Next Generation CMS :: Форум поддержки

WHERE `lasttime` < '.$tm.';'

<?php

// Protect against hack attempts
if (!defined('NGCMS')) die ('HAL');


/* проверка IP  -  START */	
	function ipcheck ($post_id, $upd) {
 global $ip, $mysql;
	/* Сначала ищем IP в базе, голосовал-ли юзер вообще */
	if($mysql->record("select ip from ".prefix."_rating where ip = '".$ip."'")) {
	/* IP найден > Далее ищем ID новости в базе, по найденному IP */
 if($mysql->record("select ip from ".prefix."_rating where ip = '".$ip."' and (locate('|".str_replace("'", "", $post_id)."|', News_ID)>0)")) {
 return "fail";
	}
	else { /* ID новости не найден, юзер с этим IP голосует за эту новость */
if($upd){$mysql->query("update ".prefix."_rating set News_ID=concat(News_ID, '".str_replace("'", "", str_replace("'", "", $post_id))."|') where IP = '".$ip."'");}
return "ok";
	} 
}
	else { /* Юзер еще ни разу не голосовал, его IP не найден. Создаем новую строку в таблице с его IP и новостью */
if($upd){$mysql->query("INSERT INTO ".prefix."_rating set ip='".$ip."', News_ID = '|".str_replace("'", "", $post_id)."|'");}
return "ok";
}
}
/* проверка IP  -  END */	


function plugin_rating_update(){
	global $mysql, $tpl, $userROW;

	LoadPluginLang('rating', 'site');
	
		// Security protection - limit rating values between 1..5
	$rating = intval($_REQUEST['rating']);
	$post_id = intval($_REQUEST['post_id']);
	if (($rating <1)||($rating >5)) {
		return 'incorrect rating';
	}

	// Check if referred news exists
	if (!is_array($row = $mysql->record("select * from ".prefix."_news where id = ".db_squote($post_id)))) {
		return 'referred news not found';
	}

	// Check if we try to make a duplicated rate
	if ($_COOKIE['rating'.$row['id']] || ipcheck(db_squote($post_id), 0)=="fail")  // изменение 1
		return 'you already made your rate';

	// Check if we feet "register only" limitation
	if (extra_get_param('rating','regonly') && !is_array($userROW)) {
		return 'only registered users can rate news';
	}


	// Ok, everything is fine. Let's update rating.

	@setcookie('rating'.$post_id, 'voted', (time() + 31526000), '/');
	$mysql->query("update ".prefix."_news set rating=rating+".$rating.", votes=votes+1 where id = ".db_squote($post_id));
	$data = $mysql->record("select rating, votes from ".prefix."_news where id = ".db_squote($post_id));
	ipcheck (db_squote($post_id), 1); // изменение 2

	$localskin = extra_get_param('rating', 'localskin');
	if (!$localskin) $localskin='basic';
	$tpath = locatePluginTemplates(array('rating', ':rating.css'), 'rating', extra_get_param('rating', 'localsource'), $localskin);
	register_stylesheet($tpath['url::rating.css'].'/rating.css'); 

	$tvars['vars']['tpl_url'] = $tpath['url::rating.css'];
	$tvars['vars']['home'] = home;
	$tvars['vars']['rating'] = ($data['rating'] == 0) ? 0 : round(($data['rating'] / $data['votes']), 0);
	$tvars['vars']['votes'] = $data['votes'];

	$tpl -> template('rating', $tpath['rating']);
	$tpl -> vars('rating', $tvars);
	return $tpl -> show('rating');
}

function rating_show($newsID, $rating, $votes){
	global $tpl, $userROW;

	LoadPluginLang('rating', 'site');
	$localskin = extra_get_param('rating', 'localskin');
	if (!$localskin) $localskin='basic';

	$tpath = locatePluginTemplates(array('rating', 'rating.form', ':rating.css'), 'rating', extra_get_param('rating', 'localsource'), $localskin);
	register_stylesheet($tpath['url::rating.css'].'/rating.css'); 
	
	$tvars['vars']['tpl_url'] = $tpath['url::rating.css'];
	$tvars['vars']['home'] = home;
	$tvars['vars']['ajax_url'] = generateLink('core', 'plugin', array('plugin' => 'rating'), array());

	$tvars['vars']['post_id'] = $newsID;
	$tvars['vars']['rating'] = (!$rating || !$votes) ? 0 : round(($rating / $votes), 0);
	$tvars['vars']['votes'] = $votes;

	if ((isset($_COOKIE['rating'.$newsID]) && $_COOKIE['rating'.$newsID]) || (extra_get_param('rating','regonly') && !is_array($userROW)) || ipcheck($newsID, 0)=="fail") { // изменение 3
		// Show
		$tpl -> template('rating', $tpath['rating']);
		$tpl -> vars('rating', $tvars);
		return $tpl -> show('rating');
	} else {
		// Edit
		$tpl -> template('rating.form', $tpath['rating.form']);
		$tpl -> vars('rating.form', $tvars);
		return $tpl -> show('rating.form');
	}
	return;
}

function plugin_rating_screen(){
	global $SUPRESS_TEMPLATE_SHOW, $template;

	@header('Content-type: text/html; charset="windows-1251"');
	if ($_REQUEST['post_id']) {
		$template['vars']['mainblock'] = plugin_rating_update();
		$SUPRESS_TEMPLATE_SHOW = 1;
	} else {
		$template['vars']['mainblock'] = 'unsupported action';
	}
}

//
// ”Ё«мва ­®ў®б⥩ (¤«п Ї®Є §  ३⨭Ј )
//
class RatingNewsFilter extends NewsFilter {
	function showNews($newsID, $SQLnews, &$tvars, $mode = array()) {
		global $tpl, $mysql, $userROW;

		$tvars['vars']['plugin_rating'] = rating_show($SQLnews['id'],$SQLnews['rating'],$SQLnews['votes']);
	}
}	


register_filter('news','raing', new RatingNewsFilter);
register_plugin_page('rating','','plugin_rating_screen',0);

<?php

// Protect against hack attempts
if (!defined('NGCMS')) die ('HAL');


function ruslang($votes) {
	$votes2=substr($votes, strlen($votes)-1,1);
	if($votes=="11" ||$votes=="12" ||$votes=="13" ||$votes=="14" || $votes2=="0" || $votes2=="5" || 
	$votes2=="6" || $votes2=="7" || $votes2=="8" || $votes2=="9"){$golosov="голосов";}
 elseif($votes2=="1"){$golosov="голос";}
 elseif($votes2=="2" || $votes2=="3" || $votes2=="4"){$golosov="голоса";}
	if($votes=="0"){$votes="Нет";}
 return $votes." ".$golosov;
}


 function ipcheck ($mysql, $post_id, $upd) {
 /* Сначала ищем IP в базе, голосовал-ли юзер вообще */
	if($mysql->record("select ip from ".prefix."_rating where ip = '".$_SERVER['REMOTE_ADDR']."'")) {
	/* IP найден > Далее ищем ID новости в базе, по найденному IP */
 if($mysql->record("select ip from ".prefix."_rating where ip = '".$_SERVER['REMOTE_ADDR']."' and (locate('|".str_replace("'", "", $post_id)."|', News_ID)>0)")) {
 return "fail";
	}
	else { /* ID новости не найден, юзер с этим IP голосует за эту новость */
if($upd){$mysql->query("update ".prefix."_rating set News_ID=concat(News_ID, '".str_replace("'", "", str_replace("'", "", $post_id))."|') where IP = '".$_SERVER['REMOTE_ADDR']."'");}
return "ok";
	} 
}
	else { /* Юзер еще ни разу не голосовал, его IP не найден. Создаем новую строку в таблице с его IP и новостью */
if($upd){$mysql->query("INSERT INTO ".prefix."_rating set ip='".$_SERVER['REMOTE_ADDR']."', News_ID = '|".str_replace("'", "", $post_id)."|'");}
return "ok";
}
}

		
	$show=0; // забыл зачем это нужно xD
	
	

function plugin_rating_update(){  // начинается функция апдейта рейтинга
	global $mysql, $tpl, $userROW;
	
	LoadPluginLang('rating', 'site');
		

	// Security protection - limit rating values between 1..100 :)
	$rating = intval($_REQUEST['rating']);
	$post_id = intval($_REQUEST['post_id']);
	if (($rating <1)||($rating >100)) {
		return 'incorrect rating';
	}

	// Check if referred news exists
	if (!is_array($row = $mysql->record("select * from ".prefix."_news where id = ".db_squote($post_id)))) {
		return 'Referred news not found';
	}

	// Check if we try to make a duplicated rate
 	if ($_COOKIE['rating'.$row['id']] || ipcheck($mysql, db_squote($post_id), 0)=="fail")
		return 'Вы уже голосовали!';

	// Check if we feet "register only" limitation
	if (extra_get_param('rating','regonly') && !is_array($userROW)) {
		return 'only registered users can rate news';
	}

	// Ok, everything is fine. Let's update rating.

	@setcookie('rating'.$post_id, 'voted', (time() + 31526000), '/');
	ipcheck ($mysql, db_squote($post_id), 1); 
	$data = $mysql->record("select rating, votes from ".prefix."_news where id = ".db_squote($post_id));
	$mysql->query("update ".prefix."_news set rating=rating+".$rating.", votes=votes+1 where id = ".db_squote($post_id));
	


 


	
	
	
	
	
	$localskin = extra_get_param('rating', 'localskin');
	if (!$localskin) $localskin='basic';
	$tpath = locatePluginTemplates(array('rating', ':rating.css'), 'rating', extra_get_param('rating', 'localsource'), $localskin);
	register_stylesheet($tpath['url::rating.css'].'/rating.css'); 

	$tvars['vars']['tpl_url'] = $tpath['url::rating.css'];
	$tvars['vars']['home'] = home;
	$tvars['vars']['rating'] = (($data['rating']+$rating) == 0) ? 0 : round((($data['rating']+$rating) / ($data['votes']+1)), 0);
	
 $tvars['vars']['votes']=ruslang(($data['votes']+1)); // супер-функция

	$tpl -> template('rating', $tpath['rating']);
	$tpl -> vars('rating', $tvars);
	return $tpl -> show('rating');
}





function rating_show($newsID, $rating, $votes, $show){
	global $mysql, $tpl, $userROW;

	LoadPluginLang('rating', 'site');
	$localskin = extra_get_param('rating', 'localskin');
	if (!$localskin) $localskin='basic';

	$tpath = locatePluginTemplates(array('rating', 'rating.form', ':rating.css'), 'rating', extra_get_param('rating', 'localsource'), $localskin);
	register_stylesheet($tpath['url::rating.css'].'/rating.css');
	 
	
	$tvars['vars']['tpl_url'] = $tpath['url::rating.css'];
	$tvars['vars']['home'] = home;
	$tvars['vars']['ajax_url'] = generateLink('core', 'plugin', array('plugin' => 'rating'), array());

	$tvars['vars']['post_id'] = $newsID;
	$tvars['vars']['rating'] = (!$rating || !$votes) ? 0 : round(($rating / $votes), 0);
  
 $tvars['vars']['votes']=ruslang($votes); // супер-функция


	if ((isset($_COOKIE['rating'.$newsID]) && $_COOKIE['rating'.$newsID]) || (extra_get_param('rating','regonly') && !is_array($userROW)) || $show==1 || ipcheck($mysql, $newsID, 0)=="fail") {
		// Show
		$tpl -> template('rating', $tpath['rating']);
		$tpl -> vars('rating', $tvars);
		return $tpl -> show('rating');
	} else {
		// Edit
		$tpl -> template('rating.form', $tpath['rating.form']);
		$tpl -> vars('rating.form', $tvars);
		return $tpl -> show('rating.form');
	}
	return;
}

function plugin_rating_screen(){
	global $SUPRESS_TEMPLATE_SHOW, $template;

	@header('Content-type: text/html; charset="windows-1251"');
	if ($_REQUEST['post_id']) {
		$template['vars']['mainblock'] = plugin_rating_update();
		$SUPRESS_TEMPLATE_SHOW = 1;
	} else {
		$template['vars']['mainblock'] = 'unsupported action';
	}
}

//
// ”Ё«мва ­®ў®б⥩ (¤«п Ї®Є §  ३⨭Ј )
//
class RatingNewsFilter extends NewsFilter {
	function showNews($newsID, $SQLnews, &$tvars, $mode = array()) {
		global $tpl, $mysql, $userROW;

		$tvars['vars']['plugin_rating'] = rating_show($SQLnews['id'],$SQLnews['rating'],$SQLnews['votes'],0);
		

		
		
		$tvars['vars']['rating'] = rating_show($SQLnews['id'],$SQLnews['rating'],$SQLnews['votes'],1);

	}
}	


register_filter('news','raing', new RatingNewsFilter);
register_plugin_page('rating','','plugin_rating_screen',0);

	// Ok, everything is fine. Let's update rating.

	@setcookie('rating'.$post_id, 'voted', (time() + 31526000), '/');
	is_array($row = $mysql->record("select * from ".prefix."_news where id = ".db_squote($post_id)));

is_array($row = $mysql->record("select * from ".prefix."_news where id = ".db_squote($post_id)));