Vote For Silk

its my work 100 safe and filtering for ip and date only you need to make 3 cloumn to TB_User :)

Quote:

<?php

if (isset($_POST['vote'])) {

$whatvote=$_POST['otelist'];

drawsilk($whatvote);

}
else{
echo '<div class="page-body newsblock">';
echo '<div class="news-title">';
echo 'Vote for silk:';
echo '</div>';
echo '<FORM method="Post">';
echo '<div class="news-content">';
echo '<SELECT name="otelist">';
echo '<option>Vote1</option>';
echo '<option>Vote2</option>';
echo '<option>Vote3</option>';
echo '</SELECT>';
echo '<input class="votebutton" name="vote" type=submit value="Give me my silk">';
echo '</FORM>';
echo '</div>';
echo '</div>';
}

function drawsilk($onvote){

if($onvote=="Vote1"){
$onvote="LastVote";
}else{
if($onvote=="Vote2"){
$onvote="LastVote1";
}
else{
$onvote="LastVote2";
}
}

$host = "host"; #db
$user = "sa";
$pass = "pw";
$db = "SRO_VT_ACCOUNT";
@$ip = $_SERVER['REMOTE_ADDR'];
@$connect = odbc_connect("Driver={SQL Server};Server={".$host."}; Database={".$db."}", "".$user."", "".$pass."") or die("<center><b style=\"border:1px dashed #FF0000;\">".str_replace("[Microsoft][ODBC SQL Server Driver][SQL Server]", "", odbc_errormsg())."</b></center>");
$username = $_SESSION['username'];

$check = odbc_exec($connect, "SELECT ".$onvote." FROM TB_User WHERE StrUserID = '".$username."'");
$cc = odbc_result($check,1);
$today = date("Y-m-d");
$counter = odbc_exec($connect, "SELECT count(".$onvote.") FROM TB_User WHERE ".$onvote."='".$today."' AND reg_ip= '".$ip."'");
print(odbc_result($counter,1));
if($today!=$cc && odbc_result($counter,1)<=0){

$query = odbc_exec($connect,"select silk_own from SK_Silk where JID = '".$_SESSION['JID']."'");
$silk = odbc_result($query,1);
$silk++;
odbc_exec($connect, "UPDATE SK_Silk SET silk_own='".$silk."' WHERE JID = '".$_SESSION['JID']."'");
odbc_exec($connect, "UPDATE TB_User SET ".$onvote."='".$today."' WHERE JID = '".$_SESSION['JID']."'");
odbc_exec($connect, "UPDATE TB_User SET reg_ip='".$ip."' WHERE JID = '".$_SESSION['JID']."'");
if($onvote=="LastVote"){
header("Location:http://www.sro-servers.com/index.php?do=vote&id=4856921");
}
else{
if($onvote=="LastVote1"){
header("Location:second URL ");
}else{
header("Location:third URL ");
}
else{
echo '<div class="page-body newsblock">';
echo '<div class="news-title">';
echo 'Today you voted!';
echo '</div>';
echo '<div class="news-content">';
echo '<a href="index.php">Return to main</a>';
echo '</div>';
echo '</div>';
}
}

?>