Vergleich polls.php - 1.8.2 - 1.8.22

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 24	Zeile 24
if($mybb->user['uid'] != 0) {	if($mybb->user['uid'] != 0) {
	$mybb->user['username'] = htmlspecialchars_uni($mybb->user['username']);
eval("\$loginbox = \"".$templates->get("changeuserbox")."\";"); } else	eval("\$loginbox = \"".$templates->get("changeuserbox")."\";"); } else
Zeile 46	Zeile 47
if($mybb->input['action'] == "newpoll") { // Form for new poll	if($mybb->input['action'] == "newpoll") { // Form for new poll
$tid = $mybb->get_input('tid', 1);	$tid = $mybb->get_input('tid', MyBB::INPUT_INT);
$plugins->run_hooks("polls_newpoll_start");	$plugins->run_hooks("polls_newpoll_start");
$thread = get_thread($mybb->get_input('tid', 1)); if(!$thread) {	$thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT)); if(!$thread \|\| $thread['visible'] == -1) {
error($lang->error_invalidthread);	error($lang->error_invalidthread);
}	}
// Is the currently logged in user a moderator of this forum?	// Is the currently logged in user a moderator of this forum?
if(is_moderator($thread['fid'])) { $ismod = true; } else { $ismod = false; }	$ismod = is_moderator($thread['fid']);
// Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true))	// Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true))
Zeile 114	Zeile 108
} // Sanitize number of poll options	} // Sanitize number of poll options
if($mybb->get_input('numpolloptions', 1) > 0) { $mybb->input['polloptions'] = $mybb->get_input('numpolloptions', 1); } if($mybb->settings['maxpolloptions'] && $mybb->get_input('polloptions', 1) > $mybb->settings['maxpolloptions'])	if($mybb->get_input('numpolloptions', MyBB::INPUT_INT) > 0) { $mybb->input['polloptions'] = $mybb->get_input('numpolloptions', MyBB::INPUT_INT); } if($mybb->settings['maxpolloptions'] && $mybb->get_input('polloptions', MyBB::INPUT_INT) > $mybb->settings['maxpolloptions'])
{ // Too big $polloptions = $mybb->settings['maxpolloptions']; }	{ // Too big $polloptions = $mybb->settings['maxpolloptions']; }
elseif($mybb->get_input('polloptions', 1) < 2)	elseif($mybb->get_input('polloptions', MyBB::INPUT_INT) < 2)
{ // Too small $polloptions = 2; } else { // Just right	{ // Too small $polloptions = 2; } else { // Just right
$polloptions = $mybb->get_input('polloptions', 1);	$polloptions = $mybb->get_input('polloptions', MyBB::INPUT_INT);
} $question = htmlspecialchars_uni($mybb->get_input('question')); $postoptionschecked = array('public' => '', 'multiple' => '');	} $question = htmlspecialchars_uni($mybb->get_input('question')); $postoptionschecked = array('public' => '', 'multiple' => '');
$postoptions = $mybb->get_input('postoptions', 1);	$postoptions = $mybb->get_input('postoptions', MyBB::INPUT_INT);
if(isset($postoptions['multiple']) && $postoptions['multiple'] == 1) { $postoptionschecked['multiple'] = 'checked="checked"';	if(isset($postoptions['multiple']) && $postoptions['multiple'] == 1) { $postoptionschecked['multiple'] = 'checked="checked"';
Zeile 144	Zeile 138
$postoptionschecked['public'] = 'checked="checked"'; }	$postoptionschecked['public'] = 'checked="checked"'; }
$options = $mybb->get_input('options', 2);	$options = $mybb->get_input('options', MyBB::INPUT_ARRAY);
$optionbits = ''; for($i = 1; $i <= $polloptions; ++$i) {	$optionbits = ''; for($i = 1; $i <= $polloptions; ++$i) {
Zeile 158	Zeile 152
$option = ""; }	$option = ""; }
if($mybb->get_input('timeout', 1) > 0)	if($mybb->get_input('timeout', MyBB::INPUT_INT) > 0)
{	{
$timeout = $mybb->get_input('timeout', 1);	$timeout = $mybb->get_input('timeout', MyBB::INPUT_INT);
} else { $timeout = 0;	} else { $timeout = 0;
} if($mybb->get_input('maxoptions', 1) > 0 && $mybb->get_input('maxoptions', 1) < $polloptions) { $maxoptions = $mybb->get_input('maxoptions', 1); }	} if($mybb->get_input('maxoptions', MyBB::INPUT_INT) > 0 && $mybb->get_input('maxoptions', MyBB::INPUT_INT) < $polloptions) { $maxoptions = $mybb->get_input('maxoptions', MyBB::INPUT_INT); }
else { $maxoptions = 0; }	else { $maxoptions = 0; }

$plugins->run_hooks("polls_newpoll_end");	$plugins->run_hooks("polls_newpoll_end");

eval("\$newpoll = \"".$templates->get("polls_newpoll")."\";"); output_page($newpoll); } if($mybb->input['action'] == "do_newpoll" && $mybb->request_method == "post")	eval("\$newpoll = \"".$templates->get("polls_newpoll")."\";"); output_page($newpoll); } if($mybb->input['action'] == "do_newpoll" && $mybb->request_method == "post")
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); $plugins->run_hooks("polls_do_newpoll_start"); $thread = get_thread($mybb->get_input('tid', 1)); if(!$thread)	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); $plugins->run_hooks("polls_do_newpoll_start"); $thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT)); if(!$thread)
{ error($lang->error_invalidthread); }	{ error($lang->error_invalidthread); }
Zeile 220	Zeile 214
} if($thread['poll'])	} if($thread['poll'])
{	{
error($lang->error_pollalready); }	error($lang->error_pollalready); }
$polloptions = $mybb->get_input('polloptions', 1);	$polloptions = $mybb->get_input('polloptions', MyBB::INPUT_INT);
if($mybb->settings['maxpolloptions'] && $polloptions > $mybb->settings['maxpolloptions']) { $polloptions = $mybb->settings['maxpolloptions']; }	if($mybb->settings['maxpolloptions'] && $polloptions > $mybb->settings['maxpolloptions']) { $polloptions = $mybb->settings['maxpolloptions']; }
$postoptions = $mybb->get_input('postoptions', 2);	$postoptions = $mybb->get_input('postoptions', MyBB::INPUT_ARRAY);
if(!isset($postoptions['multiple']) \|\| $postoptions['multiple'] != '1') { $postoptions['multiple'] = 0;	if(!isset($postoptions['multiple']) \|\| $postoptions['multiple'] != '1') { $postoptions['multiple'] = 0;
Zeile 246	Zeile 240
$polloptions = "2"; } $optioncount = "0";	$polloptions = "2"; } $optioncount = "0";
$options = $mybb->get_input('options', 2);	$options = $mybb->get_input('options', MyBB::INPUT_ARRAY);
for($i = 1; $i <= $polloptions; ++$i) { if(!isset($options[$i])) { $options[$i] = '';	for($i = 1; $i <= $polloptions; ++$i) { if(!isset($options[$i])) { $options[$i] = '';
}	} if($mybb->settings['polloptionlimit'] != 0 && my_strlen($options[$i]) > $mybb->settings['polloptionlimit']) { $lengtherror = 1; break; } if(strpos($options[$i], '\|\|~\|~\|\|') !== false) { $sequenceerror = 1; break; }
if(trim($options[$i]) != "") { $optioncount++;	if(trim($options[$i]) != "") { $optioncount++;
} if(my_strlen($options[$i]) > $mybb->settings['polloptionlimit'] && $mybb->settings['polloptionlimit'] != 0) { $lengtherror = 1; break;
} }	} }
if(isset($lengtherror))	if(isset($lengtherror)) { error($lang->error_polloptiontoolong); } if(isset($sequenceerror))
{	{
error($lang->error_polloptiontoolong);	error($lang->error_polloptionsequence);
} $mybb->input['question'] = $mybb->get_input('question');	} $mybb->input['question'] = $mybb->get_input('question');
Zeile 295	Zeile 300
} }	} }
if($mybb->get_input('timeout', 1) > 0)	if($mybb->get_input('timeout', MyBB::INPUT_INT) > 0)
{	{
$timeout = $mybb->get_input('timeout', 1);	$timeout = $mybb->get_input('timeout', MyBB::INPUT_INT);
} else { $timeout = 0; }	} else { $timeout = 0; }
if($mybb->get_input('maxoptions', 1) > 0 && $mybb->get_input('maxoptions', 1) < $polloptions) { $maxoptions = $mybb->get_input('maxoptions', 1); }	if($mybb->get_input('maxoptions', MyBB::INPUT_INT) > 0 && $mybb->get_input('maxoptions', MyBB::INPUT_INT) < $polloptions) { $maxoptions = $mybb->get_input('maxoptions', MyBB::INPUT_INT); }
else { $maxoptions = 0; }	else { $maxoptions = 0; }

$newpoll = array( "tid" => $thread['tid'], "question" => $db->escape_string($mybb->input['question']),	$newpoll = array( "tid" => $thread['tid'], "question" => $db->escape_string($mybb->input['question']),
Zeile 321	Zeile 326
"votes" => $db->escape_string($voteslist), "numoptions" => (int)$optioncount, "numvotes" => 0,	"votes" => $db->escape_string($voteslist), "numoptions" => (int)$optioncount, "numvotes" => 0,
"timeout" => $timeout,	"timeout" => $timeout,
"closed" => 0, "multiple" => $postoptions['multiple'], "public" => $postoptions['public'],	"closed" => 0, "multiple" => $postoptions['multiple'], "public" => $postoptions['public'],
Zeile 348	Zeile 353
if($mybb->input['action'] == "editpoll") {	if($mybb->input['action'] == "editpoll") {
$pid = $mybb->get_input('pid', 1);	$pid = $mybb->get_input('pid', MyBB::INPUT_INT);
$plugins->run_hooks("polls_editpoll_start");	$plugins->run_hooks("polls_editpoll_start");
Zeile 414	Zeile 419
} if($poll['public'] == 1)	} if($poll['public'] == 1)
{	{
$postoptionschecked['public'] = 'checked="checked"'; }	$postoptionschecked['public'] = 'checked="checked"'; }
Zeile 445	Zeile 450
eval("\$optionbits .= \"".$templates->get("polls_editpoll_option")."\";"); $option = ""; $optionvotes = "";	eval("\$optionbits .= \"".$templates->get("polls_editpoll_option")."\";"); $option = ""; $optionvotes = "";
}	}
if(!$poll['timeout'])	if(!$poll['timeout'])
{	{
$timeout = 0;	$timeout = 0;
}	}
else	else
{	{
$timeout = $poll['timeout'];	$timeout = $poll['timeout'];
} if(!$poll['maxoptions']) { $maxoptions = 0; } else	} if(!$poll['maxoptions']) { $maxoptions = 0; } else
{ $maxoptions = $poll['maxoptions'];	{ $maxoptions = $poll['maxoptions'];
}	}
} else {	} else {
if($mybb->settings['maxpolloptions'] && $mybb->get_input('numoptions', 1) > $mybb->settings['maxpolloptions']) {	if($mybb->settings['maxpolloptions'] && $mybb->get_input('numoptions', MyBB::INPUT_INT) > $mybb->settings['maxpolloptions']) {
$numoptions = $mybb->settings['maxpolloptions']; }	$numoptions = $mybb->settings['maxpolloptions']; }
elseif($mybb->get_input('numoptions', 1) < 2)	elseif($mybb->get_input('numoptions', MyBB::INPUT_INT) < 2)
{ $numoptions = 2;	{ $numoptions = 2;
} else { $numoptions = $mybb->get_input('numoptions', 1);	} else { $numoptions = $mybb->get_input('numoptions', MyBB::INPUT_INT);
} $question = htmlspecialchars_uni($mybb->input['question']);	} $question = htmlspecialchars_uni($mybb->input['question']);
$postoptions = $mybb->get_input('postoptions', 2);	$postoptions = $mybb->get_input('postoptions', MyBB::INPUT_ARRAY);
if(isset($postoptions['multiple']) && $postoptions['multiple'] == 1)	if(isset($postoptions['multiple']) && $postoptions['multiple'] == 1)
{	{
$postoptionschecked['multiple'] = 'checked="checked"';	$postoptionschecked['multiple'] = 'checked="checked"';
}	}
if(isset($postoptions['public']) && $postoptions['public'] == 1) { $postoptionschecked['public'] = 'checked="checked"'; } if(isset($postoptions['closed']) && $postoptions['closed'] == 1)	if(isset($postoptions['public']) && $postoptions['public'] == 1) { $postoptionschecked['public'] = 'checked="checked"'; } if(isset($postoptions['closed']) && $postoptions['closed'] == 1)
{	{
$postoptionschecked['closed'] = 'checked="checked"'; }	$postoptionschecked['closed'] = 'checked="checked"'; }
$options = $mybb->get_input('options', 2); $votes = $mybb->get_input('votes', 2);	$options = $mybb->get_input('options', MyBB::INPUT_ARRAY); $votes = $mybb->get_input('votes', MyBB::INPUT_ARRAY);
$optionbits = ''; for($i = 1; $i <= $numoptions; ++$i) {	$optionbits = ''; for($i = 1; $i <= $numoptions; ++$i) {
Zeile 521	Zeile 526
eval("\$optionbits .= \"".$templates->get("polls_editpoll_option")."\";"); $option = "";	eval("\$optionbits .= \"".$templates->get("polls_editpoll_option")."\";"); $option = "";
} if($mybb->get_input('timeout', 1) > 0) { $timeout = $mybb->get_input('timeout', 1); } else	} if($mybb->get_input('timeout', MyBB::INPUT_INT) > 0) { $timeout = $mybb->get_input('timeout', MyBB::INPUT_INT); } else
{ $timeout = 0; }	{ $timeout = 0; }

if(!$poll['maxoptions']) { $maxoptions = 0;	if(!$poll['maxoptions']) { $maxoptions = 0;
Zeile 555	Zeile 560
$plugins->run_hooks("polls_do_editpoll_start");	$plugins->run_hooks("polls_do_editpoll_start");
$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', 1)."'");	$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', MyBB::INPUT_INT)."'");
$poll = $db->fetch_array($query); if(!$poll)	$poll = $db->fetch_array($query); if(!$poll)
Zeile 563	Zeile 568
error($lang->error_invalidpoll); }	error($lang->error_invalidpoll); }
$query = $db->simple_select("threads", "*", "poll='".$mybb->get_input('pid', 1)."'");	$query = $db->simple_select("threads", "*", "poll='".$mybb->get_input('pid', MyBB::INPUT_INT)."'");
$thread = $db->fetch_array($query); if(!$thread) {	$thread = $db->fetch_array($query); if(!$thread) {
Zeile 574	Zeile 579
// Get forum info $forum = get_forum($thread['fid']);	// Get forum info $forum = get_forum($thread['fid']);
if(!$forum) { error($lang->error_invalidforum); } else { // Is our forum closed?	$fid = $thread['fid']; if(!$forum) { error($lang->error_invalidforum); } else { // Is our forum closed?
if($forum['open'] == 0 && !is_moderator($fid, "canmanagepolls")) { // Doesn't look like it is	if($forum['open'] == 0 && !is_moderator($fid, "canmanagepolls")) { // Doesn't look like it is
Zeile 593	Zeile 599
error_no_permission(); }	error_no_permission(); }
if($mybb->settings['maxpolloptions'] && $mybb->get_input('numoptions', 1) > $mybb->settings['maxpolloptions']) { $numoptions = $mybb->settings['maxpolloptions']; } elseif($mybb->get_input('numoptions', 1) < 2) { $numoptions = 2; } else { $numoptions = $mybb->get_input('numoptions', 1); } $postoptions = $mybb->get_input('postoptions', 2); if(!isset($postoptions['multiple']) \|\| $postoptions['multiple'] != '1')	if($mybb->settings['maxpolloptions'] && $mybb->get_input('numoptions', MyBB::INPUT_INT) > $mybb->settings['maxpolloptions'])
{	{
$postoptions['multiple'] = 0;	$numoptions = $mybb->settings['maxpolloptions']; } elseif($mybb->get_input('numoptions', MyBB::INPUT_INT) < 2) { $numoptions = 2; } else { $numoptions = $mybb->get_input('numoptions', MyBB::INPUT_INT); } $postoptions = $mybb->get_input('postoptions', MyBB::INPUT_ARRAY); if(!isset($postoptions['multiple']) \|\| $postoptions['multiple'] != '1') { $postoptions['multiple'] = 0;
} if(!isset($postoptions['public']) \|\| $postoptions['public'] != '1')	} if(!isset($postoptions['public']) \|\| $postoptions['public'] != '1')
Zeile 629	Zeile 635
if(!isset($options[$i])) { $options[$i] = '';	if(!isset($options[$i])) { $options[$i] = '';
} if(trim($options[$i]) != '') { $optioncount++; } if(my_strlen($options[$i]) > $mybb->settings['polloptionlimit'] && $mybb->settings['polloptionlimit'] != 0) {	} if($mybb->settings['polloptionlimit'] != 0 && my_strlen($options[$i]) > $mybb->settings['polloptionlimit']) {
$lengtherror = 1; break;	$lengtherror = 1; break;
	} if(strpos($options[$i], '\|\|~\|~\|\|') !== false) { $sequenceerror = 1; break; } if(trim($options[$i]) != "") { $optioncount++;
} } if(isset($lengtherror)) { error($lang->error_polloptiontoolong);	} } if(isset($lengtherror)) { error($lang->error_polloptiontoolong);
}	} if(isset($sequenceerror)) { error($lang->error_polloptionsequence); }
$mybb->input['question'] = $mybb->get_input('question'); if(trim($mybb->input['question']) == '' \|\| $optioncount < 2) {	$mybb->input['question'] = $mybb->get_input('question'); if(trim($mybb->input['question']) == '' \|\| $optioncount < 2) {
Zeile 658	Zeile 676
$numvotes = ''; $votes = $mybb->input['votes']; for($i = 1; $i <= $numoptions; ++$i)	$numvotes = ''; $votes = $mybb->input['votes']; for($i = 1; $i <= $numoptions; ++$i)
{	{
if(trim($options[$i]) != '') { if($optionslist != '')	if(trim($options[$i]) != '') { if($optionslist != '')
Zeile 673	Zeile 691
$votes[$i] = "0"; } $voteslist .= $votes[$i];	$votes[$i] = "0"; } $voteslist .= $votes[$i];
$numvotes = $numvotes + $votes[$i];	$numvotes = (int)$numvotes + (int)$votes[$i];
} }	} }
if($mybb->get_input('timeout', 1) > 0)	if($mybb->get_input('timeout', MyBB::INPUT_INT) > 0)
{	{
$timeout = $mybb->get_input('timeout', 1);	$timeout = $mybb->get_input('timeout', MyBB::INPUT_INT);
} else { $timeout = 0; }	} else { $timeout = 0; }
if($mybb->get_input('maxoptions', 1) > 0 && $mybb->get_input('maxoptions', 1) < $numoptions)	if($mybb->get_input('maxoptions', MyBB::INPUT_INT) > 0 && $mybb->get_input('maxoptions', MyBB::INPUT_INT) < $numoptions)
{	{
$maxoptions = $mybb->get_input('maxoptions', 1);	$maxoptions = $mybb->get_input('maxoptions', MyBB::INPUT_INT);
} else {	} else {
Zeile 710	Zeile 728
$plugins->run_hooks("polls_do_editpoll_process");	$plugins->run_hooks("polls_do_editpoll_process");
$db->update_query("polls", $updatedpoll, "pid='".$mybb->get_input('pid', 1)."'");	$db->update_query("polls", $updatedpoll, "pid='".$mybb->get_input('pid', MyBB::INPUT_INT)."'");
$plugins->run_hooks("polls_do_editpoll_end");	$plugins->run_hooks("polls_do_editpoll_end");
Zeile 723	Zeile 741
if($mybb->input['action'] == "showresults") {	if($mybb->input['action'] == "showresults") {
$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', 1)."'");	$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', MyBB::INPUT_INT)."'");
$poll = $db->fetch_array($query); if(!$poll)	$poll = $db->fetch_array($query); if(!$poll)
Zeile 733	Zeile 751
$tid = $poll['tid']; $thread = get_thread($tid);	$tid = $poll['tid']; $thread = get_thread($tid);
if(!$thread) {	if(!$thread \|\| ($thread['visible'] != 1 && ($thread['visible'] == 0 && !is_moderator($thread['fid'], "canviewunapprove")) \|\| ($thread['visible'] == -1 && !is_moderator($thread['fid'], "canviewdeleted")))) {
error($lang->error_invalidthread);	error($lang->error_invalidthread);
} $fid = $thread['fid'];	} $fid = $thread['fid'];
// Get forum info $forum = get_forum($fid); if(!$forum) { error($lang->error_invalidforum);	// Get forum info $forum = get_forum($fid); if(!$forum) { error($lang->error_invalidforum);
} $forumpermissions = forum_permissions($forum['fid']);	} $forumpermissions = forum_permissions($forum['fid']);
$plugins->run_hooks("polls_showresults_start");	$plugins->run_hooks("polls_showresults_start");
Zeile 760	Zeile 778
build_forum_breadcrumb($fid); add_breadcrumb(htmlspecialchars_uni($thread['subject']), get_thread_link($thread['tid'])); add_breadcrumb($lang->nav_pollresults);	build_forum_breadcrumb($fid); add_breadcrumb(htmlspecialchars_uni($thread['subject']), get_thread_link($thread['tid'])); add_breadcrumb($lang->nav_pollresults);

$voters = $votedfor = array(); // Calculate votes	$voters = $votedfor = array(); // Calculate votes
Zeile 784	Zeile 802
{ // Add one to the number of voters for guests ++$guest_voters[$voter['voteoption']];	{ // Add one to the number of voters for guests ++$guest_voters[$voter['voteoption']];
} else { $voters[$voter['voteoption']][$voter['uid']] = $voter['username'];	} else { $voters[$voter['voteoption']][$voter['uid']] = htmlspecialchars_uni($voter['username']);
} }	} }
Zeile 827	Zeile 845
} if($votes == 0)	} if($votes == 0)
{	{
$percent = 0;	$percent = 0;
}	}
else	else
{	{
$percent = number_format($votes / $poll['totvotes'] * 100, 2); }	$percent = number_format($votes / $poll['totvotes'] * 100, 2); }
Zeile 841	Zeile 859
$userlist = ''; $guest_count = 0; if($poll['public'] == 1 \|\| is_moderator($fid, "canmanagepolls"))	$userlist = ''; $guest_count = 0; if($poll['public'] == 1 \|\| is_moderator($fid, "canmanagepolls"))
{	{
if(isset($voters[$number]) && is_array($voters[$number])) { foreach($voters[$number] as $uid => $username)	if(isset($voters[$number]) && is_array($voters[$number])) { foreach($voters[$number] as $uid => $username)
Zeile 869	Zeile 887
if($poll['totvotes']) { $totpercent = '100%';	if($poll['totvotes']) { $totpercent = '100%';
} else	} else
{ $totpercent = '0%'; }	{ $totpercent = '0%'; }
Zeile 881	Zeile 899
eval("\$showresults = \"".$templates->get("polls_showresults")."\";"); output_page($showresults); }	eval("\$showresults = \"".$templates->get("polls_showresults")."\";"); output_page($showresults); }

if($mybb->input['action'] == "vote" && $mybb->request_method == "post") { // Verify incoming POST request	if($mybb->input['action'] == "vote" && $mybb->request_method == "post") { // Verify incoming POST request
Zeile 897	Zeile 916
$plugins->run_hooks("polls_vote_start"); $poll['timeout'] = $poll['timeout']6060*24;	$plugins->run_hooks("polls_vote_start"); $poll['timeout'] = $poll['timeout']6060*24;
$query = $db->simple_select("threads", "*", "poll='".(int)$poll['pid']."'"); $thread = $db->fetch_array($query); if(!$thread \|\| $thread['visible'] == 0)	$thread = get_thread($poll['tid']); if(!$thread \|\| ($thread['visible'] != 1 && ($thread['visible'] == 0 && !is_moderator($thread['fid'], "canviewunapprove")) \|\| ($thread['visible'] == -1 && !is_moderator($thread['fid'], "canviewdeleted"))))
{ error($lang->error_invalidthread);	{ error($lang->error_invalidthread);
}	}
$fid = $thread['fid']; $forumpermissions = forum_permissions($fid); if($forumpermissions['canvotepolls'] == 0)	$fid = $thread['fid']; $forumpermissions = forum_permissions($fid); if($forumpermissions['canvotepolls'] == 0)
Zeile 916	Zeile 934
// Get forum info $forum = get_forum($fid); if(!$forum)	// Get forum info $forum = get_forum($fid); if(!$forum)
{	{
error($lang->error_invalidforum); } else	error($lang->error_invalidforum); } else
Zeile 943	Zeile 961
// Check if the user has voted before... if($mybb->user['uid'])	// Check if the user has voted before... if($mybb->user['uid'])
{ $query = $db->simple_select("pollvotes", "*", "uid='".$mybb->user['uid']."' AND pid='".$poll['pid']."'"); $votecheck = $db->fetch_array($query); } if($votecheck['vid'] \|\| (isset($mybb->cookies['pollvotes'][$poll['pid']]) && $mybb->cookies['pollvotes'][$poll['pid']] !== "")) {	{ $user_check = "uid='{$mybb->user['uid']}'"; } else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); } $query = $db->simple_select("pollvotes", "*", "{$user_check} AND pid='".$poll['pid']."'"); $votecheck = $db->fetch_array($query); if($votecheck['vid']) {
error($lang->error_alreadyvoted);	error($lang->error_alreadyvoted);
} elseif(!$mybb->user['uid']) { // Give a cookie to guests to inhibit revotes if(is_array($mybb->input['option'])) { // We have multiple options here... $votes_cookie = implode(',', array_keys($mybb->input['option'])); } else { $votes_cookie = $mybb->input['option']; } my_setcookie("pollvotes[{$poll['pid']}]", $votes_cookie);
}	}
$votesql = ''; $now = TIME_NOW;	$votesql = array();
$votesarray = explode("\|\|~\|~\|\|", $poll['votes']); $option = $mybb->input['option']; $numvotes = (int)$poll['numvotes'];	$votesarray = explode("\|\|~\|~\|\|", $poll['votes']); $option = $mybb->input['option']; $numvotes = (int)$poll['numvotes'];
Zeile 978	Zeile 986
if(is_array($option)) { $total_options = 0;	if(is_array($option)) { $total_options = 0;

foreach($option as $voteoption => $vote)	foreach($option as $voteoption => $vote)
{	{
if($vote == 1 && isset($votesarray[$voteoption-1])) {	if($vote == 1 && isset($votesarray[$voteoption-1])) {
if($votesql) { $votesql .= ","; } $votesql .= "('".$poll['pid']."','".$mybb->user['uid']."','".$db->escape_string($voteoption)."','$now')";	$votesql[] = array( "pid" => $poll['pid'], "uid" => (int)$mybb->user['uid'], "voteoption" => $db->escape_string($voteoption), "dateline" => TIME_NOW, "ipaddress" => $db->escape_binary($session->packedip) );
$votesarray[$voteoption-1]++; $numvotes = $numvotes+1; $total_options++; } }	$votesarray[$voteoption-1]++; $numvotes = $numvotes+1; $total_options++; } }

if($total_options > $poll['maxoptions'] && $poll['maxoptions'] != 0) { error($lang->sprintf($lang->error_maxpolloptions, $poll['maxoptions'])); }	if($total_options > $poll['maxoptions'] && $poll['maxoptions'] != 0) { error($lang->sprintf($lang->error_maxpolloptions, $poll['maxoptions'])); }
} } else	} } else
{ if(is_array($option) \|\| !isset($votesarray[$option-1])) { error($lang->error_nopolloptions); }	{ if(is_array($option) \|\| !isset($votesarray[$option-1])) { error($lang->error_nopolloptions); }
$votesql = "('".$poll['pid']."','".$mybb->user['uid']."','".$db->escape_string($option)."','$now')";	$votesql = array( "pid" => $poll['pid'], "uid" => (int)$mybb->user['uid'], "voteoption" => $db->escape_string($option), "dateline" => TIME_NOW, "ipaddress" => $db->escape_binary($session->packedip) );
$votesarray[$option-1]++; $numvotes = $numvotes+1; }	$votesarray[$option-1]++; $numvotes = $numvotes+1; }
Zeile 1014	Zeile 1033
if(!$votesql) { error($lang->error_nopolloptions);	if(!$votesql) { error($lang->error_nopolloptions);
} $db->write_query(" INSERT INTO ".TABLE_PREFIX."pollvotes (pid,uid,voteoption,dateline) VALUES $votesql ");	} if($poll['multiple'] == 1) { $db->insert_query_multiple("pollvotes", $votesql); } else { $db->insert_query("pollvotes", $votesql); }
$voteslist = ''; for($i = 1; $i <= $poll['numoptions']; ++$i) {	$voteslist = ''; for($i = 1; $i <= $poll['numoptions']; ++$i) {
Zeile 1037	Zeile 1060
$plugins->run_hooks("polls_vote_process");	$plugins->run_hooks("polls_vote_process");
$db->update_query("polls", $updatedpoll, "pid='".$poll['pid']."'"); $plugins->run_hooks("polls_vote_end");	$db->update_query("polls", $updatedpoll, "pid='".$poll['pid']."'"); $plugins->run_hooks("polls_vote_end");
redirect(get_thread_link($poll['tid']), $lang->redirect_votethanks); }	redirect(get_thread_link($poll['tid']), $lang->redirect_votethanks); }
Zeile 1051	Zeile 1074
if($mybb->usergroup['canundovotes'] != 1) { error_no_permission();	if($mybb->usergroup['canundovotes'] != 1) { error_no_permission();
}	}

$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', 1)."'");	$query = $db->simple_select("polls", "*", "pid='".$mybb->get_input('pid', MyBB::INPUT_INT)."'");
$poll = $db->fetch_array($query); if(!$poll['pid'])	$poll = $db->fetch_array($query); if(!$poll['pid'])
Zeile 1068	Zeile 1091
// We do not have $forum_cache available here since no forums permissions are checked in undo vote // Get thread ID and then get forum info $thread = get_thread($poll['tid']);	// We do not have $forum_cache available here since no forums permissions are checked in undo vote // Get thread ID and then get forum info $thread = get_thread($poll['tid']);
if(!$thread \|\| $thread['visible'] == 0)	if(!$thread \|\| ($thread['visible'] != 1 && ($thread['visible'] == 0 && !is_moderator($thread['fid'], "canviewunapprove")) \|\| ($thread['visible'] == -1 && !is_moderator($thread['fid'], "canviewdeleted"))))
{ error($lang->error_invalidthread); }	{ error($lang->error_invalidthread); }
Zeile 1098	Zeile 1121
if($poll['closed'] == 1 \|\| $thread['closed'] == 1 \|\| ($expiretime < TIME_NOW && $poll['timeout'])) { error($lang->error_pollclosed);	if($poll['closed'] == 1 \|\| $thread['closed'] == 1 \|\| ($expiretime < TIME_NOW && $poll['timeout'])) { error($lang->error_pollclosed);
}	}
// Check if the user has voted before... $vote_options = array();	// Check if the user has voted before... $vote_options = array();

if($mybb->user['uid'])	if($mybb->user['uid'])
{ $query = $db->simple_select("pollvotes", "vid,voteoption", "uid='".$mybb->user['uid']."' AND pid='".$poll['pid']."'"); while($voteoption = $db->fetch_array($query)) { $vote_options[$voteoption['vid']] = $voteoption['voteoption']; } } elseif(isset($mybb->cookies['pollvotes'][$poll['pid']])) { // for Guests, we simply see if they've got the cookie $vote_options = explode(',', $mybb->cookies['pollvotes'][$poll['pid']]);	{ $user_check = "uid='{$mybb->user['uid']}'"; } else { $user_check = "uid='0' AND ipaddress=".$db->escape_binary($session->packedip); } $query = $db->simple_select("pollvotes", "vid,voteoption", "{$user_check} AND pid='".$poll['pid']."'"); while($voteoption = $db->fetch_array($query)) { $vote_options[$voteoption['vid']] = $voteoption['voteoption'];
} if(empty($vote_options)) { error($lang->error_notvoted);	} if(empty($vote_options)) { error($lang->error_notvoted);
} else if(!$mybb->user['uid']) { // clear cookie for Guests my_setcookie("pollvotes[{$poll['pid']}]", "");
} // Note, this is not thread safe!	} // Note, this is not thread safe!
Zeile 1176	Zeile 1196
$plugins->run_hooks("polls_do_undovote_process");	$plugins->run_hooks("polls_do_undovote_process");
$db->delete_query("pollvotes", "uid='".$mybb->user['uid']."' AND pid='".$poll['pid']."'");	$db->delete_query("pollvotes", "{$user_check} AND pid='".$poll['pid']."'");
$db->update_query("polls", $updatedpoll, "pid='".$poll['pid']."'"); $plugins->run_hooks("polls_do_undovote_end");	$db->update_query("polls", $updatedpoll, "pid='".$poll['pid']."'"); $plugins->run_hooks("polls_do_undovote_end");