poll.php

<?php

define('BB_SCRIPT', 'vote');
define('BB_ROOT', './');
require(BB_ROOT ."common.php");

$user->session_start(array('req_login' => true));

$mode     = (string) @$_POST['mode'];
$topic_id = (int)    @$_POST['topic_id'];
$forum_id = (int)    @$_POST['forum_id'];
$vote_id  = (int)    @$_POST['vote_id'];

$return_topic_url = TOPIC_URL . $topic_id;
$return_topic_url .= !empty($_POST['start']) ? "&amp;start=". intval($_POST['start']) : '';

set_die_append_msg($forum_id, $topic_id);

$poll = new bb_poll();

// проверка валидности $topic_id
if (!$topic_id)
{
	bb_die($lang['INVALID_TOPIC_ID']);
}
if (!$t_data = DB()->fetch_row("SELECT * FROM ". BB_TOPICS ." WHERE topic_id = $topic_id LIMIT 1"))
{
	bb_die($lang['INVALID_TOPIC_ID_DB']);
}

// проверка прав
if ($mode != 'poll_vote')
{
	if ($t_data['topic_poster'] != $userdata['user_id'])
	{
		if (!IS_AM) bb_die($lang['NOT_AUTHORISED']);
	}
}

// проверка на возможность вносить изменения
if ($mode == 'poll_delete')
{
	if ($t_data['topic_time'] < TIMENOW - $bb_cfg['poll_max_days'] * 86400)
	{
		bb_die(sprintf($lang['NEW_POLL_DAYS'], $bb_cfg['poll_max_days']));
	}
	if (!IS_ADMIN && ($t_data['topic_vote'] != POLL_FINISHED))
	{
		bb_die($lang['CANNOT_DELETE_POLL']);
	}
}

switch ($mode)
{
	// голосование
	case 'poll_vote':
		if (!$t_data['topic_vote'])
		{
			bb_die($lang['POST_HAS_NO_POLL']);
		}
		if ($t_data['topic_status'] == TOPIC_LOCKED)
		{
			bb_die($lang['TOPIC_LOCKED_SHORT']);
		}
		if (!poll_is_active($t_data))
		{
			bb_die($lang['NEW_POLL_ENDED']);
		}
		if (!$vote_id)
		{
			bb_die($lang['NO_VOTE_OPTION']);
		}
		if (DB()->fetch_row("SELECT 1 FROM ". BB_POLL_USERS ." WHERE topic_id = $topic_id AND user_id = {$userdata['user_id']} LIMIT 1"))
		{
			bb_die($lang['ALREADY_VOTED']);
		}

		DB()->query("
			UPDATE ". BB_POLL_VOTES ." SET
				vote_result = vote_result + 1
			WHERE topic_id = $topic_id
				AND vote_id = $vote_id
			LIMIT 1
		");
		if (DB()->affected_rows() != 1)
		{
			bb_die($lang['NO_VOTE_OPTION']);
		}

		DB()->query("INSERT IGNORE INTO ". BB_POLL_USERS ." (topic_id, user_id, vote_ip, vote_dt) VALUES ($topic_id, {$userdata['user_id']}, '". USER_IP ."', ". TIMENOW .")");

		CACHE('bb_poll_data')->rm("poll_$topic_id");

		bb_die($lang['VOTE_CAST']);
		break;

	// возобновить возможность голосовать
	case 'poll_start':
		if (!$t_data['topic_vote'])
		{
			bb_die($lang['POST_HAS_NO_POLL']);
		}
		DB()->query("UPDATE ". BB_TOPICS ." SET topic_vote = 1 WHERE topic_id = $topic_id LIMIT 1");
		bb_die($lang['NEW_POLL_START']);
		break;

	// завершить опрос
	case 'poll_finish':
		if (!$t_data['topic_vote'])
		{
			bb_die($lang['POST_HAS_NO_POLL']);
		}
		DB()->query("UPDATE ". BB_TOPICS ." SET topic_vote = ". POLL_FINISHED ." WHERE topic_id = $topic_id LIMIT 1");
		bb_die($lang['NEW_POLL_END']);
		break;

	// удаление
	case 'poll_delete':
		if (!$t_data['topic_vote'])
		{
			bb_die($lang['POST_HAS_NO_POLL']);
		}
		$poll->delete_poll($topic_id);
		bb_die($lang['NEW_POLL_DELETE']);
		break;

	// добавление
	case 'poll_add':
		if ($t_data['topic_vote'])
		{
			bb_die($lang['NEW_POLL_ALREADY']);
		}
		$poll->build_poll_data($_POST);
		if ($poll->err_msg)
		{
			bb_die($poll->err_msg);
		}
		$poll->insert_votes_into_db($topic_id);
		bb_die($lang['NEW_POLL_ADDED']);
		break;

	// редакторование
	case 'poll_edit':
		if (!$t_data['topic_vote'])
		{
			bb_die($lang['POST_HAS_NO_POLL']);
		}
		$poll->build_poll_data($_POST);
		if ($poll->err_msg)
		{
			bb_die($poll->err_msg);
		}
		$poll->insert_votes_into_db($topic_id);
		CACHE('bb_poll_data')->rm("poll_$topic_id");
		bb_die($lang['NEW_POLL_RESULTS']);
		break;

	default:
		bb_die('Invalid mode: '. htmlCHR($mode));
}

// Functions
class bb_poll
{
	var $err_msg    = '';
	var $poll_votes = array();
	var $max_votes  = 0;

	function bb_poll ()
	{
		global $bb_cfg;
		$this->max_votes = $bb_cfg['max_poll_options'];
	}

	function build_poll_data ($posted_data)
	{
		$poll_caption = (string) @$posted_data['poll_caption'];
		$poll_votes   = (string) @$posted_data['poll_votes'];
		$this->poll_votes = array();

		if (!$poll_caption = str_compact($poll_caption))
		{
			global $lang;
			return $this->err_msg = $lang['EMPTY_POLL_TITLE'];
		}
		$this->poll_votes[] = $poll_caption; // заголовок имеет vote_id = 0

		foreach (explode("\n", $poll_votes) as $vote)
		{
			if (!$vote = str_compact($vote))
			{
				continue;
			}
			$this->poll_votes[] = $vote;
		}

		// проверять на "< 3" -- 2 варианта ответа + заголовок
		if (count($this->poll_votes) < 3 || count($this->poll_votes) > $this->max_votes + 1)
		{
			global $lang;
			return $this->err_msg = sprintf($lang['NEW_POLL_VOTES'], $this->max_votes);
		}
	}

	function insert_votes_into_db ($topic_id)
	{
		$this->delete_votes_data($topic_id);

		$sql_ary = array();
		foreach ($this->poll_votes as $vote_id => $vote_text)
		{
			$sql_ary[] = array(
				'topic_id'    => (int) $topic_id,
				'vote_id'     => (int) $vote_id,
				'vote_text'   => (string) $vote_text,
				'vote_result' => (int) 0,
			);
		}
		$sql_args = DB()->build_array('MULTI_INSERT', $sql_ary);

		DB()->query("REPLACE INTO ". BB_POLL_VOTES . $sql_args);

		DB()->query("UPDATE ". BB_TOPICS ." SET topic_vote = 1 WHERE topic_id = $topic_id LIMIT 1");
	}

	function delete_poll ($topic_id)
	{
		DB()->query("UPDATE ". BB_TOPICS ." SET topic_vote = 0 WHERE topic_id = $topic_id LIMIT 1");
		$this->delete_votes_data($topic_id);
	}

	function delete_votes_data ($topic_id)
	{
		DB()->query("DELETE FROM ". BB_POLL_VOTES ." WHERE topic_id = $topic_id");
		DB()->query("DELETE FROM ". BB_POLL_USERS ." WHERE topic_id = $topic_id");
		CACHE('bb_poll_data')->rm("poll_$topic_id");
	}
}