source: quests/action.php@ 276

<?php

  include('includes/global.php');

  if (array_key_exists('delete', $_GET) and Licence(1)) {
    $QuestID = $_GET['ID'];       
    $Database->SQLCommand("DELETE FROM quests WHERE ID = '$QuestID' AND Language <> '0'");
    echo 'Quest byl smazán!';   
      WriteLog('Quest smazán! <a href="form.php?ID='.$QuestID.'">'.$QuestID.'</a>', 4);
  }

  if (array_key_exists('NotComplete', $_GET) and Licence(1)) {
    $QuestID = $_GET['ID'];
    $Database->SQLCommand("UPDATE quests SET Complete = '0' WHERE ID = '$QuestID'");
    echo 'Quest byl vrázen k opravì!';   
      WriteLog('Quest Byl brácen k opravì <a href="form.php?ID='.$QuestID.'">'.$QuestID.'</a>', 4);
  }

  if (array_key_exists('shoutbox', $_GET)) {
    $shoutbox = $_GET['shoutbox'];
    if ($shoutbox == '') {
      echo '<form action="action.php?shoutbox=1" method="post">
      Uµivatel: ';
      if (Licence(0)) echo '<b>'.$_SESSION['User'].'</b><br />'; else  echo '<input type="text" name="user"><br />';
            echo 'Text zprávy: <input type="text" name="text" size="50"> 
            <input type="submit" value="Uloµit"><br />
            </form>';
    } else {
      if (Licence(0)) $user = $_SESSION['User']; else {
        $user = $_POST['user'];
        $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE user = '$user'"));
        if ((!$Line) or ($user == '')) {} else die('Toto jméno je registrováno nemùµete psát za nìj. Pokud jste '.$user.' pak se pøihlaste.');
      }
      $text = $_POST['text'];
      $Database->SQLCommand("INSERT INTO `shoutbox` ( `user` , `text` , `date` , `IP` ) 
      VALUES ( '$user', '$text', now(), '".$_SERVER['REMOTE_ADDR']."');");
      echo 'Zpráva vloµena!';   
    }
  }

  if (array_key_exists('vote', $_GET)) {
    $questID = $_GET['ID'];
    $vote = $_GET['vote'];
    $IDuser = $_SESSION['UserID'];
    
    if (($vote > 5) OR ($vote < 1)) die ('Spadná známka');
    

    $Line = mysql_fetch_row($Database->SQLCommand("SELECT * FROM quests_vote WHERE IDuser = '$IDuser' AND IDquest = '$questID'"));
    if ((!$Line) and (Licence(0))) {  
      $Line = mysql_fetch_array($Database->SQLCommand("SELECT Vote,CountVote FROM quests WHERE ID = '$questID'"));
      $CountVote = $Line['CountVote']+1;
      $OldVote = $Line['Vote']*$Line['CountVote'];
      $NewVote = ($OldVote+$vote)/$CountVote;
      
      $Database->SQLCommand("UPDATE quests SET Vote = '$NewVote', CountVote = '$CountVote' WHERE ID = '$questID'");
    
      $Database->SQLCommand("INSERT INTO `quests_vote` ( `IDquest` , `IDuser` , `vote` ) VALUES ( '$questID', '$IDuser', '$vote');");
      echo 'Hlas byl ulo¾en! Hlasoval jste: '.$vote.'<br /> Nyní je známka questu '.$NewVote;   
    
      WriteLog('U¾ivatel hlasoval: '.$vote.'! Nyní je známka questu  (<a href="form.php?ID='.$questID.'">'.$questID.'</a>): '.$NewVote, 5);
    } else echo 'Ji¾ jste hlasoval!, nebo nem¾e¹ hlasovat';
  }

  ShowFooter();      
?>