ElkArte\Controller\Poll::action_editpoll2()

Complexity

Conditions	51
Paths	> 20000

Size

Total Lines	226
Code Lines	94

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	2652

Importance

Changes

0

<?php
	public function action_editpoll2()
	{
		global $topic, $board;

		// Sneaking off, are we?
		if (empty($this->_req->post))
		{
			redirectexit('action=editpoll;topic=' . $topic . '.0');
		}

		$poll_errors = ErrorContext::context('poll');

		if (checkSession('post', '', false) !== '')
		{
			$poll_errors->addError('session_timeout');
		}

		// HACKERS (!!) can't edit :P.
		if (empty($topic))
		{
			throw new Exception('no_access', false);
		}

		// Is this a new poll, or editing an existing?
		$isEdit = isset($this->_req->post->add) ? 0 : 1;

		// Make sure we have our stuff.
		require_once(SUBSDIR . '/Poll.subs.php');

		// Get the starter and the poll's ID - if it's an edit.
		$bcinfo = getPollStarter($topic);
		// Check their adding/editing is valid.
		if (!$isEdit && !empty($bcinfo['id_poll']))
		{
			throw new Exception('poll_already_exists');
		}

		// Are we editing a poll which doesn't exist?
		if ($isEdit && empty($bcinfo['id_poll']))
		{
			throw new Exception('poll_not_found');
		}

		// Check if they have the power to add or edit the poll.
		if ($isEdit && !allowedTo('poll_edit_any'))
		{
			isAllowedTo('poll_edit_' . ($this->user->id == $bcinfo['id_member_started'] || ($bcinfo['poll_starter'] != 0 && $this->user->id == $bcinfo['poll_starter']) ? 'own' : 'any'));
		}
		elseif (!$isEdit && !allowedTo('poll_add_any'))
		{
			isAllowedTo('poll_add_' . ($this->user->id == $bcinfo['id_member_started'] ? 'own' : 'any'));
		}

		$optionCount = 0;
		$idCount = 0;

		// Ensure the user is leaving a valid amount of options - there must be at least two.
		foreach ($this->_req->post->options as $k => $option)
		{
			if (trim($option) !== '')
			{
				$optionCount++;
				$idCount = max($idCount, $k);
			}
		}

		if ($optionCount < 2)
		{
			$poll_errors->addError('poll_few');
		}
		elseif ($optionCount > 256 || $idCount > 255)
		{
			$poll_errors->addError('poll_many');
		}

		// Also - ensure they are not removing the question.
		if ($this->_req->getPost('question', 'trim') === '')
		{
			$poll_errors->addError('no_question');
		}

		// Got any errors to report?
		if ($poll_errors->hasErrors())
		{
			$this->action_editpoll();
		}

		// Prevent double submission of this form.
		checkSubmitOnce('check');

		// Now we've done all our error checking, let's get the core poll information cleaned... question first.
		$question = Util::htmlspecialchars($this->_req->getPost('question', 'trim'));
		$question = Util::substr($question, 0, 255);

		$poll_hide = $this->_req->getPost('poll_hide', 'intval', 0);
		$poll_expire = $this->_req->getPost('poll_expire', 'intval', 0);
		$poll_change_vote = isset($this->_req->post->poll_change_vote) ? 1 : 0;
		$poll_guest_vote = isset($this->_req->post->poll_guest_vote) ? 1 : 0;
		$poll_max_votes = 0;

		// Make sure guests are actually allowed to vote generally.
		if ($poll_guest_vote !== 0)
		{
			require_once(SUBSDIR . '/Members.subs.php');
			$allowedGroups = groupsAllowedTo('poll_vote', $board);
			if (!in_array(-1, $allowedGroups['allowed']))
			{
				$poll_guest_vote = 0;
			}
		}

		// Ensure that the number options allowed makes sense, and the expiration date is valid.
		if (!$isEdit || allowedTo('moderate_board'))
		{
			$poll_expire = $poll_expire > 9999 ? 9999 : ($poll_expire < 0 ? 0 : $poll_expire);

			if (empty($poll_expire) && $poll_hide == 2)
			{
				$poll_hide = 1;
			}
			elseif (!$isEdit || $poll_expire != ceil($bcinfo['expire_time'] <= time() ? -1 : ($bcinfo['expire_time'] - time()) / (3600 * 24)))
			{
				$poll_expire = empty($poll_expire) ? 0 : time() + $_POST['poll_expire'] * 3600 * 24;
			}
			else
			{
				$poll_expire = $bcinfo['expire_time'];
			}

			if (empty($this->_req->post->poll_max_votes) || $this->_req->post->poll_max_votes <= 0)
			{
				$poll_max_votes = 1;
			}
			else
			{
				$poll_max_votes = $this->_req->getPost('poll_max_votes', 'intval', 0);
			}
		}

		// If we're editing, let's commit the changes.
		if ($isEdit !== 0)
		{
			modifyPoll($bcinfo['id_poll'], $question,
				empty($poll_max_votes) ? 0 : $poll_max_votes,
				$poll_hide,
				empty($poll_expire) ? 0 : $poll_expire,
				$poll_change_vote, $poll_guest_vote
			);
		}
		// Otherwise, let's get our poll going!
		else
		{
			// Create the poll.
			$bcinfo['id_poll'] = createPoll($question, $this->user->id, $this->user->username,
				$poll_max_votes, $poll_hide, $poll_expire,
				$poll_change_vote, $poll_guest_vote
			);

			// Link the poll to the topic.
			associatedPoll($topic, $bcinfo['id_poll']);
		}

		// Get all the choices.  (no better way to remove all emptied and add previously non-existent ones.)
		$choices = array_keys(pollOptions($bcinfo['id_poll']));

		$add_options = array();
		$update_options = array();
		$delete_options = array();
		foreach ($this->_req->post->options as $k => $option)
		{
			// Make sure the key is numeric for sanity's sake.
			$k = (int) $k;

			// They've cleared the box.  Either they want it deleted, or it never existed.
			if (trim($option) === '')
			{
				// They want it deleted.  Bye.
				if (in_array($k, $choices))
				{
					$delete_options[] = $k;
				}

				// Skip the rest...
				continue;
			}

			// Dress the option up for its big date with the database.
			$option = Util::htmlspecialchars($option);

			// If it's already there, update it.  If it's not... add it.
			if (in_array($k, $choices))
			{
				$update_options[] = array($bcinfo['id_poll'], $k, $option);
			}
			else
			{
				$add_options[] = array($bcinfo['id_poll'], $k, $option, 0);
			}
		}

		if (!empty($update_options))
		{
			modifyPollOption($update_options);
		}

		if (!empty($add_options))
		{
			insertPollOptions($add_options);
		}

		// I'm sorry, but... well, no one was choosing you. Poor options, I'll put you out of your misery.
		if (!empty($delete_options))
		{
			deletePollOptions($bcinfo['id_poll'], $delete_options);
		}

		// Shall I reset the vote count, sir?
		if (isset($this->_req->post->resetVoteCount))
		{
			resetVotes($bcinfo['id_poll']);
		}

		call_integration_hook('integrate_poll_add_edit', array($bcinfo['id_poll'], $isEdit));

		// Off we go.
		redirectexit('topic=' . $topic . '.' . $this->_req->post->start);
	}