wUNR16GR

1<?php
2	define("DATALIFEENGINE", true);
3	include("/engine/classes/mysql.php"); /*ПУТЬ ДО DLE ENGINE */
4	include("/engine/data/dbconfig.php");
5	
6	$username = $db->safesql($_POST['username']);
7	$secret = "КЛЮЧ";
8	
9	if(!preg_match("/^[a-zA-Z0-9_]+$/", $username)) die("Bad login");
10	if($_POST['signature'] != sha1($username.$_POST['timestamp'].$secret)) die("hash mismatch");
11	$select = $db->super_query("SELECT * FROM dle_users WHERE name='$username'");
12	if($select['name']) {
13		$check = $db->query("SELECT * FROM vote_table WHERE name='{$select['name']}' AND `from`='topcraft' AND date_text='".date("d.m.Y")."'");
14		if(!$db->num_rows($check)) {
15			$db->query("INSERT INTO `vote_table` (`id`, `name`, `timestamp`, `date_text`, `from`) VALUES (NULL, '{$select['name']}', '".time()."', '".date("d.m.Y")."', 'topcraft')");
16			$db->query("UPDATE dle_users SET cases=cases+1 WHERE name='{$select['name']}'");
17			die("Success voting with cash");
18		}
19		else die("Success voting without cash");
20	}
21	else die("user not found");
22	/* ALTER TABLE `dle_users` ADD COLUMN `cases` bigint(20) DEFAULT '0';
23	CREATE TABLE IF NOT EXISTS `vote_table` (
24	  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
25	  `name` varchar(255) DEFAULT NULL,
26	  `timestamp` bigint(11) DEFAULT NULL,
27	  `date_text` varchar(12) DEFAULT NULL,
28	  `from` varchar(15) DEFAULT NULL,
29	  PRIMARY KEY (`id`)
30	) ENGINE=InnoDB  DEFAULT CHARSET=utf8 AUTO_INCREMENT=30 ; */