403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/baberankings.com.bak/members/modules/rating/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/baberankings.com.bak/members/modules/rating/process_vote.php
<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?
//different cookies for profile / image rating modes
        $cookie = (int)voting_type == 0 ? 'voted' : 'voted_images';
        
//check if visitor is voting
        if ($_SESSION['user'] == '' && visitors_rate == 'No') {
                ob_clean();
                header('Location: '.constant('dir').'register.html');
                exit;
                }

//verify double votes
        if (vote_cookie != 'No')
                $voted = unserialize(base64_decode($_COOKIE[$cookie]));
        if (!is_array($voted)) $voted = array();

//verify vote
        $err = false;
        $en['vote'] = (int)$en['vote'];
        if ($en['vote'] < 1 || $en['vote'] > 10) $err = true;
        if ($en['id'] == $en['voter']) $err = true;

//voted by member?
        if ($_SESSION['user'] != '') {
                include 'includes/verify_session.php';
                }

//not in array - do vote
        if (!in_array($en['id'], $voted) && !$err) {
        //check if vote is not in database
                $vt = sql_query("SELECT * FROM $ratetable WHERE (r_ip='$en[ip]'".($en['m_id'] != '' ? " OR r_by='$en[m_id]' " : '').") AND r_for='$en[id]' AND r_image='$en[image]' AND r_time>".(time() - vote_hours*3600));
                if (sql_num_rows($vt) == 0) {
				if ($en['is_video'] == "img") 
				{
	                        sql_query("UPDATE $picstable SET i_ratingcnt=i_ratingcnt+1, i_ratingsum=i_ratingsum+$en[vote] WHERE i_user='$en[id]' AND i_status>0 AND i_id='$en[image]'");
					//echo("UPDATE $picstable SET i_ratingcnt=i_ratingcnt+1, i_ratingsum=i_ratingsum+$en[vote] WHERE i_user='$en[id]' AND i_status>0 AND i_id='$en[image]'");
				}
				else
				{
	                        sql_query("UPDATE $picstable SET i_ratingcnt=i_ratingcnt+1, i_ratingsum=i_ratingsum+$en[vote] WHERE i_user='$en[id]' AND i_video_status>0 AND i_id='$en[image]'");
					//echo("UPDATE $picstable SET i_ratingcnt=i_ratingcnt+1, i_ratingsum=i_ratingsum+$en[vote] WHERE i_user='$en[id]' AND i_video_status>0 AND i_id='$en[image]'");
				}

				
                        if (sql_affected_rows($res) > 0) {
                                sql_query("UPDATE $membtable SET m_ratingcnt=m_ratingcnt+1, m_ratingsum=m_ratingsum+$en[vote] WHERE m_id=$en[id] AND m_rateme=1");
                              
					if ($en['is_video'] == "img")
  						 sql_query("UPDATE $picstable SET i_rating=i_ratingsum/i_ratingcnt WHERE i_user=$en[id] AND i_status>0 AND i_id='$en[image]'");
					else
  						 sql_query("UPDATE $picstable SET i_rating=i_ratingsum/i_ratingcnt WHERE i_user=$en[id] AND i_video_status>0 AND i_id='$en[image]'");

					 sql_query("UPDATE $membtable SET m_rating=m_ratingsum/m_ratingcnt WHERE m_id=$en[id] AND m_rateme=1");

                                //register vote in DB
                                sql_query("INSERT INTO $ratetable (r_for,r_image,r_by,r_rating,r_time,r_ip)
                                                           VALUES ($en[id],$en[image],".(int)$en['m_id'].", $en[vote],".time().",'$en[ip]')");
					  //echo("INSERT INTO $ratetable (r_for,r_image,r_by,r_rating,r_time,r_ip)
                                                           //VALUES ($en[id],$en[image],".(int)$en['m_id'].", $en[vote],".time().",'$en[ip]')");

                                }
                        }
                }


//register vote in cookie
   if ($en['act'] != 'comm') {
        if (!in_array($en['id'], $voted))
                $voted[] = (int)voting_type == 0 ? $en['id'] : $en['image'];

        $vcookie = base64_encode(serialize($voted));
        if (vote_cookie != 'No')
                setcookie($cookie,$vcookie,time()+(3600*24*365),constant('dir'));
        }

        $en[$cookie] = $voted;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit