mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 19:06:27 +00:00
47 lines
1007 B
PHP
47 lines
1007 B
PHP
<?
|
|
authorize();
|
|
if (!check_perms('site_moderate_forums')) {
|
|
error(404);
|
|
}
|
|
|
|
$ThreadID = $_GET['threadid'];
|
|
$PollOption = $_GET['vote'];
|
|
|
|
if (is_number($ThreadID) && is_number($PollOption)) {
|
|
$DB->query("
|
|
SELECT ForumID
|
|
FROM forums_topics
|
|
WHERE ID = $ThreadID");
|
|
list($ForumID) = $DB->next_record();
|
|
if (!in_array($ForumID, $ForumsRevealVoters)) {
|
|
error(403);
|
|
}
|
|
|
|
$DB->query("
|
|
SELECT Answers
|
|
FROM forums_polls
|
|
WHERE TopicID = $ThreadID");
|
|
if (!$DB->has_results()) {
|
|
error(404);
|
|
}
|
|
|
|
list($Answers) = $DB->next_record(MYSQLI_NUM, false);
|
|
$Answers = unserialize($Answers);
|
|
unset($Answers[$PollOption]);
|
|
$Answers = serialize($Answers);
|
|
|
|
$DB->query("
|
|
UPDATE forums_polls
|
|
SET Answers = '".db_string($Answers)."'
|
|
WHERE TopicID = $ThreadID");
|
|
$DB->query("
|
|
DELETE FROM forums_polls_votes
|
|
WHERE Vote = $PollOption
|
|
AND TopicID = $ThreadID");
|
|
|
|
$Cache->delete_value("polls_$ThreadID");
|
|
header("Location: forums.php?action=viewthread&threadid=$ThreadID");
|
|
} else {
|
|
error(404);
|
|
}
|