PHP - Help With Voting System???

Hi,

I am trying to come up with the best way to create a range voting form.
Each candidate will have a "confidence" value associated with the choice.(using a pulldown menu?)
So for March Madness it would be:
Team .......
Confidence Value.....

each team could only be voted to finish the tournament in a particular place, and a value would be associated with that choice. The total choices possible determines the range of confidence value possible.
So....if there are 16 teams to vote on....the confidence value would range from 1-16. The voter would assign his highest available value to the team he was most confident in landing in that particular position.
Example: 16 teams - 16 conf vals -

if certain Duke will end up at #1 - then vote :
#1 = Duke, conf val 16

next, if almost as certain that NC will end up last - then vote:
#16 = NC, conf val 15

next most certain
"", conf val 14
and so on....

the tricky part is making sure that the form code validates each conf val so that it is used, but used on ly once....

ideally the form could return values that could then be imported into excel and comopared.


has this been done somewhere?
Can you help ?

hope so....

thanks!!

This is a node voting module I created and it has a slight problem that I cannot figure out.
It's supposed to be a simple 'Vote Up' or 'Vote Down' feature. You click 'Vote Up' and one appears in your vote tally. You click 'Vote Down' and your original vote tally is subtracted by one back down to zero.

When it goes back to zero, it gets stuck there. It stays on zero no matter if I choose 'Vote Up' or 'Vote Down' again.

There's something that's happening when I move my vote tally back down to zero. Maybe something isn't setup correctly with the $current_votes variable. I don't know.

I've been at this for hours. Here's the code:

<?php

function bonnier_vote_perm() {
  return array('vote on content');
}

function bonnier_vote_menu() {
  $items = array();
  $items['vote'] = array(
    'title' => 'vote',
    'page callback' => 'bonnier_vote_vote',
    'access arguments' => array('vote on content'),
    'type' => MENU_CALLBACK,
  );
  return $items;
}

function bonnier_vote_vote() {
  $nid = $_REQUEST['nid'];
  $value = $_REQUEST['votes'];
  
  $current_votes = db_result(db_query("SELECT votes FROM bonnier_vote WHERE nid = $nid"));
  
  if ($current_votes) {
    $new_votes = $current_votes + $value;
    db_query("UPDATE bonnier_vote SET votes = $new_votes WHERE nid = $nid");
  }
  else {
    db_query("INSERT INTO bonnier_vote (nid, votes) VALUES ($nid, $value)");
  }
  
  drupal_set_message('Your vote has been recorded');
  drupal_goto('node/'.$nid);
}

function bonnier_vote_nodeapi(&$node, $op, $teaser = null, $page = null) {
  if ($op == 'view' && !$teaser) {
    $votes = db_result(db_query("SELECT votes FROM bonnier_vote WHERE nid = {$node->nid}"));
    if (!$votes) {
      $votes = 0;
    }
    
    $widget  = '<div>';
    $widget .= l('Vote Up', 'vote', array('query' => array('nid' => $node->nid, 'votes' => 1)));
    $widget .= ' ';
    $widget .= l('Vote Down', 'vote', array('query' => array('nid' => $node->nid, 'value' => -1)));
    $widget .= ' ';
    $widget .= 'Sco  '. $votes;
    $widget .= '</div>';
    
    $node->content['vote_widget'] = array(
      '#value' => $widget,
      '#weight' => -10,
    );
  }
}

Any bit of advice would be much appreciated.

hello dear PHP-Fans - greetings to you - and a happy new year!!


i set up a WAMP-System on my openSuse 11.4 system.  In order to learn as much as i can bout PHP i want to do some tests and write some scripts.

Well the WAMP is allready up and running.  Now i try to give the writing access to the folder

mkdir /srv/www/

where the php-scripts should go in...

i want  to give write permission to all to all files in /srv/www

As root I generally:

mkdir /srv/www/
chown <webmaster usrername> /srv/www/

/srv/www/ should be readable and traversable by all, but only writeable by it's owner (the user designated as the webmaster.)

can i do this like mentioned above,...

Love to hear from you

greetings
db1

Hello,

Im trying to create a simple voting script for my site, i been trying different things but cannot get it too function properly. The idea is you click the 'thumbs up' image to add 1 to the 'likes' value and thumbs down to add '1' to the dislikes. Sound simple but its giving me headaches.

Would really appreciate it if someone could take a quick look at my script. The table is called 'youtube_rating' (because thats the look i was going for) and in the table is 4 columns, id (aut0_increment), liked (counts liked votes), disliked (counts dislikes) and item_num which is the id for teh product the rating is for.

Code: [Select]
<? if ( $row['rating'] == 'YES' ) {
require ("../rating/voting/dbcon.php");

$result1 = mysql_query("select * from youtube_rating WHERE item_num='".$page_id."'");
$row = mysql_fetch_array($result1);
$dislike = $row['dislike'];
$like = $row['liked'];

if (isset($_POST['submitted']))
{

require_once ("../database/functions.php");

$userip = $_SERVER['REMOTE_ADDR'];
$id = safe($_POST['id']);
$vote = '1';


// check if user already voted
$result = mysql_query("SELECT * FROM youtube_ip WHERE userip='$userip' AND item_num ='".$id."'");
$num = mysql_num_rows($result);

    // if already voted show error
if (isset($_POST['submitted']) && ($num > 0))
{
echo '<div class="alreadyvoted">You have already voted!</div>';

}

    // add like
if (isset($_POST['submitted']) && ($_POST['submitted'] == 'like') && ($num == 0))
{
// add 1 to value
$liked_value = mysql_query("SELECT liked FROM youtube_ip WHERE item_num ='".$id."'");
$liked_total = $liked_value + $vote;

$query = "update youtube_rating set liked = '".$liked_total."' where item_num ='".$id."'";
echo '<div class="ilikethis">You like this!</div>';
      }

    // add dislike
if (isset($_POST['submitted']) && ($_POST['submitted'] == 'dislike') && ($num == 0)) 
{
// add 1 to value
$dislike_value = mysql_query("SELECT dislike FROM youtube_ip WHERE item_num ='".$id."'");
$dislike_total = $dislike_value + $vote;

$query = "update youtube_rating set dislike = '".$dislike_total."' where item_num ='".$id."'";
echo '<div class="idislikethis">You Dislike this!</div>';
}

// log ip
// if (isset($_POST['submitted']) && ($num == 0)) 
// {
// mysql_query ("insert into youtube_ip (userip, item_num) values ('".$userip."', '".$id."')");
// }
}
?>

<table width="50%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="48%" align="center">
    <form action="" method="post">
    <input name="id" type="hidden" value="<? echo $page_id ?>" />
    <input name="submitted" type="hidden" value="like" />
<button type="submit" class="like_button" name="like" id="like" >
<img src="../rating/voting/pixel-vfl73.gif" alt="">
<span><?php echo $like?></span>
    </button>
</form>
    </td>
    <td width="52%">
    <form action="" method="post">
    <input name="id" type="hidden" value="<? echo $page_id ?>" />
    <input name="submitted" type="hidden" value="dislike" />
<button type="submit" class="dislike_button" name="dislike" id="dislike" >
<img src="../rating/voting/pixel-vfl73.gif" alt="">
    <span><? echo $dislike?></span>
</button>
</form>
    </td>
  </tr>
</table>

<?
}
?>
The problem is the vote does not add up or update the database, also it doesn't seem to be checking if the user has voted or not, it just attempts (but fails) to add a vote no matter what

Thanks for any help.

I made a website for school where everyone can upload their summaries, download them and rate them (thumbs up, thumbs down).
You upload a summary with some data: a specific class, subject, name etc.
The path to the file, the name, subject etc. comes in a mysql table and the summaries show in a list on the site. 

Now here comes the problem, when you vote a summary up you go to the page up.php like this:

Code: [Select]
<!--Directing to up.php-->
--some mysql--
while ( $summary = mysql_fetch_assoc($result) ) {
echo "<a href=\"up.php?id=".$summary['id']."&page=".$summary['class'].$summary['period']."\">";
}

On the page up.php I have the following code which adds +1 in the thumbsup row in myqsl:

Code: [Select]
<!-- thumbsup +1 -->
--some mysql--
$sql2 = "UPDATE locatie SET thumbsup = thumbsup + '1' WHERE id='".strval($_GET['id'])."'";
$uitvoeren2 = mysql_query($sql2);

and sends you back to the previous page
Code: [Select]
header("Location: ".$_GET['page'].".php");
Google crawls all my pages, and also the page Code: [Select]
up.php?id=1&page=class1periode3, which changes my mysql.
Leading to that all of the summaries are being voted on by google, which is every annoying.

This probably isn't the best voting script but I'm fairly new to php and thought this up on my own, so I was wondering if I could get it working properly 

Thanks in advance

So I have made an anonymous poll system but I would like to limit the possibility to vote only once from a single pc.

I think that I could store and check 3 things regarding a user that has voted:
1) $_SERVER['HTTP_CLIENT_IP']."!".$_SERVER['HTTP_X_FORWARDED_FOR']."!".$_SERVER['REMOTE_ADDR'];
2) HTTP cookie
3) Flash cookie LSO (because this contrary to the HTTP cookei can be detected in multiple browsers( (only if Flash is installed)))

But there can be a simple situation - a simple user votes one time from Firefox and after a time his IP changes (for example he uses some Mobile internet where dynamic addressing is used) . Then for some reason he wants to use Internet Explorer where Flash is not installed. In result - it is possible to vote twice.

Can anyone please suggest something regarding this?

I know there is not 100% bulletproof solution - I just want to minimise the possibility to vote more than once.

Also I am thinking about using EverCookie(undeletable cookie) but that could cause a lot of other problems.

Hi there, im hoping someone can help me with this. What i’m trying to do is prevent users from voting twice with cookies, ive tried to set several myself but none of them have worked. Any help would be amazing. Thanks.

EDIT: unsure why its formatted this way.  how to fix? 

 

<?php include 'functions.php'; // Connect to MySQL $pdo = pdo_connect_mysql(); // If the GET request "id" exists (poll id)... if (isset($_GET['id'])) { // MySQL query that selects the poll records by the GET request "id" $stmt = $pdo->prepare('SELECT * FROM polls WHERE id = ?'); $stmt->execute([$_GET['id']]); // Fetch the record $poll = $stmt->fetch(PDO::FETCH_ASSOC); // Check if the poll record exists with the id specified if ($poll) { // MySQL query that selects all the poll answers $stmt = $pdo->prepare('SELECT * FROM poll_answers WHERE poll_id = ?'); $stmt->execute([$_GET['id']]); // Fetch all the poll anwsers $poll_answers = $stmt->fetchAll(PDO::FETCH_ASSOC); // If the user clicked the "Vote" button... if (isset($_POST['poll_answer'])) { // Update and increase the vote for the answer the user voted for $stmt = $pdo->prepare('UPDATE poll_answers SET votes = votes +1 WHERE id = ?'); $stmt->execute([$_POST['poll_answer']]); // Redirect user to the result page header ('Location: result.php?id=' . $_GET['id']); exit; } } else { die ('Poll with that ID does not exist.'); } } else { die ('No poll ID specified.'); } ?> <?=template_header('Poll Vote')?> <div class="content poll-vote"> <h2><?=$poll['title']?></h2> <p><?=$poll['des']?></p> <form action="vote.php?id=<?=$_GET['id']?>" onSubmit="disable()" method="post"> <?php for ($i = 0; $i < count($poll_answers); $i++): ?> <label> <input type="radio" name="poll_answer" value="<?=$poll_answers[$i]['id']?>"<?=$i == 0 ? ' checked' : ''?>> <?=$poll_answers[$i]['title']?> </label> <?php endfor; ?> <div> <input type="submit" name="submit" value="Vote"> <a href="result.php?id=<?=$poll['id']?>">View Result</a> </div> </form> </div> <?=template_footer()?>

 

Edited July 1, 2020 by requinix
cleaning up post

Hello everyone.
I recently coded a Minecraft Voting for Diamonds script. Basically, you enter your username, you vote on the sites, then click "Get Reward". The reward then goes through a RCON script, and rewards the user with their diamonds in-game. the full script works fine, and I am happy with it, but there is one small problem; and that is users being able to abuse the system. If they wanted to, they could just refresh the page, and click Get Rewarded again, and again. I want to make something like this:



It has a countdown on the link, which is started upon click, and then the link re-activates when the timer is done. My script already has "disabled=..." tags, so you have to click all links, this way would make sure a user cannot click the link until the timer is done. I'm pretty new to PHP, and please forgive me if it is not 100% PHP, but this place seemed extremely helpful. I am also pretty new to PHP, so make it for dummies xD

Thanks everyone!

i am trying to add a like system to my forum similar to facebook where it shows how many people like a post.

this is my code so far:

$like_list = "";
            
            $likes = explode("|", $post_info['post_likes']);
            $amount_likes = count($likes);
            $ac_likes = ($amount_likes / 2);
            $slice = array_slice($likes, 0, 4, true);
            $remain = array_slice($likes, 4, $ac_likes, true);
            $remain_num = count($remain);
            
            if ($ac_likes >= 4)
            {
                for($i=0; $i<$ac_likes; $i+=2)
                {
                    $like_list .= $likes[$i].", ";
                }
                $like_list .= " and $remain_num others like this";
            }
            elseif ($amount_likes == 1    )
            {
                $like_list .= "0 people like this";
            }
            elseif ($ac_likes == 1)
            {
                $like_list = implode(", ", $likes);
                $like_list .= " likes this";
            }
            else
            {
                $like_list = implode(", ", $likes);
                $like_list .= " like this";
            }

$post_info['post_likes'] contains data like:

Code: [Select]
user1|123456789|user2|123456789
where the number is the timestamp.

unfortunatly $like_list prints the username and the timestamp when i would like it to only display the username. This means
printing every 2nd element in the array starting from 0. I have seen this done with for loops but i am not using one therefore i am stuck. Any ideas? and is this the best database setup for likes? the post_likes column is added on to the end of the post table.

  Hi this is my login script i do have the html if you need to see it please ask & i was wondering if anyone would be kind enough to tell me how i can get my ban system to work Thanks

<?php

require 'connect.php';

if(isset($_POST['submit'])) {

	$username = $_POST['username'];
	$password = $_POST['password'];

	//Prevent hackers from using SQL Injection
	$username = stripslashes($username);
	$password = stripslashes($password);
	$username = mysql_real_escape_string($username);
	$password = mysql_real_escape_string($password);

	$sql = "SELECT * FROM $tbl_name WHERE username='$username' AND password='$password'";
	$result = mysql_query($sql);
	$count = mysql_num_rows($result);

	$user_level = $_GET['user_level'];

	$_SESSION['user_level'] = $user_level;

	if($count == 1) {

		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
	} else {

		echo "Please check the username and password you entered is correct.";
	} if($_SESSION['user_level'] == 0) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
		
	} else if($_SESSION['user_level'] == -1) {

		die();
		header("Location: banned.php");

	} else if($_SESSION['user_level'] < -1) {
		die();
		echo "An error has occurred please contact your administrator.";

	} else if($_SESSION['user_level'] == 1) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: admin.php");

	}


}

?>

Edited by Tom8001, 23 November 2014 - 12:18 PM.

Hi all

I have been looking though loads of tutorials regarding log in method for websites (not APIs), and cant help find that they are outdated.

So I am asking what is the correct way to create a log in system using php?

Modern websites use JavaScript for asynchronous web requests so this requirement should also be catered for. APIs and mobile apps use access tokens which is very secure if implemented correctly.

Can we use the token principle for websites? As the way I see it that most php log in systems use php sessions and they create a session and save some data in this session when the user successfully authenticates, however the session id is held in a cookie so if the cookie is stolen then they have access to your account.

API access tokens are expired and refreshed periodically so is there such a implementation method for web sites too?

Hi could you help me get this login page working? I made a form which posts to login.php the "user" and "pass".   Then this is my code for login.php:

<?php include("mysql_connect.inc.php"); ?>

<?php
$user = $_POST['user'];
$pass = $_POST['pass'];

session_start();
$query = mysqli_query("SELECT * FROM users WHERE username='$user'");
$results = mysqli_query($con, $query) or die(mysqli_error($con));
$resultsarray = mysql_fetch_array($userresults);

if (isset($_POST['user']) && $_POST['user'] == $query && isset($_POST['pass']) && $_POST['pass'] == $query) {
$_SESSION['username'] = $_POST['user'];
echo "<p>Login success. You are logged in as: " . $_SESSION['username'] . "</p>Return to mainpage, click <a href='index.php'>here</a>!";
} else {
echo "<p>Wrong username or password.</p>";

}
mysqli_close($con);
?>

Hello everyone!
I'm building a PHP manufacturing inventory system tied to ODBC.
The first two fields, two dropdowns, must be validated by scanning a QR code (QR#1:Material). And then, when the check with the first two fields will be true, with another QR scanning (QR#2:Machine) the operator will start a time tracking of his job.
The timestamp will be stored into database.

In your opinion, is it possible to create a similar application? And if so, what do you recommend?
Thanks for the help!!!

I've created a template system.

I've got a function to assign a page (the templates are in /template/skin).
It all works fine in the main root, but if I had a directory it won't work.

$dir = "template/skin";
That is found in template/

I need to be able to assign the template even in directories.

Hello,

I have the following code


Code: [Select]
class Uploads extends Controller
{
 public function __construct()
 {
  parent::__construct();

  if (empty($_FILES))
  {
   log_message('error', 'Uploads - files empty');
   exit('No files uploaded');
  }

  ini_set('memory_limit', '128M');

  $this->load->helper('file');
  $this->load->helper('helpers');
  $this->load->model('uploads_model');

 }

 public function font_handler()
 {
  $this->uploads_model->font_handler();
 }

}

class Uploads_model extends Model
{
    public function font_handler()
    {
  $config = array(
   'max_size'     => '8388',
   'allowed_types' => 'ttf',
   'upload_path'   => 'assets/fonts/'
  );

  $this->load->library('upload', $config);

  if ($this->upload->do_upload('Filedata'))
  {
   $file = $this->upload->data();
   $jsFile = $file['raw_name'].'.js';
   $query = $this->db->where('location', 'menuFont')->get('fonts')->row();

   if ($query->customFile != '' && file_exists('assets/fonts/'.$query->customFile))
         {
    unlink('assets/fonts/'.$query->customFile);
   }

   $path    = getcwd() . '/assets/fonts/cufon/convert.php';
   $command = 'php ' . $path . ' -u "U+??" ' . $file['full_path'] . ' 1> ' . getcwd() . '/assets/fonts/' . $jsFile;

   system($command);
  }
 }

}


Ok so, the ttf file is uploaded correctly and I can run $command from the command promt in putty and it works perfect, but when I try to run the same command from system() the js file just contains (from the controller) "No files uploaded" I have no idea why this is happening? Anyone have any ideas?  Also one thing i'm not sure about is if it should be 1> or > when creating the js file?!?


Thanks guys!