<?php
//Settings etc in this file:
INCLUDE('settings.php');

//Passwords etc in this file:
INCLUDE('user_settings.php');

//Connect to database:
$db_connection = mysql_connect($db_host, $db_user, $db_password);
if (!$db_connection) {die("Could not connect: ". mysql_error());}
mysql_select_db($db_database, $db_connection);


//Generate random strings
function randomString($length = 10) {
    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, strlen($characters) - 1)];
    }
    return $randomString;
}


//The images
$image = array();


//page head:
INCLUDE('head.php');


if ($category) {
  $sql = "SELECT * FROM `rating_images` JOIN rating_imagecategories ON rating_images.id=rating_imagecategories.image WHERE rating_images.live=1 AND rating_imagecategories.category=$category ORDER BY RAND() LIMIT 2";
  if (!$result1=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result1)){
    $image[]=$row;
  }
} else {
  $sql = "SELECT * FROM `rating_images` WHERE `score`>".$lowest_score." AND live=1 ORDER BY RAND() LIMIT 1";
  if (!$result1=mysql_query($sql,$db_connection)){echo "ERROR1";}
  if($row = mysql_fetch_array($result1)){
    $image[]=$row;
  }
  $sql = "SELECT * FROM `rating_images` WHERE `score`>".$lowest_score." AND ABS(`score` - ".$image[0]['score'].")<".$max_score_diff." AND live=1 ORDER BY RAND() LIMIT 1";
  if (!$result1=mysql_query($sql,$db_connection)){echo "ERROR2";}
  if($row = mysql_fetch_array($result1)){
    $image[]=$row;
  }
}

//Generate a random key for this vote
$key = randomString();

//Add this vote to the db
$sql = "INSERT INTO `rating_votes` (`key`, `image1`, `image2`) VALUES ('$key',".$image[0]['id'].",".$image[1]['id'].")";
if (!$result2=mysql_query($sql,$db_connection)){}


//Find out if this is a report
if ($_GET[report]){
  $old_key = mysql_real_escape_string(trim($_GET['key']));
  $report = trim($_GET['report']);
  
  //Find the images reported on
  $sql = "SELECT * FROM rating_votes WHERE `key`='$old_key'";
  if (!$result=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result)){
    $image1_id=$row['image1'];
    $image2_id=$row['image2'];
  }
  if ($report==1) {
    $sql = "INSERT INTO `rating_reports` (`image`, `reason`) VALUES ('$image1_id',1)";
    if (!$result2=mysql_query($sql,$db_connection)){
      if ($debug_mode) {die('Error: ' . mysql_error());}
    }
  }
  if ($report==2) {
    $sql = "INSERT INTO `rating_reports` (`image`, `reason`) VALUES ('$image2_id',1)";
    if (!$result2=mysql_query($sql,$db_connection)){
      if ($debug_mode) {die('Error: ' . mysql_error());}
    }
  }

  //remove this vote
  $sql = "DELETE FROM rating_votes WHERE `key`='$old_key' OR `time` < DATE_SUB(CURRENT_TIMESTAMP, INTERVAL 1 HOUR)";
  if (!mysql_query($sql,$db_connection)){}
}

//Find out if this is a vote
if ($_GET[vote]){
  $old_key = mysql_real_escape_string(trim($_GET['key']));
  $vote = trim($_GET['vote']);

  //Find the images voted on
  $sql = "SELECT * FROM rating_votes WHERE `key`='$old_key'";
  if (!$result=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result)){
    $image1_id=$row['image1'];
    $image2_id=$row['image2'];
  }
  //Find the scores of those images
  $sql = "SELECT * FROM rating_images WHERE `id`=$image1_id";
  if (!$result=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result)){
    $image1_score=$row['score'];
  }
  $sql = "SELECT * FROM rating_images WHERE `id`=$image2_id";
  if (!$result=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result)){
    $image2_score=$row['score'];
  }

  //Calculate expected scores:
  $image1_expectation = 1/(1+pow(10,$image2_score-$image1_score));
  $image2_expectation = 1 - $image1_expectation;

  //adjust scores
  if($vote == 1) {
    $image1_score += $kFactor*(1-$image1_expectation);
    $image2_score -= $kFactor*$image2_expectation;
    $sql = "UPDATE `rating_stats` SET `left`=`left`+1 WHERE `votes`=1";
    if (!$result=mysql_query($sql,$db_connection)){}
  }
  if($vote == 2) {
    $image2_score += $kFactor*(1-$image2_expectation);
    $image1_score -= $kFactor*$image1_expectation;
    $sql = "UPDATE `rating_stats` SET `right`=`right`+1 WHERE `votes`=1";
    if (!$result=mysql_query($sql,$db_connection)){}
  }

  //Update scores
  $sql = "UPDATE `rating_images` SET `score`=$image1_score WHERE `id`=$image1_id";
  if (!$result=mysql_query($sql,$db_connection)){}
  $sql = "UPDATE `rating_images` SET `score`=$image2_score WHERE `id`=$image2_id";
  if (!$result=mysql_query($sql,$db_connection)){}

  //remove this vote
  $sql = "DELETE FROM rating_votes WHERE `key`='$old_key' OR `time` < DATE_SUB(CURRENT_TIMESTAMP, INTERVAL 1 HOUR)";
  if (!mysql_query($sql,$db_connection)){}
}

?> 

<table bgcolor=#ddd>
<tr>
<th colspan=3>
Click on the photo you think is the best one.
</th>
</tr>
<tr>
<td align=center colspan=100%>
<table width=100%><tr><td bgcolor=#fff align=center>
<?php
echo '<a href="' . $thispage . ($category ? '?category='.$category.'&' : '?') . 'key=' . $key . '&vote=0">';
echo 'SKIP VOTE</a>' . "\n";
?>
</td></tr></table>
</td>
</tr>
<tr height=330px valign=top>
<?php $i=0; foreach ($image as $the_image) { $i++; ?>
<td>
<table><tr><td width=330px height=330px align=center bgcolor=#fff>
<?php
echo '<a href="' . $thispage . ($category ? '?category='.$category.'&' : '?') . 'key=' . $key . '&vote=' . $i . '">';
echo '<img src="' . $the_image['link'] . '"></a>' . "\n";
?>
</td></tr><tr><td width=100%>
<table><tr><td width=310px>
<b>Photo description:</b><br/>
<?php
echo '<a href="' . $the_image['description'] . '" target="_blank">' . $the_image['name'] . "</a>\n";
?>
<br />
<b>Categories:</b><br/>
<?php
  $id=$the_image['id'];
  $sql = "SELECT * FROM rating_categories JOIN rating_imagecategories ON rating_categories.id=rating_imagecategories.category WHERE rating_imagecategories.image=$id";
  if (!$result=mysql_query($sql,$db_connection)){echo "ERROR";}
  while($row = mysql_fetch_array($result)){
    echo $row['name']."<br/>\n";
  }
?>
</td><td align=right valign=top>
<a href="<?php echo 'report.php' . ($category ? '?category='.$category.'&' : '?') . 'key=' . $key . '&report=' . $i; ?>"><img src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/42px-Dialog-warning.svg.png" height=20 width=20></a>
</td></tr></table>
</td></tr></table>
<?php } ?>
</tr>
<tr>
<td colspan=100%>
<table width=100%><tr><td bgcolor=#fff align=center>
<form action="<?php echo $thispage; ?>" method="get" style="display:inline">
<b>Change category:</b>
<select name="category">
<option value=0>All</option>
<?php
  $sql = "SELECT * FROM rating_categories";
  if (!$result=mysql_query($sql,$db_connection)){}
  while($row = mysql_fetch_array($result)){
    echo '<option value="'.$row['id'].'"' . ($row['id']==$category ? ' selected' : '') . '>' . $row['name'] . "</option>\n";
  }
?>
</select>
<input type="submit"></form>
</td></tr></table>
</td>
</tr>
</table>
<?php

//Page tail:
INCLUDE('tail.php');

mysql_close($db_connection);
?>