poll_vote.php

<?php
$pageTitle = "Poll Vote";
include_once('includes/session.php');
include_once('includes/functions_poll.php');

if ( !array_key_exists( 'page', $_POST ) )
	$_POST['page'] = "/";

// are we logged in? no → leave
if ( !login_check() ) {
	header( "Location: " . $_POST['page'] );
	exit();
} else {
	$me = $_SESSION['u'];
}

if ( !isset( $database ) )
	$database = connectDB( );

if (isset($_POST['poll']) && isset($_POST['poll_selection'])) {

	if (is_numeric($_POST['poll']) && is_array($_POST['poll_selection'])) {

		$stmt =  $database->prepare("select count(*) as voted from poll_respondent where uid = :uid");
		$stmt->execute(array( 'uid' => $me ));
		if ($stmt)
		{
			$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
			$stmt->closeCursor();
			if ($result[0]['voted'] == 0) {

				$stmt =  $database->prepare("select multipleChoice, now() between publishDate and expireDate as canVote from poll where id = :pollid");
				$stmt->execute(array( 'pollid' => $_POST['poll']));
				$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
				$stmt->closeCursor();
				if ($result[0]['canVote'] == 1) {
					//Check whether this is a multiple choice poll and bail if there are too many responses
					if ((count($_POST['poll_selection']) > 1 && $result[0]['multipleChoice'] > 0) || (count($_POST['poll_selection']) == 1)) {

						$stmt = $database->prepare("insert into poll_respondent (uid, pollID) values (:steamid, :pollid)");
						$stmt->execute(array( 'steamid' => $me, 'pollid' => $_POST['poll']));
						$stmt->closeCursor();

						$stmt = $database->prepare("update poll_option set responseCount = responseCount + 1 where id = :optionid");

						foreach ($_POST['poll_selection'] as $o) {
							if ( is_numeric( $o ) ) {
								$stmt->execute( array( 'optionid' => $o ) );
								$stmt->closeCursor();
							}
						}
					} else {
						$error = "too_many_choices";
					}
				} else {
					$error = "poll_not_open";
				}
			} else {
				$error = "already_voted_" . $result[ 0 ] ['voted' ];
			}
		} else {
			$error = "system_error";
		}
	} else {
		$error = "bad_selection";
	}
} else {
	$error = "bad_poll";
}

if ( isset( $error ) )
		header( 'location: ' . $_POST[ 'page' ] . '?error=' . $error );
	else
		header( 'Location: ' . $_POST[ 'page' ] );