Home"; $getQuotes = mysql_query("SELECT * FROM quotes ORDER BY id DESC LIMIT 10") or die(mysql_error()); while($quotes = mysql_fetch_array($getQuotes)) { echo "
\n";
echo htmlspecialchars($quotes['content'])."\n";
echo "\n";
echo "";
echo "#{$quotes['id']} | {$quotes['date']} | + [5] - | POC";
echo "";
}
}
elseif(isset($_GET['add']))
{
echo "\n";
echo htmlspecialchars($quotes['content'])."\n";
echo "\n";
echo "";
echo "#{$quotes['id']} | {$quotes['date']} | + [5] - | POC";
echo "";
}
}
elseif(isset($_GET['random']))
{
echo "\n";
echo htmlspecialchars($quotes['content'])."\n";
echo "\n";
echo "";
echo "#{$quotes['id']} | {$quotes['date']} | + [5] - | POC";
echo "";
}
}
elseif(isset($_GET['vote']))
{
function castVote($quote_id, $vote) {
$ip_address = $_SERVER['REMOTE_ADDR'];
$result = mysql_query("SELECT `id` FROM `ratings` WHERE quote_id = $quote_id AND `ip_address` = '$ip_address'");
if ($result) {
echo 'Sorry, you\'ve already voted';
return;
}
$result = mysql_query("SELECT `id` FROM `ratings` WHERE quote_id = $quote_id");
if ($result) {
if ($vote == 'up') {
mysql_query("UPDATE `ratings` SET `current_rating` = `current_rating` + 1 WHERE quote_id = $quote_id");
} else {
mysql_query("UPDATE `ratings` SET `current_rating` = `current_rating` - 1 WHERE quote_id = $quote_id");
}
} else {
mysql_query("INSERT INTO `ratings` VALUES(null, $query_id, 5, '$ip_address')");
}
if(isset($_GET['id']))
{
castVote($_GET['id'], $_GET['vote']);
echo"\n";
echo htmlspecialchars($quotes['content'])."\n";
echo "\n";
echo "";
echo "#{$quotes['id']} | {$quotes['date']} | + [5] - | POC";
echo "";
}
}
include("./includes/footer.inc");
?>