Gazelle/sections/forums/poll_vote.php

<?php
#declare(strict_types=1);

if (!isset($_POST['topicid']) || !is_number($_POST['topicid'])) {
  error(0, true);
}
$TopicID = $_POST['topicid'];

if (!empty($_POST['large'])) {
  $Size = 750;
} else {
  $Size = 140;
}

if (!$ThreadInfo = $Cache->get_value("thread_$TopicID".'_info')) {
  $DB->query("
    SELECT
      t.Title,
      t.ForumID,
      t.IsLocked,
      t.IsSticky,
      COUNT(fp.id) AS Posts,
      t.LastPostAuthorID,
      ISNULL(p.TopicID) AS NoPoll
    FROM forums_topics AS t
      JOIN forums_posts AS fp ON fp.TopicID = t.ID
      LEFT JOIN forums_polls AS p ON p.TopicID = t.ID
    WHERE t.ID = '$TopicID'
    GROUP BY fp.TopicID");
  if (!$DB->has_results()) {
    error();
  }
  $ThreadInfo = $DB->next_record(MYSQLI_ASSOC);
  if (!$ThreadInfo['IsLocked'] || $ThreadInfo['IsSticky']) {
    $Cache->cache_value("thread_$TopicID".'_info', $ThreadInfo, 0);
  }
}
$ForumID = $ThreadInfo['ForumID'];

if (!list($Question, $Answers, $Votes, $Featured, $Closed) = $Cache->get_value("polls_$TopicID")) {
  $DB->query("
    SELECT
      Question,
      Answers,
      Featured,
      Closed
    FROM forums_polls
    WHERE TopicID = '$TopicID'");
  list($Question, $Answers, $Featured, $Closed) = $DB->next_record(MYSQLI_NUM, array(1));
  $Answers = unserialize($Answers);
  $DB->query("
    SELECT Vote, COUNT(UserID)
    FROM forums_polls_votes
    WHERE TopicID = '$TopicID'
      AND Vote != '0'
    GROUP BY Vote");
  $VoteArray = $DB->to_array(false, MYSQLI_NUM);

  $Votes = [];
  foreach ($VoteArray as $VoteSet) {
    list($Key,$Value) = $VoteSet;
    $Votes[$Key] = $Value;
  }

  for ($i = 1, $il = count($Answers); $i <= $il; ++$i) {
    if (!isset($Votes[$i])) {
      $Votes[$i] = 0;
    }
  }
  $Cache->cache_value("polls_$TopicID", array($Question, $Answers, $Votes, $Featured, $Closed), 0);
}


if ($Closed) {
  error(403,true);
}

if (!empty($Votes)) {
  $TotalVotes = array_sum($Votes);
  $MaxVotes = max($Votes);
} else {
  $TotalVotes = 0;
  $MaxVotes = 0;
}

if (!isset($_POST['vote']) || !is_number($_POST['vote'])) {
?>
<span class="error">Please select an option.</span><br />
<form class="vote_form" name="poll" id="poll" action="">
  <input type="hidden" name="action" value="poll" />
  <input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
  <input type="hidden" name="large" value="<?=display_str($_POST['large'])?>" />
  <input type="hidden" name="topicid" value="<?=$TopicID?>" />
<?php for ($i = 1, $il = count($Answers); $i <= $il; $i++) { ?>
  <input type="radio" name="vote" id="answer_<?=$i?>" value="<?=$i?>" />
  <label for="answer_<?=$i?>"><?=display_str($Answers[$i])?></label><br />
<?php } ?>
  <br /><input type="radio" name="vote" id="answer_0" value="0" /> <label for="answer_0">Blank&#8202;&mdash;&#8202;Show the results!</label><br /><br />
  <input type="button" onclick="ajax.post('index.php', 'poll', function(response) { $('#poll_container').raw().innerHTML = response });" value="Vote" />
</form>
<?
} else {
  authorize();
  $Vote = $_POST['vote'];
  if (!isset($Answers[$Vote]) && $Vote != 0) {
    error(0,true);
  }

  //Add our vote
  $DB->query("
    INSERT IGNORE INTO forums_polls_votes
      (TopicID, UserID, Vote)
    VALUES
      ($TopicID, " . $LoggedUser['ID'] . ", $Vote)");
  if ($DB->affected_rows() == 1 && $Vote != 0) {
    $Cache->begin_transaction("polls_$TopicID");
    $Cache->update_row(2, array($Vote => '+1'));
    $Cache->commit_transaction(0);
    $Votes[$Vote]++;
    $TotalVotes++;
    $MaxVotes++;
  }

  if ($Vote != 0) {
    $Answers[$Vote] = '=> '.$Answers[$Vote];
  }

?>
    <ul class="poll nobullet">
<?
    if ($ForumID != STAFF_FORUM) {
      for ($i = 1, $il = count($Answers); $i <= $il; $i++) {
        if (!empty($Votes[$i]) && $TotalVotes > 0) {
          $Ratio = $Votes[$i] / $MaxVotes;
          $Percent = $Votes[$i] / $TotalVotes;
        } else {
          $Ratio = 0;
          $Percent = 0;
        }
?>
          <li><?=display_str($Answers[$i])?> (<?=number_format($Percent * 100, 2)?>%)</li>
          <li class="graph">
            <span class="center_poll" style="width: <?=round($Ratio * $Size)?>px;"></span>
          </li>
<?
      }
    } else {
      //Staff forum, output voters, not percentages
      $DB->query("
        SELECT GROUP_CONCAT(um.Username SEPARATOR ', '),
          fpv.Vote
        FROM users_main AS um
          JOIN forums_polls_votes AS fpv ON um.ID = fpv.UserID
        WHERE TopicID = $TopicID
        GROUP BY fpv.Vote");

      $StaffVotes = $DB->to_array();
      foreach ($StaffVotes as $StaffVote) {
        list($StaffString, $StaffVoted) = $StaffVote;
?>
        <li><a href="forums.php?action=change_vote&amp;threadid=<?=$TopicID?>&amp;auth=<?=$LoggedUser['AuthKey']?>&amp;vote=<?=(int)$StaffVoted?>"><?=display_str(empty($Answers[$StaffVoted]) ? 'Blank' : $Answers[$StaffVoted])?></a> - <?=$StaffString?></li>
<?
      }
    }
?>
    </ul>
    <br /><strong>Votes:</strong> <?=number_format($TotalVotes)?>
<?
}