2 include_once('/var/www/secure.php');
3 include_once('slack.php');
4 $petition_id = $_COOKIE['pID'];
5 $VTRID = $_COOKIE['pVTRID'];
6 if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
7 $ip = $_SERVER['HTTP_CLIENT_IP'];
8 } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
9 $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
11 $ip = $_SERVER['REMOTE_ADDR'];
13 function id2petition($id){
15 $q = "select petition_name from petitions where petition_id = '$id'";
16 $r = $petition->query($q);
17 $d = mysqli_fetch_array($r,MYSQLI_ASSOC
);
18 return $d['petition_name'];
20 $signed_name_as = $petition->real_escape_string($_POST['signed_name_as']);
21 $date_of_birth = $petition->real_escape_string($_COOKIE['pDOB']);
22 $signed_name_as_circulator = $petition->real_escape_string($_POST['signed_name_as_circulator']);
23 $contact_phone = $petition->real_escape_string($_COOKIE['pPHONE']);
24 $signature_status = $petition->real_escape_string($_COOKIE['signature_status']);
25 $bot_check = $petition->real_escape_string($_SERVER['HTTP_USER_AGENT']);
27 if (empty($_COOKIE['start_time'])){
28 setcookie("start_time", time());
32 $time_on_site = $now - $_COOKIE['start_time'];
34 $petition->query("insert into signatures (bot_check,VTRID,ip_address,date_of_birth,date_time_signed,just_date,petition_id,signed_name_as,signed_name_as_circulator,contact_phone,signature_status) values ('$bot_check','$VTRID','$ip','$date_of_birth',NOW(),NOW(),'$petition_id','$signed_name_as','$signed_name_as_circulator','$contact_phone','$signature_status')") or die(mysqli_error($petition));
35 if($petition_id == '' ||
$petition_id == '0'){
36 slack_general_admin("MISSING petition_id",'md-petition-signed');
37 echo "<h1>AN ERROR HAS OCCURED - PLEASE TRY AGAIN <a href='reset.php'>HERE</a></h1>";
38 die(); // do not clear invite!!!
42 $last = $petition->insert_id
;
43 slack_general_admin("$signed_name_as ".id2petition($petition_id)." sig #".$last,'md-petition-signed');
44 setcookie("last", $last);
45 setcookie("invite_used", $_COOKIE['invite']);
46 setcookie("invite", ""); // clear invite
48 $q="SELECT ip_address, petition_id,VTRID, COUNT(*) as count FROM signatures where signature_status = 'verified' group by ip_address, petition_id, VTRID";
49 $r = $petition->query($q);
50 while($d = mysqli_fetch_array($r)){
52 $msg = "*ALERT* https://www.md-petition.com/admin/abuse.php $d[ip_address] $d[VTRID] ".id2petition($d['petition_id'])." *$d[count]*";
53 slack_general_admin($msg,'md-petition-signed');
56 header('Location: sign.php?s='.$last);