onokazu
onoka****@users*****
2005年 6月 11日 (土) 11:50:12 JST
Index: xoops2jp/html/modules/mylinks/ratelink.php diff -u xoops2jp/html/modules/mylinks/ratelink.php:1.2 xoops2jp/html/modules/mylinks/ratelink.php:1.2.10.1 --- xoops2jp/html/modules/mylinks/ratelink.php:1.2 Fri Mar 18 21:52:24 2005 +++ xoops2jp/html/modules/mylinks/ratelink.php Sat Jun 11 11:50:12 2005 @@ -1,5 +1,5 @@ <?php -// $Id: ratelink.php,v 1.2 2005/03/18 12:52:24 onokazu Exp $ +// $Id: ratelink.php,v 1.2.10.1 2005/06/11 02:50:12 onokazu Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -29,87 +29,87 @@ $myts =& MyTextSanitizer::getInstance(); // MyTextSanitizer object if (!empty($HTTP_POST_VARS['submit'])) { - $eh = new ErrorHandler; //ErrorHandler object - if(empty($xoopsUser)){ - $ratinguser = 0; - }else{ - $ratinguser = $xoopsUser->getVar('uid'); - } - - //Make sure only 1 anonymous from an IP in a single day. - $anonwaitdays = 1; - $ip = getenv("REMOTE_ADDR"); - $lid = intval($HTTP_POST_VARS['lid']); - $cid = intval($HTTP_POST_VARS['cid']); - $rating = intval($HTTP_POST_VARS['rating']); - - // Check if Rating is Null - if ($rating=="--") { - redirect_header("ratelink.php?cid=".$cid."&lid=".$lid."",4,_MD_NORATING); - exit(); - } - - // Check if Link POSTER is voting (UNLESS Anonymous users allowed to post) - if ($ratinguser != 0) { - $result=$xoopsDB->query("select submitter from ".$xoopsDB->prefix("mylinks_links")." where lid=$lid"); - while(list($ratinguserDB) = $xoopsDB->fetchRow($result)) { - if ($ratinguserDB == $ratinguser) { - redirect_header("index.php",4,_MD_CANTVOTEOWN); - exit(); - } - } - - // Check if REG user is trying to vote twice. - $result=$xoopsDB->query("select ratinguser from ".$xoopsDB->prefix("mylinks_votedata")." where lid=$lid"); - while(list($ratinguserDB) = $xoopsDB->fetchRow($result)) { - if ($ratinguserDB == $ratinguser) { - redirect_header("index.php",4,_MD_VOTEONCE2); - exit(); - } - } - - } else { - - // Check if ANONYMOUS user is trying to vote more than once per day. - $yesterday = (time()-(86400 * $anonwaitdays)); - $result=$xoopsDB->query("select count(*) FROM ".$xoopsDB->prefix("mylinks_votedata")." WHERE lid=$lid AND ratinguser=0 AND ratinghostname = '$ip' AND ratingtimestamp > $yesterday"); - list($anonvotecount) = $xoopsDB->fetchRow($result); - if ($anonvotecount > 0) { - redirect_header("index.php",4,_MD_VOTEONCE2); - exit(); - } - } - if($rating > 10){ - $rating = 10; - } + $eh = new ErrorHandler; //ErrorHandler object + if(empty($xoopsUser)){ + $ratinguser = 0; + }else{ + $ratinguser = $xoopsUser->getVar('uid'); + } + + //Make sure only 1 anonymous from an IP in a single day. + $anonwaitdays = 1; + $ip = getenv("REMOTE_ADDR"); + $lid = intval($HTTP_POST_VARS['lid']); + $cid = intval($HTTP_POST_VARS['cid']); + $rating = intval($HTTP_POST_VARS['rating']); + + // Check if Rating is Null + if ($rating=="--") { + redirect_header("ratelink.php?cid=".$cid."&lid=".$lid."",4,_MD_NORATING); + exit(); + } + + // Check if Link POSTER is voting (UNLESS Anonymous users allowed to post) + if ($ratinguser != 0) { + $result=$xoopsDB->query("select submitter from ".$xoopsDB->prefix("mylinks_links")." where lid=$lid"); + while(list($ratinguserDB) = $xoopsDB->fetchRow($result)) { + if ($ratinguserDB == $ratinguser) { + redirect_header("index.php",4,_MD_CANTVOTEOWN); + exit(); + } + } + + // Check if REG user is trying to vote twice. + $result=$xoopsDB->query("select ratinguser from ".$xoopsDB->prefix("mylinks_votedata")." where lid=$lid"); + while(list($ratinguserDB) = $xoopsDB->fetchRow($result)) { + if ($ratinguserDB == $ratinguser) { + redirect_header("index.php",4,_MD_VOTEONCE2); + exit(); + } + } + + } else { + + // Check if ANONYMOUS user is trying to vote more than once per day. + $yesterday = (time()-(86400 * $anonwaitdays)); + $result=$xoopsDB->query("select count(*) FROM ".$xoopsDB->prefix("mylinks_votedata")." WHERE lid=$lid AND ratinguser=0 AND ratinghostname = '$ip' AND ratingtimestamp > $yesterday"); + list($anonvotecount) = $xoopsDB->fetchRow($result); + if ($anonvotecount > 0) { + redirect_header("index.php",4,_MD_VOTEONCE2); + exit(); + } + } + if($rating > 10){ + $rating = 10; + } //All is well. Add to Line Item Rate to DB. - $newid = $xoopsDB->genId($xoopsDB->prefix("mylinks_votedata")."_ratingid_seq"); - $datetime = time(); - $sql = sprintf("INSERT INTO %s (ratingid, lid, ratinguser, rating, ratinghostname, ratingtimestamp) VALUES (%u, %u, %u, %u, '%s', %u)", $xoopsDB->prefix("mylinks_votedata"), $newid, $lid, $ratinguser, $rating, $ip, $datetime); - $xoopsDB->query($sql) or $eh->show("0013"); + $newid = $xoopsDB->genId($xoopsDB->prefix("mylinks_votedata")."_ratingid_seq"); + $datetime = time(); + $sql = sprintf("INSERT INTO %s (ratingid, lid, ratinguser, rating, ratinghostname, ratingtimestamp) VALUES (%u, %u, %u, %u, '%s', %u)", $xoopsDB->prefix("mylinks_votedata"), $newid, $lid, $ratinguser, $rating, $ip, $datetime); + $xoopsDB->query($sql) or $eh->show("0013"); //All is well. Calculate Score & Add to Summary (for quick retrieval & sorting) to DB. updaterating($lid); - $ratemessage = _MD_VOTEAPPRE."<br />".sprintf(_MD_THANKURATE,$xoopsConfig[sitename]); - redirect_header("index.php",2,$ratemessage); - exit(); + $ratemessage = _MD_VOTEAPPRE."<br />".sprintf(_MD_THANKURATE, htmlspecialchars($xoopsConfig['sitename'], ENT_QUOTES)); + redirect_header("index.php",2,$ratemessage); + exit(); } else { - $xoopsOption['template_main'] = 'mylinks_ratelink.html'; - include XOOPS_ROOT_PATH."/header.php"; - $lid = intval($HTTP_GET_VARS['lid']); - $cid = intval($HTTP_GET_VARS['cid']); - $result=$xoopsDB->query("select title from ".$xoopsDB->prefix("mylinks_links")." where lid=$lid"); - list($title) = $xoopsDB->fetchRow($result); - $xoopsTpl->assign('link', array('id' => $lid, 'cid' => $cid, 'title' => $myts->htmlSpecialChars($title))); - $xoopsTpl->assign('lang_voteonce', _MD_VOTEONCE); - $xoopsTpl->assign('lang_ratingscale', _MD_RATINGSCALE); - $xoopsTpl->assign('lang_beobjective', _MD_BEOBJECTIVE); - $xoopsTpl->assign('lang_donotvote', _MD_DONOTVOTE); - $xoopsTpl->assign('lang_rateit', _MD_RATEIT); - $xoopsTpl->assign('lang_cancel', _CANCEL); - include XOOPS_ROOT_PATH.'/footer.php'; + $xoopsOption['template_main'] = 'mylinks_ratelink.html'; + include XOOPS_ROOT_PATH."/header.php"; + $lid = intval($HTTP_GET_VARS['lid']); + $cid = intval($HTTP_GET_VARS['cid']); + $result=$xoopsDB->query("select title from ".$xoopsDB->prefix("mylinks_links")." where lid=$lid"); + list($title) = $xoopsDB->fetchRow($result); + $xoopsTpl->assign('link', array('id' => $lid, 'cid' => $cid, 'title' => $myts->htmlSpecialChars($title))); + $xoopsTpl->assign('lang_voteonce', _MD_VOTEONCE); + $xoopsTpl->assign('lang_ratingscale', _MD_RATINGSCALE); + $xoopsTpl->assign('lang_beobjective', _MD_BEOBJECTIVE); + $xoopsTpl->assign('lang_donotvote', _MD_DONOTVOTE); + $xoopsTpl->assign('lang_rateit', _MD_RATEIT); + $xoopsTpl->assign('lang_cancel', _CANCEL); + include XOOPS_ROOT_PATH.'/footer.php'; } ?>