problem.php

<?php
// The source code packaged with this file is Free Software, Copyright (C) 2005 by
// Ricardo Galli <gallir at uib dot es>.
// It's licensed under the AFFERO GENERAL PUBLIC LICENSE unless stated otherwise.
// You can get copies of the licenses here:
//        http://www.affero.org/oagpl.html
// AFFERO GENERAL PUBLIC LICENSE is also included in the file called "COPYING".

require_once __DIR__ . '/../config.php';
require_once mnminclude . 'ban.php';

header('Content-Type: application/json; charset=UTF-8');
array_push($globals['cache-control'], 'no-cache');
http_cache();

if (check_ban_proxy()) {
    error(_('IP no permitida'));
}

$id = intval($_REQUEST['id']);
$user_id = intval($_REQUEST['user']);

$value = round($_REQUEST['value']);

if ($value < -count($globals['negative_votes_values']) || $value > -1) {
    error(_('Voto incorrecto') . ' '.$value);
}

$link = Link::from_db($id, null, false);

if (!$link) {
    error(_('artículo inexistente'));
}

if (!$link->is_votable() || $link->total_votes == 0) {
    error(_('votos cerrados'));
}

if ($current_user->user_id != $user_id) {
    error(_('Usuario incorrecto, recargue la página para poder votar'));
}

if (!check_security_key($_REQUEST['key'])) {
    error(_('clave de control incorrecta'));
}

if (!$link->negatives_allowed(true)) {
    error(_('ya no se puede votar negativo'));
}

$votes_freq = $db->get_var("select count(*) from votes where vote_type='links' and vote_user_id=$current_user->user_id and vote_date > subtime(now(), '0:0:30')");

if ($current_user->user_id > 0 && $current_user->admin) {
    $freq = 5;
} else {
    $freq = 2;
}

if ($votes_freq > $freq && $current_user->user_karma > 4) {
    // Typical "negative votes" attack, decrease karma
    $user = new User($current_user->user_id);
    $user->add_karma(-1.0, _('Voto cowboy negativo'));

    error(_('¡tranquilo cowboy!, tu karma ha bajado: ') . $user->karma);
}

// Check the user is not a clon by cookie of others that voted the same link
if (($current_user->user_id > 0) && UserAuth::check_clon_votes($current_user->user_id, $link->id, 5, 'links') > 0) {
    error(_('no se puede votar con clones'));
}

if (!$link->insert_vote($value)) {
    error(_('ya se votó antes con el mismo usuario o IP'));
}

echo $link->json_votes_info(intval($value));

function error($message)
{
    die(json_encode(array('error' => $message)));
}