42020034 Factorize some code into msitegen.
Matti Hamalainen <ccr@tnsp.org>
parents: 175
diff changeset
122 stDumpAJAXStatusErrors();
93
f36ebd03afd6 User AJAX.
Matti Hamalainen <ccr@tnsp.org>
parents:
diff changeset
123 ?>