<?
authorize();
$ThreadID = $_GET['threadid'];
$NewVote = $_GET['vote'];

if (is_number($ThreadID) && is_number($NewVote)) {
	if (!check_perms("site_moderate_forums")) {
		$DB->query("SELECT ForumID FROM forums_topics WHERE ID = $ThreadID");
		list($ForumID) = $DB->next_record();
		if (!in_array($ForumID, $ForumsRevealVoters)) {
			error(403);
		}
	}

	$DB->query("
		UPDATE forums_polls_votes
		SET Vote = $NewVote
		WHERE TopicID = $ThreadID
			AND UserID = ".$LoggedUser['ID']);
	$Cache->delete_value('polls_'.$ThreadID);
	header("Location: forums.php?action=viewthread&threadid=".$ThreadID);

} else {
	error(404);
}