mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 02:46:30 +00:00
40 lines
934 B
PHP
40 lines
934 B
PHP
<?
|
|
|
|
authorize();
|
|
|
|
if (!check_perms("users_mod")) {
|
|
error(403);
|
|
}
|
|
|
|
$ID = $_POST['id'];
|
|
$Answer = db_string($_POST['answer']);
|
|
$Date = sqltime();
|
|
$UserID = $LoggedUser['ID'];
|
|
|
|
if (!is_number($ID) || empty($Answer)) {
|
|
error(404);
|
|
}
|
|
|
|
$DB->query("
|
|
SELECT 1
|
|
FROM staff_answers
|
|
WHERE QuestionID = '$ID'
|
|
AND UserID = '$LoggedUser[ID]'");
|
|
|
|
if (!$DB->has_results()) {
|
|
$DB->query("
|
|
INSERT INTO staff_answers
|
|
(QuestionID, UserID, Answer, Date)
|
|
VALUES
|
|
('$ID', '$UserID', '$Answer', '$Date')");
|
|
$DB->query("
|
|
SELECT UserID
|
|
FROM user_questions
|
|
WHERE ID = '$ID'");
|
|
list($ToID) = $DB->next_record();
|
|
Misc::send_pm($ToID, 0, "Your question has been answered", "One of your questions has been answered! View the response [url=https://". SSL_SITE_URL . "/questions.php?action=view_answers&userid=$UserID#question$ID]here[/url].");
|
|
} else {
|
|
error("You have already answered this question");
|
|
}
|
|
header("Location: questions.php");
|