} $open = ''; if (isset($_POST['open'])) { $open = COM_applyFilter($_POST['open']); } $hideresults = ''; if (isset($_POST['hideresults'])) { $hideresults = COM_applyFilter($_POST['hideresults']); } $display .= savepoll($pid, $old_pid, $_POST['question'], $mainpage, $_POST['topic'], $_POST['meta_description'], $_POST['meta_keywords'], $statuscode, $open, $hideresults, COM_applyFilter($_POST['commentcode'], true), $_POST['answer'], $_POST['votes'], $_POST['remark'], COM_applyFilter($_POST['owner_id'], true), COM_applyFilter($_POST['group_id'], true), $_POST['perm_owner'], $_POST['perm_group'], $_POST['perm_members'], $_POST['perm_anon']); } else { $display .= COM_siteHeader('menu', $LANG25[5]); $display .= COM_startBlock($LANG21[32], '', COM_getBlockTemplate('_msg_block', 'header')); $display .= $LANG25[17]; $display .= COM_endBlock(COM_getBlockTemplate('_msg_block', 'footer')); $display .= editpoll(); $display .= COM_siteFooter(); } } elseif ($mode == $LANG_ADMIN['delete'] && !empty($LANG_ADMIN['delete'])) { $pid = ''; if (isset($_POST['pid'])) { $pid = COM_applyFilter($_POST['pid']); } if (empty($pid)) { COM_errorLog('Ignored possibly manipulated request to delete a poll.'); $display .= COM_refresh($_CONF['site_admin_url'] . '/plugins/polls/index.php'); } elseif (SEC_checkToken()) { $display .= deletePoll($pid); } else { COM_accessLog("User {$_USER['username']} tried to illegally delete poll {$pid} and failed CSRF checks."); echo COM_refresh($_CONF['site_admin_url'] . '/index.php');
} $mainpage = ''; if (isset($_POST['mainpage'])) { $mainpage = COM_applyFilter($_POST['mainpage']); } $open = ''; if (isset($_POST['open'])) { $open = COM_applyFilter($_POST['open']); } $hideresults = ''; if (isset($_POST['hideresults'])) { $hideresults = COM_applyFilter($_POST['hideresults']); } $display .= savepoll($pid, $old_pid, $_POST['question'], $mainpage, $_POST['topic'], $_POST['meta_description'], $_POST['meta_keywords'], $statuscode, $open, $hideresults, COM_applyFilter($_POST['commentcode'], true), $_POST['answer'], $_POST['votes'], $_POST['remark'], COM_applyFilter($_POST['owner_id'], true), COM_applyFilter($_POST['group_id'], true), $_POST['perm_owner'], $_POST['perm_group'], $_POST['perm_members'], $_POST['perm_anon'], $_POST['allow_multipleanswers'], COM_applyFilter($_POST['topic_description']), $_POST['description']); } else { $display .= COM_showMessageText($LANG25[17], $LANG21[32]) . editpoll(); $display = COM_createHTMLDocument($display, array('pagetitle' => $LANG25[5])); } } elseif ($mode == $LANG_ADMIN['delete'] && !empty($LANG_ADMIN['delete'])) { $pid = ''; if (isset($_POST['pid'])) { $pid = COM_applyFilter($_POST['pid']); } if (empty($pid)) { COM_errorLog('Ignored possibly manipulated request to delete a poll.'); $display .= COM_refresh($_CONF['site_admin_url'] . '/plugins/polls/index.php'); } elseif (SEC_checkToken()) { $display .= deletePoll($pid); } else { COM_accessLog("User {$_USER['username']} tried to illegally delete poll {$pid} and failed CSRF checks."); echo COM_refresh($_CONF['site_admin_url'] . '/index.php');