93 lines
2.5 KiB
PHP
93 lines
2.5 KiB
PHP
<?php
|
|
/**
|
|
*
|
|
* This file is part of HESK - PHP Help Desk Software.
|
|
*
|
|
* (c) Copyright Klemen Stirn. All rights reserved.
|
|
* https://www.hesk.com
|
|
*
|
|
* For the full copyright and license agreement information visit
|
|
* https://www.hesk.com/eula.php
|
|
*
|
|
*/
|
|
|
|
define('IN_SCRIPT',1);
|
|
define('HESK_PATH','./');
|
|
|
|
// Get all the required files and functions
|
|
require(HESK_PATH . 'hesk_settings.inc.php');
|
|
require(HESK_PATH . 'inc/common.inc.php');
|
|
hesk_load_database_functions();
|
|
|
|
// Is rating enabled?
|
|
if ( ! $hesk_settings['rating'])
|
|
{
|
|
die($hesklang['rdis']);
|
|
}
|
|
|
|
// Rating value
|
|
$rating = intval( hesk_GET('rating', 0) );
|
|
|
|
// Rating can only be 1 or 5
|
|
if ($rating != 1 && $rating != 5)
|
|
{
|
|
die($hesklang['attempt']);
|
|
}
|
|
|
|
// Reply ID
|
|
$reply_id = intval( hesk_GET('id', 0) ) or die($hesklang['attempt']);
|
|
|
|
// Ticket tracking ID
|
|
$trackingID = hesk_cleanID() or die($hesklang['attempt']);
|
|
|
|
// Connect to database
|
|
hesk_dbConnect();
|
|
|
|
// Get reply info to verify tickets match
|
|
$result = hesk_dbQuery("SELECT `replyto`,`rating`,`staffid` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."replies` WHERE `id`='{$reply_id}' LIMIT 1");
|
|
$reply = hesk_dbFetchAssoc($result);
|
|
|
|
// Does the ticket ID match the one in the request?
|
|
$result = hesk_dbQuery("SELECT `trackid` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` WHERE `id`='{$reply['replyto']}' LIMIT 1");
|
|
// -> Ticket found?
|
|
if (hesk_dbNumRows($result) != 1)
|
|
{
|
|
die($hesklang['attempt']);
|
|
}
|
|
// -> Does the tracking ID match?
|
|
$ticket = hesk_dbFetchAssoc($result);
|
|
if ($ticket['trackid'] != $trackingID)
|
|
{
|
|
die($hesklang['attempt']);
|
|
}
|
|
|
|
// OK, tracking ID matches. Now check if this reply has already been rated
|
|
if ( ! empty($reply['rating']))
|
|
{
|
|
die($hesklang['ar']);
|
|
}
|
|
|
|
// Update reply rating
|
|
hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."replies` SET `rating`='{$rating}' WHERE `id`='{$reply_id}'");
|
|
|
|
// Also update staff rating
|
|
hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."users` SET `rating`=((`rating`*(`ratingpos`+`ratingneg`))+{$rating})/(`ratingpos`+`ratingneg`+1), " .
|
|
($rating == 5 ? '`ratingpos`=`ratingpos`+1 ' : '`ratingneg`=`ratingneg`+1 ') .
|
|
"WHERE `id`='{$reply['staffid']}'");
|
|
|
|
header("Cache-Control: no-store, no-cache, must-revalidate");
|
|
header("Cache-Control: post-check=0, pre-check=0", false);
|
|
header("Pragma: no-cache");
|
|
|
|
header('Content-type: text/plain; charset=utf-8');
|
|
if ($rating == 5)
|
|
{
|
|
echo $hesklang['rh'];
|
|
}
|
|
else
|
|
{
|
|
echo $hesklang['rnh'];
|
|
}
|
|
exit();
|
|
?>
|