<?php
/*
Page:           rpc.php
Created:        Aug 2006
Last Mod:       Mar 18 2007
This page handles the 'AJAX' type response if the user
has Javascript enabled.
--------------------------------------------------------- 
ryan masuga, masugadesign.com
ryan@masugadesign.com 
Licensed under a Creative Commons Attribution 3.0 License.
http://creativecommons.org/licenses/by/3.0/
See readme.txt for full credit details.
--------------------------------------------------------- */
header("Cache-Control: no-cache");
header("Pragma: nocache");

 // get the db connection info
require_once("../db_functions.inc.php"); // get the db connection info
require_once("../config.inc.php");
$rating_tableName     = 'ratingbar';
$rating_unitwidth     = 30;
//getting the values
$vote_sent = preg_replace("/[^0-9]/","",$_REQUEST['j']);
$id_sent = preg_replace("/[^0-9a-zA-Z]/","",$_REQUEST['q']);
$ip_num = preg_replace("/[^0-9\.]/","",$_REQUEST['t']);
$units = preg_replace("/[^0-9]/","",$_REQUEST['c']);
$ip = $_SERVER['REMOTE_ADDR'];

if ($vote_sent > $units) die("Sorry, vote appears to be invalid."); // kill the script because normal users will never see this.


//connecting to the database to get some information
//$query = mysql_query("SELECT total_votes, total_value, used_ips FROM ratingsbar WHERE id='$id_sent' ")or die(" Error: ".mysql_error());
$query = yasDB_select("SELECT total_votes, total_value, used_ips FROM ratingsbar WHERE id='$id_sent' ")or die(" Error");
//$numbers = mysql_fetch_assoc($query);
$numbers = $query->fetch_array(MYSQLI_ASSOC);
$checkIP = unserialize($numbers['used_ips']);
$count = $numbers['total_votes']; //how many votes total
$current_rating = $numbers['total_value']; //total number of rating added together and stored
$sum = $vote_sent+$current_rating; // add together the current vote value and the total vote value
$tense = ($count==1) ? "vote" : "votes"; //plural form votes/vote

// checking to see if the first vote has been tallied
// or increment the current number of votes
($sum==0 ? $added=0 : $added=$count+1);

// if it is an array i.e. already has entries the push in another value
((is_array($checkIP)) ? array_push($checkIP,$ip_num) : $checkIP=array($ip_num));
$insertip=serialize($checkIP);

//IP check when voting
//$voted=mysql_num_rows(mysql_query("SELECT used_ips FROM ratingsbar WHERE used_ips LIKE '%".$ip."%' AND id='".$id_sent."' "));
$result = yasDB_select("SELECT used_ips FROM ratingsbar WHERE used_ips LIKE '%".$ip."%' AND id='".$id_sent."' ");
$voted = $result->num_rows;


if(!$voted) {     //if the user hasn't yet voted, then vote normally...

	if (($vote_sent >= 1 && $vote_sent <= $units) && ($ip == $ip_num)) { // keep votes within range, make sure IP matches - no monkey business!
		$update = "UPDATE ratingsbar SET total_votes='".$added."', total_value='".$sum."', used_ips='".$insertip."' WHERE id='$id_sent'";
		//$result = mysql_query($update);
		$result = yasDB_update($update);
	} 
} //end for the "if(!$voted)"
// these are new queries to get the new values!
//$newtotals = mysql_query("SELECT total_votes, total_value, used_ips FROM ratingsbar WHERE id='$id_sent' ")or die(" Error: ".mysql_error());
$newtotals = yasDB_select("SELECT total_votes, total_value, used_ips FROM ratingsbar WHERE id='$id_sent' ")or die(" Error");
//$numbers = mysql_fetch_assoc($newtotals);
$numbers = $newtotals->fetch_array(MYSQLI_ASSOC);
$count = $numbers['total_votes'];//how many votes total
$current_rating = $numbers['total_value'];//total number of rating added together and stored
$tense = ($count==1) ? "vote" : "votes"; //plural form votes/vote

// $new_back is what gets 'drawn' on your page after a successful 'AJAX/Javascript' vote

$new_back = array();

$new_back[] .= '<ul class="unit-rating" style="width:'.$units*$rating_unitwidth.'px;">';
$new_back[] .= '<li class="current-rating" style="width:'.@number_format($current_rating/$count,2)*$rating_unitwidth.'px;"></li>';
$new_back[] .= '<li class="r1-unit"></li>';
$new_back[] .= '<li class="r2-unit"></li>';
$new_back[] .= '<li class="r3-unit"></li>';
$new_back[] .= '<li class="r4-unit"></li>';
$new_back[] .= '<li class="r5-unit"></li>';
$new_back[] .= '<li class="r6-unit"></li>';
$new_back[] .= '<li class="r7-unit"></li>';
$new_back[] .= '<li class="r8-unit"></li>';
$new_back[] .= '<li class="r9-unit"></li>';
$new_back[] .= '<li class="r10-unit"></li>';
$new_back[] .= '</ul>';
//$new_back[] .= '<p class="voted">Rating: <strong>'.@number_format($sum/$added,1).'</strong>/'.$units.' ('.$count.' '.$tense.' cast) ';
//$new_back[] .= '<span class="thanks">Thanks for voting!</span></p>';

$allnewback = join("\n", $new_back);

// ========================

//name of the div id to be updated | the html that needs to be changed
$output = "unit_long$id_sent|$allnewback";
echo $output;
?>