mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 10:56:26 +00:00
40 lines
840 B
PHP
40 lines
840 B
PHP
<?
|
|
authorize();
|
|
|
|
$ThreadID = $_POST['threadid'];
|
|
$NewOption = $_POST['new_option'];
|
|
|
|
if (!is_number($ThreadID)) {
|
|
error(404);
|
|
}
|
|
if (!check_perms('site_moderate_forums')) {
|
|
$DB->query("
|
|
SELECT ForumID
|
|
FROM forums_topics
|
|
WHERE ID = $ThreadID");
|
|
list($ForumID) = $DB->next_record();
|
|
if (!in_array($ForumID, $ForumsRevealVoters)) {
|
|
error(403);
|
|
}
|
|
}
|
|
$DB->query("
|
|
SELECT Answers
|
|
FROM forums_polls
|
|
WHERE TopicID = $ThreadID");
|
|
if (!$DB->has_results()) {
|
|
error(404);
|
|
}
|
|
|
|
list($Answers) = $DB->next_record(MYSQLI_NUM, false);
|
|
$Answers = unserialize($Answers);
|
|
$Answers[] = $NewOption;
|
|
$Answers = serialize($Answers);
|
|
|
|
$DB->query("
|
|
UPDATE forums_polls
|
|
SET Answers = '".db_string($Answers)."'
|
|
WHERE TopicID = $ThreadID");
|
|
$Cache->delete_value("polls_$ThreadID");
|
|
|
|
header("Location: forums.php?action=viewthread&threadid=$ThreadID");
|