input['my_post_key']);
$lang->load("ratethread");
$tid = intval($mybb->input['tid']);
$query = $db->simple_select("threads", "*", "tid='{$tid}'");
$thread = $db->fetch_array($query);
if(!$thread['tid'])
{
error($lang->error_invalidthread);
}
$forumpermissions = forum_permissions($thread['fid']);
if($forumpermissions['canview'] == 0 || $forumpermissions['canratethreads'] == 0 || $mybb->usergroup['canratethreads'] == 0 || $mybb->settings['allowthreadratings'] == 0 || (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid']))
{
error_no_permission();
}
// Get forum info
$fid = $thread['fid'];
$forum = get_forum($fid);
if(!$forum)
{
error($lang->error_invalidforum);
}
// Get forum info
$forum = get_forum($fid);
if(!$forum)
{
error($lang->error_invalidforum);
}
else
{
// Is our forum closed?
if($forum['open'] == 0)
{
// Doesn't look like it is
error($lang->error_closedinvalidforum);
}
}
// Check if this forum is password protected and we have a valid password
check_forum_password($forum['fid']);
if($forum['allowtratings'] == 0)
{
error_no_permission();
}
$mybb->input['rating'] = intval($mybb->input['rating']);
if($mybb->input['rating'] < 1 || $mybb->input['rating'] > 5)
{
error($lang->error_invalidrating);
}
$plugins->run_hooks("ratethread_start");
if($mybb->user['uid'] != 0)
{
$whereclause = "uid='{$mybb->user['uid']}'";
}
else
{
$whereclause = "ipaddress='".$db->escape_string($session->ipaddress)."'";
}
$query = $db->simple_select("threadratings", "*", "{$whereclause} AND tid='{$tid}'");
$ratecheck = $db->fetch_array($query);
if($ratecheck['rid'] || $mybb->cookies['mybbratethread'][$tid])
{
error($lang->error_alreadyratedthread);
}
else
{
$plugins->run_hooks("ratethread_process");
$db->write_query("
UPDATE ".TABLE_PREFIX."threads
SET numratings=numratings+1, totalratings=totalratings+'{$mybb->input['rating']}'
WHERE tid='{$tid}'
");
if($mybb->user['uid'] != 0)
{
$insertarray = array(
'tid' => $tid,
'uid' => $mybb->user['uid'],
'rating' => $mybb->input['rating'],
'ipaddress' => $db->escape_string($session->ipaddress)
);
$db->insert_query("threadratings", $insertarray);
}
else
{
$insertarray = array(
'tid' => $tid,
'rating' => $mybb->input['rating'],
'ipaddress' => $db->escape_string($session->ipaddress)
);
$db->insert_query("threadratings", $insertarray);
$time = TIME_NOW;
my_setcookie("mybbratethread[{$tid}]", $mybb->input['rating']);
}
}
$plugins->run_hooks("ratethread_end");
if($mybb->input['ajax'])
{
echo "{$lang->rating_added}\n";
$query = $db->simple_select("threads", "totalratings, numratings", "tid='$tid'", array('limit' => 1));
$fetch = $db->fetch_array($query);
$width = 0;
if($fetch['numratings'] >= 0)
{
$averagerating = floatval(round($fetch['totalratings']/$fetch['numratings'], 2));
$width = intval(round($averagerating))*20;
$fetch['numratings'] = intval($fetch['numratings']);
$ratingvotesav = $lang->sprintf($lang->rating_votes_average, $fetch['numratings'], $averagerating);
echo "{$ratingvotesav}\n";
}
echo "{$width}";
exit;
}
redirect(get_thread_link($thread['tid']), $lang->redirect_threadrated);
?>