diff options
Diffstat (limited to 'dash/headless.php')
| -rw-r--r-- | dash/headless.php | 31 |
1 files changed, 24 insertions, 7 deletions
diff --git a/dash/headless.php b/dash/headless.php index ca090aa..d85a66a 100644 --- a/dash/headless.php +++ b/dash/headless.php @@ -1,13 +1,30 @@ <?php -$clicks = 0; -if (!empty($_GET['clicks'])) $clicks = max(0, intval($_GET['clicks'])); require('dash_common.php'); $db = new bdb(); -$result = $db->query('SELECT ads.*, categories.cat_name, SUM(ratings.stars) / COUNT(ratings.stars) AS rating FROM ads LEFT JOIN categories ON ads.cat = categories.id LEFT JOIN ratings ON ads.uid = ratings.rated GROUP BY ads.id LIMIT '.($clicks+$b_config['ads_per_page']).', 1') or die(); -if ($result->num_rows) { - $row = $result->fetch_assoc(); - draw_ad($row); + +if (isset($_GET['clicks'])) { + $clicks = max(0, intval($_GET['clicks'])); + $result = $db->query('SELECT ads.*, categories.cat_name, SUM(ratings.stars) / COUNT(ratings.stars) AS rating FROM ads LEFT JOIN categories ON ads.cat = categories.id LEFT JOIN ratings ON ads.uid = ratings.rated GROUP BY ads.id LIMIT '.($clicks+$b_config['ads_per_page']).', 1') or die(); + if ($result->num_rows) { + $row = $result->fetch_assoc(); + draw_ad($row); + } + $result->free(); +} else if (isset($_GET['del'])) { + $result = $db->query('SELECT ads.uid FROM responses INNER JOIN ads ON ads.id = responses.adid WHERE responses.id = '.intval($_GET['del']).' LIMIT 1') or die('ERR'); + if ($result->num_rows < 1 || $result->fetch_assoc()['uid'] != $b_user['id']) die('PERM'); + $result->free(); + $db->query('DELETE FROM responses WHERE id = '.intval($_GET['del'])) or die('ERR'); + if ($db->affected_rows < 1) die('NOK'); + die('OK'); +} else if (isset($_GET['hire'])) { + $result = $db->query('SELECT ads.uid FROM responses INNER JOIN ads ON ads.id = responses.adid WHERE responses.id = '.intval($_GET['hire']).' LIMIT 1') or die('ERR'); + if ($result->num_rows < 1 || $result->fetch_assoc()['uid'] != $b_user['id']) die('PERM'); + $result->free(); + $db->query('UPDATE responses, ads SET responses.matched = 1, ads.closed = 1 WHERE ads.id = responses.adid AND responses.id = '.intval($_GET['hire'])) or die('ERR'); + if ($db->affected_rows < 1) die('NOK'); + hire_trigger(intval($_GET['hire']); + die('OK'); } -$result->free(); $db->close(); ?> |