<td>Question 1 <?php echo rating_bar($donnees['id_chien'].'-1',$donnees['id_chien'],'1','10'); ?></td> 
<?php
if(isset($_SESSION['username']))
{
?>
<table width="100%">
<colgroup>
<col span="1" width="50%"/>
<col span="1" width="50%"/>
</colgroup>
<tr>
<td>Question 1 <?php echo rating_bar($donnees['id_chien'].'-1',$donnees['id_chien'],'1','10'); ?></td>
<td>Question 6 <?php echo rating_bar($donnees['id_chien'].'-6',$donnees['id_chien'],'6','10'); ?></td>
</tr>
<tr >
<td colspan="2"><hr /></td>
</tr>
<tr>
<td>Question 2 <?php echo rating_bar($donnees['id_chien'].'-2',$donnees['id_chien'],'2','10'); ?></td>
<td>Question 7 <?php echo rating_bar($donnees['id_chien'].'-7',$donnees['id_chien'],'7','10'); ?></td>
<tr>
<tr >
<td colspan="2"><hr /></td>
</tr>
</tr>
<td>Question 3 <?php echo rating_bar($donnees['id_chien'].'-3',$donnees['id_chien'],'3','10'); ?></td>
<td>Question 8 <?php echo rating_bar($donnees['id_chien'].'-8',$donnees['id_chien'],'8','10'); ?></td>
<tr>
<tr >
<td colspan="2"><hr /></td>
</tr>
<tr>
<td>Question 4 <?php echo rating_bar($donnees['id_chien'].'-4',$donnees['id_chien'],'4','10'); ?></td>
<td>Question 9 <?php echo rating_bar($donnees['id_chien'].'-9',$donnees['id_chien'],'9','10'); ?></td>
</tr>
<tr >
<td colspan="2"><hr /></td>
</tr>
<tr>
<td>Question 5 <?php echo rating_bar($donnees['id_chien'].'-5',$donnees['id_chien'],'5','10'); ?></td>
<td>Question 10 <?php echo rating_bar($donnees['id_chien'].'-10',$donnees['id_chien'],'10','10'); ?></td>
</tr>
</table>
<?php
}
else
{
?>
<br />
<center><font color="red">Le systeme de votes n'est ouvert qu'aux membres inscrits !
<br />
<a href="login.php">inscriptions gratuites</a></font></center>
<?php
}
?><?php
function rating_bar($id, $chien='', $question='', $units='', $static='') {
require('_config-rating.php');
$ip = $_SERVER['REMOTE_ADDR'];
if (!$units) {$units = 10;}
if (!$static) {$static = FALSE;}
// recherche d'informations sur les votes
$query=mysql_query("SELECT
total_votes,
total_value,
used_ips FROM $rating_dbname.$rating_tableName
WHERE id='$id' ")or die(" Error: ".mysql_error());
// insert si les champs n'existe pas
if (mysql_num_rows($query) == 0) {
$req1 = "INSERT INTO $rating_dbname.$rating_tableName (`id`,`id_chien`,`id_question`,`total_votes`, `total_value`, `used_ips`) VALUES ('$id','$chien','$question', '0', '0', '')";
$result = mysql_query($req1);
}
$numbers=mysql_fetch_assoc($query);
if ($numbers['total_votes'] < 1) {
$count = 0;
} else {
$count=$numbers['total_votes']; //combien de vote total
}
$current_rating=$numbers['total_value']; //le nombre total d'évaluer ajouté ensemble et conservé
$tense=($count==1) ? "vote" : "votes"; //votes/vote au pluriel
// déterminez si l'utilisateur a voté, donc nous savons comment tirer l'ul/li
$voted=mysql_num_rows(mysql_query("SELECT used_ips FROM $rating_dbname.$rating_tableName WHERE used_ips LIKE '%".$ip."%' AND id='".$id."' "));
// now draw the rating bar
$rating_width = @number_format($current_rating/$count,2)*$rating_unitwidth;
$rating1 = @number_format($current_rating/$count,1);
$rating2 = @number_format($current_rating/$count,2);
if ($static == 'static') {
$static_rater = array();
$static_rater[] .= "\n".'<div class="ratingblock">';
$static_rater[] .= '<div id="unit_long'.$id.'">';
$static_rater[] .= '<ul id="unit_ul'.$id.'" class="unit-rating" style="width:'.$rating_unitwidth*$units.'px;">';
$static_rater[] .= '<li class="current-rating" style="width:'.$rating_width.'px;">Currently '.$rating2.'/'.$units.'</li>';
$static_rater[] .= '</ul>';
$static_rater[] .= '<p class="static">'.$id.'. Vote: <strong> '.$rating1.'</strong>/'.$units.' ('.$count.' '.$tense.' cast) <em>This is \'static\'.</em></p>';
$static_rater[] .= '</div>';
$static_rater[] .= '</div>'."\n\n";
return join("\n", $static_rater);
} else {
$rater ='';
$rater.='<div class="ratingblock">';
$rater.='<div id="unit_long'.$id.'">';
$rater.=' <ul id="unit_ul'.$id.'" class="unit-rating" style="width:'.$rating_unitwidth*$units.'px;">';
$rater.=' <li class="current-rating" style="width:'.$rating_width.'px;">Currently '.$rating2.' /'.$units.'</li>';
for ($ncount = 1; $ncount <= $units; $ncount++) { // loop from 1 to the number of units
if(!$voted) { // if the user hasn't yet voted, draw the voting stars
$rater.='<li><a href="db.php?j='.$ncount.'&q='.$id.'&t='.$ip.'&c='.$units.'" title="'.$ncount.' out of '.$units.'" class="r'.$ncount.'-unit rater" rel="nofollow">'.$ncount.'</a></li>';
}
}
$ncount=0; // resets the count
$rater.=' </ul>';
$rater.=' <p';
if($voted){ $rater.=' class="voted"'; }
$rater.='>Moyenne: <strong><font color="#26c41a"></strong>'.$rating1.'</font>/'.$units.' ('.$count.' '.$tense.')';
$rater.=' </p>';
$rater.='</div>';
$rater.='</div>';
return $rater;
}
}
?>
)<?php
$req = "INSERT INTO $rating_dbname.$rating_tableName_2 (id_question, id_votant, id_chien, note, signup_date) VALUES (".$question.",
select id from tableUtilisateur where username='".mysql_real_escape_string($_SESSION['username'])."',
".$chien.",".$vote_sent.",".time().")";
?><?php
//Cette page permet d'initialiser le site en verifiant par exemple si le membre est connecté
session_start();
header('Content-type: text/html;charset=UTF-8');
if(!isset($_SESSION['username']) and isset($_COOKIE['username'], $_COOKIE['password']))
{
$cnn = mysql_query('select password,id from users where username="'.mysql_real_escape_string($_COOKIE['username']).'"');
$dn_cnn = mysql_fetch_array($cnn);
if(sha1($dn_cnn['password'])==$_COOKIE['password'] and mysql_num_rows($cnn)>0)
{
$_SESSION['username'] = $_COOKIE['username'];
$_SESSION['userid'] = $dn_cnn['id'];
}
}
?>désolé mais je ne comprend pas
Par contre dans le système d'origine cette donnée n'a pas vraiment d'utilité puisse que dans ce champs il y a un tableau "sérialisé" qui contient les ip utilisée, ceci afin d'éviter un spam sur les votes. pour simuler cela il te faudrais mettre le userid, c'est tout a fait réalisable il te suffit à la ligne $ip = $_SERVER['REMOTE_ADDR']; remplacer $_SERVER['REMOTE_ADDR'] par $_SESSION['userid']. ceci dans le 1er code fournis.
bon après je ne sais pas ce qu'il y a dans $ip_num = preg_replace("/[^0-9\.]/","",$_REQUEST['t']); donc au pire tu peux virer le test && ($ip == $ip_num) avant l'update et le remplacer par un test pour savoir si l'id du votant est déja dans le tableaux $checkIP (avec simplement isset)).
ce serait plus mieux
ça devrait aller ?
@+
<?php
header("Cache-Control: no-cache");
header("Pragma: nocache");
require('_config-rating.php');
//création des valeur
$vote_sent = preg_replace("/[^0-9]/","",$_REQUEST['j']);
$id_sent = preg_replace("/[^0-9a-zA-Z-]/","",$_REQUEST['q']);
$ip_num = preg_replace("/[^0-9\.]/","",$_REQUEST['t']);
$units = preg_replace("/[^0-9]/","",$_REQUEST['c']);
$ip = $_SESSION['userid'];
// suprimer le script parce que les utilisateurs normaux ne le verront jamais.
if ($vote_sent > $units) die("Désolé, le vote a l'air d'être sans fondement.");
//connexion
$query = mysql_query("SELECT id_question, id_chien, total_votes, total_value, used_ips FROM $rating_dbname.$rating_tableName WHERE id='$id_sent' ")or die(" Error: ".mysql_error());
$numbers = mysql_fetch_assoc($query);
$checkIP = unserialize($numbers['used_ips']);
$count = $numbers['total_votes']; //votes total
$current_rating = $numbers['total_value']; //valeur calculées
$sum = $vote_sent+$current_rating; // ajoure la nouvelle valeur
$tense = ($count==1) ? "vote" : "votes"; //plural form votes/vote
$question = $numbers['id_question'];
$chien = $numbers['id_chien'];
// contrôle pour voir si le premier vote a été compté
// ou augmentation du nombre actuel de votes
($sum==0 ? $added=0 : $added=$count+1);
// si c'est la table existe deja a déjà on ajoute les valeurs valeur
((is_array($checkIP)) ? array_push($checkIP,$ip_num) : $checkIP=array($ip_num));
$insertip=serialize($checkIP);
//recherche ip sur les votes
$voted=mysql_num_rows(mysql_query("SELECT used_ips FROM $rating_dbname.$rating_tableName WHERE used_ips LIKE '%".$ip."%' AND id='".$id_sent."' "));
if(!$voted) { //if the user hasn't yet voted, then vote normally...
if (($vote_sent >= 1 && $vote_sent <= $units) && ($ip == $ip_num)) { // verification adresse ip
$update = "UPDATE $rating_dbname.$rating_tableName SET total_votes='".$added."', total_value='".$sum."', used_ips='".$insertip."' WHERE id='$id_sent'";
$result = mysql_query($update);
$req = "INSERT INTO $rating_dbname.$rating_tableName_2 (id_question, id, id_chien, note, signup_date) VALUES (".$question.",'1',".$chien.",".$vote_sent.",".time().")";
$result = mysql_query($req);
}
}
// mise a jour de l'affichage des valeurs
$newtotals = mysql_query("SELECT total_votes, total_value, used_ips FROM $rating_dbname.$rating_tableName WHERE id='$id_sent' ")or die(" Error: ".mysql_error());
$numbers = mysql_fetch_assoc($newtotals);
$count = $numbers['total_votes'];//total des votes
$current_rating = $numbers['total_value'];//valeur calculées
$tense = ($count==1) ? "vote" : "votes";
// $new_back est ce qui est affiché sur la page après un vote de 'AJAX/Javascript' réussi
$new_back = array();
$new_back[] .= '<ul class="unit-rating" style="width:'.$units*$rating_unitwidth.'px;">';
$new_back[] .= '<li class="current-rating" style="width:'.@number_format($current_rating/$count,2)*$rating_unitwidth.'px;">Current rating.</li>';
$new_back[] .= '<li class="r1-unit">1</li>';
$new_back[] .= '<li class="r2-unit">2</li>';
$new_back[] .= '<li class="r3-unit">3</li>';
$new_back[] .= '<li class="r4-unit">4</li>';
$new_back[] .= '<li class="r5-unit">5</li>';
$new_back[] .= '<li class="r6-unit">6</li>';
$new_back[] .= '<li class="r7-unit">7</li>';
$new_back[] .= '<li class="r8-unit">8</li>';
$new_back[] .= '<li class="r9-unit">9</li>';
$new_back[] .= '<li class="r10-unit">10</li>';
$new_back[] .= '</ul>';
$new_back[] .= '<p class="voted">'.$id_sent.'. Moyenne: <strong><font color="red">'.@number_format($sum/$added,1).'</font></strong>/'.$units.' ('.$count.' '.$tense.') ';
$new_back[] .= '<span class="thanks"><strong>Merci !</strong</span></p>';
$allnewback = join("\n", $new_back);
// ========================
//name of the div id to be updated | the html that needs to be changed
$output = "unit_long$id_sent|$allnewback";
echo $output;
?><?php
$ip_num = preg_replace("/[^0-9\.]/","",$_REQUEST['t']);
$ip = $_SESSION['userid'];
//connexion
$query = mysql_query("SELECT id_question, id_chien, total_votes, total_value, used_ips FROM $rating_dbname.$rating_tableName WHERE id='$id_sent' ")or die(" Error: ".mysql_error());
$numbers = mysql_fetch_assoc($query);
$checkIP = unserialize($numbers['used_ips']);
// si c'est la table existe deja a déjà on ajoute les valeurs valeur
((is_array($checkIP)) ? array_push($checkIP,$ip_num) : $checkIP=array($ip_num));
$insertip=serialize($checkIP);
if (($vote_sent >= 1 && $vote_sent <= $units) && ($ip == $ip_num)) { /
?>
que veux tu dire, que moi je ne les utilise pas ou que le script ne les utilises pas ?
bon par contre je ne comprend pas c'est que ces ip ne soit pas utilisées ^^
@+