path: root/Zotlabs/Module/Prate.php

<?php
namespace Zotlabs\Module;


class Prate extends \Zotlabs\Web\Controller {

	function init() {
		if($_SERVER['REQUEST_METHOD'] === 'post')
			return;
	
		if(! local_channel())
			return;
	
		$channel = \App::get_channel();
	
		$target = argv(1);
		if(! $target)
			return;
	
		$r = q("select * from xlink where xlink_xchan = '%s' and xlink_link = '%s' and xlink_static = 1",
			dbesc($channel['channel_hash']),
			dbesc($target)
		);
		if($r)
			json_return_and_die(array('rating' => $r[0]['xlink_rating'],'rating_text' => $r[0]['xlink_rating_text']));
		killme();
	}
	
		function post() {
	
		if(! local_channel())
			return;
	
		$channel = \App::get_channel();
	
		$target = trim($_REQUEST['target']);
		if(! $target)
			return;
	
		if($target === $channel['channel_hash'])
			return;
	
		$rating = intval($_POST['rating']);
		if($rating < (-10))
			$rating = (-10);
		if($rating > 10)
			$rating = 10;
	
		$rating_text = trim(escape_tags($_REQUEST['rating_text']));
	
		$signed = $target . '.' . $rating . '.' . $rating_text;
	
		$sig = base64url_encode(rsa_sign($signed,$channel['channel_prvkey']));
	
	
		$z = q("select * from xlink where xlink_xchan = '%s' and xlink_link = '%s' and xlink_static = 1 limit 1",
			dbesc($channel['channel_hash']),
			dbesc($target)
		);
		if($z) {
			$record = $z[0]['xlink_id'];
			$w = q("update xlink set xlink_rating = '%d', xlink_rating_text = '%s', xlink_sig = '%s', xlink_updated = '%s'
				where xlink_id = %d",
				intval($rating),
				dbesc($rating_text),
				dbesc($sig),
				dbesc(datetime_convert()),
				intval($record)
			);
		}
		else {
			$w = q("insert into xlink ( xlink_xchan, xlink_link, xlink_rating, xlink_rating_text, xlink_sig, xlink_updated, xlink_static ) values ( '%s', '%s', %d, '%s', '%s', '%s', 1 ) ",
				dbesc($channel['channel_hash']),
				dbesc($target),
				intval($rating),
				dbesc($rating_text),
				dbesc($sig),
				dbesc(datetime_convert())
			);
			$z = q("select * from xlink where xlink_xchan = '%s' and xlink_link = '%s' and xlink_static = 1 limit 1",
				dbesc($channel['channel_hash']),
				dbesc($orig_record[0]['abook_xchan'])
			);
			if($z)
				$record = $z[0]['xlink_id'];
		}
		if($record) {
			proc_run('php','include/ratenotif.php','rating',$record);
		}
	
		json_return_and_die(array('result' => true));;
	}
				
	
	
	
	
	
	
	
	
	
	
	
}