X-Git-Url: http://git.hcoop.net/clinton/MarylandElectronicPetitionSignature.git/blobdiff_plain/7728d0ab89cb2b7cfad4de19bc6d729c618c4191..36dd32c16314b25d4d47e7d2a7000e9f5ad8eef7:/sign.php diff --git a/sign.php b/sign.php index 857342a..818963f 100644 --- a/sign.php +++ b/sign.php @@ -1,5 +1,6 @@ real_escape_string($_COOKIE['pDOB']); $signed_name_as_circulator = $petition->real_escape_string($_POST['signed_name_as_circulator']); $contact_phone = $petition->real_escape_string($_COOKIE['pPHONE']); $signature_status = $petition->real_escape_string($_COOKIE['signature_status']); +$bot_check = $petition->real_escape_string($_SERVER['HTTP_USER_AGENT']); -$petition->query("insert into signatures (VTRID,ip_address,date_of_birth,date_time_signed,just_date,petition_id,signed_name_as,signed_name_as_circulator,contact_phone,signature_status) values ('$VTRID','$ip','$date_of_birth',NOW(),NOW(),'$petition_id','$signed_name_as','$signed_name_as_circulator','$contact_phone','$signature_status')") or die(mysqli_error($petition)); -$last = $petition->insert_id; -setcookie("invite_used", $_COOKIE['invite']); -setcookie("invite", ""); // clear invite -//header('Location: eligible.php'); -include_once('header.php'); - - -slack_general_admin("$signed_name_as Petition $petition_id",'md-petition-signed'); - -$q="SELECT ip_address, petition_id,VTRID, COUNT(*) as count FROM signatures where signature_status = 'verified' group by ip_address, petition_id, VTRID"; -$r = $petition->query($q); -while($d = mysqli_fetch_array($r)){ - if ($d['count'] > 1){ - $msg = "*ALERT* https://www.md-petition.com/admin/abuse.php?ip_address=$d[ip_address] https://www.md-petition.com/admin/abuse.php?VTRID=$d[VTRID] $d[petition_id] $d[count]"; - slack_general_admin($msg,'md-petition-signed'); - } +if (isset($_GET['s'])){ + $last = $_GET['s']; +}elseif($_COOKIE['last']){ + $last = $_COOKIE['last']; // fall back on cookie +}else{ + slack_general_admin("last petition cookie or get missing - directing to share",'md-petition-signed'); + header('Location: share.php'); } - +include_once('header.php'); +$php_session_id = session_id(); +$petition->query("update presign set presign_status = 'SIGNED' where php_session_id = '$php_session_id' and presign_status = 'NEW' "); $qX = "select * from website_text where id = '9'"; $rX = $petition->query($qX); $dX = mysqli_fetch_array($rX);