<?php
/************************************************************************/
/* Eleonline - Raccolta e diffusione dei dati elettorali                */
/************************************************************************/
/* Modulo salva affluenze                                               */
/* Amministrazione                                                      */
/************************************************************************/
session_name('sesadmin');
  // gestione sessione
$a = session_id();
if(empty($a)) session_start();
if(!$_SESSION['aid'])
    die ("You can't access this file directly..."); 
$aid=$_SESSION['aid'];
include("../../config.php");
	try{
	$dbi = new PDO("mysql:host=$dbhost;charset=latin1", $dbuname, $dbpass, array(PDO::ATTR_EMULATE_PREPARES => false, PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION)); 
     	$sql = "use $dbname";
    	$dbi->exec($sql);
        }
	catch(PDOException $e)
	{
	    echo $sql . "<br>" . $e->getMessage();
	}             

if (isset($_GET['genere'])) $genere=intval($_GET['genere']); else $genere='';
if (isset($_GET['id_cons_gen'])) $id_cons_gen=intval($_GET['id_cons_gen']); else $id_cons_gen='';
if (isset($_GET['id_cons'])) $id_cons=intval($_GET['id_cons']); else $id_cons='';
if (isset($_GET['op'])) $op=intval($_GET['op']); else $op='';
if (isset($_GET['id_circ'])) $id_circ=intval($_GET['id_circ']); else $id_circ='';
if (isset($_GET['id_sez'])) $id_sez=intval($_GET['id_sez']); else $id_sez='';
if (isset($_GET['id_sede'])) $id_sede=intval($_GET['id_sede']); else $id_sede='';
if (isset($_GET['id_lista'])) $id_lista=intval($_GET['id_lista']); else $id_lista='';
if (isset($_GET['valista'])) $valista=intval($_GET['valista']); else $valista='';
if (isset($_GET['sg'])) $sg=intval($_GET['sg']); else $sg='';
if (isset($_GET['votinulli'])) $votinulli=intval($_GET['votinulli']); else $votinulli='';
if (isset($_GET['contestati'])) $contestati=intval($_GET['contestati']); else $contestati='';
if (isset($_GET['update'])) $update=intval($_GET['update']); else $update='';
if (isset($_GET['pwd3'])) $pwd3=intval($_GET['pwd3']); else $pwd3='';
if (isset($_GET['do'])) $do=intval($_GET['do']); else $do='';
if (isset($_GET['valista'])) $validi=intval($_GET['valista']); else $validi='0';
if (isset($_GET['nulli'])) get_magic_quotes_gpc() ? $nulli=$_GET['nulli']:$nulli=intval($_GET['nulli']); else $nulli='';
if (isset($_GET['bianchi'])) get_magic_quotes_gpc() ? $bianchi=$_GET['bianchi']:$bianchi=addslashes($_GET['bianchi']); else $bianchi='';
if (isset($_GET['contestati'])) get_magic_quotes_gpc() ? $contestati=$_GET['contestati']:$contestati=addslashes($_GET['contestati']); else $contestati='';
if (isset($_GET['votinulli'])) get_magic_quotes_gpc() ? $votinulli=$_GET['votinulli']:$votinulli=addslashes($_GET['votinulli']); else $votinulli='01-01-1900';
if (isset($_GET['id_comune'])) $id_comune=intval($_GET['id_comune']); else $id_comune='';
if (isset($_GET['ops'])) $ops=intval($_GET['ops']); else $ops='';
if (isset($_GET['delete'])) $delete=intval($_GET['delete']); else $delete='';
if (isset($_GET['circo'])) get_magic_quotes_gpc() ? $circo=$_GET['circo']:$circo=addslashes($_GET['circo']); else $circo='';

global $prefix,$id_parz,$fileout;
if($id_lista){
	$sql="select num_cand from ".$prefix."_ele_candidati where id_cons='$id_cons' and id_lista='$id_lista' ORDER BY num_cand  ";
	$result = $dbi->prepare("$sql");
	$result->execute();
	while(list($i)=$result->fetch(PDO::FETCH_BOTH)) {
		$vot="voti$i";$cand="id_cand$i";
		if (isset($_GET[$cand])) $idcand[$i]=intval($_GET[$cand]); else $idcand[$i]='0';
		if (isset($_GET[$vot])) $voti[$i]=intval($_GET[$vot]); else $voti[$i]='0';
	#	if (isset($_GET[$solo])) $solog[$i]=intval($_GET[$solo]); else $solog[$i]='0';

	}
}else{
	$sql="select num_lista from ".$prefix."_ele_lista where id_cons='$id_cons' ORDER BY num_lista  ";
	$result = $dbi->prepare("$sql");
	$result->execute();
	$sololiste=0;
	while(list($i)=$result->fetch(PDO::FETCH_BOTH)) {
		$vot="voti$i";$vnp="vnpl$i";$slp="slpl$i";$idlist="id_lista$i";
		if (isset($_GET[$vnp])) $vnpl[$i]=intval($_GET[$vnp]); else $vnpl[$i]='0';
		if (isset($_GET[$vot])) $voti[$i]=intval($_GET[$vot]); else $voti[$i]='0';
		if (isset($_GET[$slp])) $slpl[$i]=intval($_GET[$slp]); else $slpl[$i]='0';
		if (isset($_GET[$idlist])) $idlista[$i]=intval($_GET[$idlist]); else $idlista[$i]='0';
		$sololiste+=$slpl[$i];
	}	
}
if (!isset($fileout)) $fileout='';
#if(($voti_u+$voti_d) and !$voti_t) $voti_t=$voti_u+$voti_d;
if ($fileout) while (!$fp = fopen($fileout,"a"));

##################
# if($id_lista){
	if($pwd3==1) {
		$sql="delete from ".$prefix."_ele_voti_lista where id_cons='$id_cons' and id_sez='$id_sez'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		$sql="delete from ".$prefix."_ele_voti_candidati where id_cons='$id_cons' and id_sez='$id_sez'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		$sql="update  ".$prefix."_ele_sezioni set validi_lista='',contestati_lista='',voti_nulli_lista='',solo_gruppo='',solo_lista='' where id_cons='$id_cons' and id_sez='$id_sez'";
		$res = $dbi->prepare("$sql");
		$res->execute();
	}elseif($id_lista){
		$sql="SELECT disgiunto FROM ".$prefix."_ele_cons_comune where id_cons='$id_cons' ";
		$res = $dbi->prepare("$sql");
		$res->execute();
		list($disgiunto)=$res->fetch(PDO::FETCH_NUM);
		if($disgiunto){ 
		}
		foreach($idcand as $idkey=>$idc){
			
			$sql="select num_cand from ".$prefix."_ele_voti_candidati where id_sez='$id_sez' and id_cand='$idc'";
			$result = $dbi->prepare("$sql");
			$result->execute();
			if($result->rowCount()) 
				$sql="update ".$prefix."_ele_voti_candidati set voti='".$voti[$idkey]."' where id_sez='$id_sez' and id_cand='$idc'";
			else
				$sql="insert into ".$prefix."_ele_voti_candidati values('$id_cons','$idc','$id_sez','$idkey','".$voti[$idkey]."')";
			$result = $dbi->prepare("$sql");
			$result->execute();
		}
	}else{
			$sql="update  ".$prefix."_ele_sezioni set validi_lista='$validi',contestati_lista='$contestati',voti_nulli_lista='$votinulli',solo_gruppo='$sg',solo_lista='' where id_cons='$id_cons' and id_sez='$id_sez'";
			$res = $dbi->prepare("$sql");
			$res->execute();
			$sql="select num_lista,id_lista from ".$prefix."_ele_voti_lista where id_cons='$id_cons' and id_sez='$id_sez'";
			$result = $dbi->prepare("$sql");
			$result->execute();
			if($result->rowCount()){
				$sql="select num_lista,id_lista from ".$prefix."_ele_lista where id_cons='$id_cons'";
				$result = $dbi->prepare("$sql");
				$result->execute();
				while(list($i,$idl)=$result->fetch(PDO::FETCH_NUM)){
					$sql="update ".$prefix."_ele_voti_lista set num_lista='$i',voti='".$voti[$i]."',nulli_lista='".$vnpl[$i]."',solo_lista='".$slpl[$i]."' where num_lista='$i' and id_sez='$id_sez'";
					$res = $dbi->prepare("$sql");
					$res->execute();
				}
				
			}else{
				
				$sql="select num_lista,id_lista from ".$prefix."_ele_lista where id_cons='$id_cons'";
				$result = $dbi->prepare("$sql");
				$result->execute();
				while(list($i,$idl)=$result->fetch(PDO::FETCH_NUM)){
					$sql="insert into  ".$prefix."_ele_voti_lista values('$id_cons','$idl','$id_sez','$i','".$voti[$i]."','".$vnpl[$i]."','".$slpl[$i]."')";
					$res = $dbi->prepare("$sql");
					$res->execute();
				}
			}
	}




controllo_votil($id_cons,$id_sez,$id_lista);

if ($fileout) fclose($fp);
$BASE=substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['REQUEST_URI'], "/")-16);
Header("Location: ".$BASE."admin.php?op=voti&id_cons_gen=$id_cons_gen&id_circ=$id_circ&id_sede=$id_sede&id_sez=$id_sez&do=spoglio&ops=$ops");
#################################




	
function controllo_votil($id_cons,$id_sez,$id_lista){
	global $prefix,$dbi,$id_sede,$id_cons_gen;
		##############################
	$sql="select * from ".$prefix."_ele_controllosez where id_cons='$id_cons' and id_sez='$id_sez'";
	$resc = $dbi->prepare("$sql");
	$resc->execute();
	$conta=$resc->rowCount();
	$err=0; $err2=0;
	if($id_lista){
		$sql="SELECT preferenze FROM ".$prefix."_ele_cons_comune where id_cons='$id_cons'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		list($prefs)=$res->fetch(PDO::FETCH_NUM);
		$sql="select voti from ".$prefix."_ele_voti_lista where id_lista='$id_lista' and id_sez='$id_sez'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		list($votil)=$res->fetch(PDO::FETCH_NUM);
		$sql="SELECT sum(voti),max(voti) FROM ".$prefix."_ele_voti_candidati where id_sez='$id_sez' and id_cand in (select id_cand from ".$prefix."_ele_candidati where id_lista='$id_lista')";
		$res = $dbi->prepare("$sql");
		$res->execute();
		list($votic,$mvc)=$res->fetch(PDO::FETCH_NUM);
		if(($votic*$prefs)>$votil || $mvc>$votil) 
			$err=1;
	}else{
		$sql="select id_gruppo from ".$prefix."_ele_lista where id_lista='$id_lista'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		list($idg)=$res->fetch(PDO::FETCH_NUM);
		$sql="SELECT id_gruppo, voti, solo_gruppo FROM ".$prefix."_ele_voti_gruppo where id_sez='$id_sez'";
		$resref = $dbi->prepare("$sql");
		$resref->execute();
		while (list($idg,$votig,$svg)=$resref->fetch(PDO::FETCH_NUM)) {
			$sql="SELECT sum(voti), sum(solo_lista) FROM ".$prefix."_ele_voti_lista where id_sez='$id_sez' and id_lista in (select id_lista from ".$prefix."_ele_lista where id_gruppo='$idg')";
			$res2 = $dbi->prepare("$sql");
			$res2->execute();
			if($res2->rowCount()){
				list($votil,$svl)=$res2->fetch(PDO::FETCH_NUM); 
				if(($votig+$svl)!=($votil+$svg)) 
					$err=1;include("if(($votig+$svl)!=($votil+$svg))");
			}
		}	

	}
	$sql="select * from ".$prefix."_ele_controllosez where id_cons='$id_cons' and id_sez='$id_sez'";
	$resc = $dbi->prepare("$sql");
	$resc->execute();
	$aff=$resc->fetch(PDO::FETCH_BOTH);
	if($id_lista) {$cur=$aff['stato_lis']; $campo='stato_can';} else {$curr=$aff['stato_can']; $campo='stato_lis';}
	if($aff['status']) {
		if ($aff['stato_aff'] ||$curr || $aff['stato_gru'] || $aff['stato_val']) {
			$sql="update ".$prefix."_ele_controllosez set $campo='$err' where id_cons='$id_cons' and id_sez='$id_sez'";
			$res = $dbi->prepare("$sql");include("$sql");
			$res->execute();
		}else{
			$sql="update ".$prefix."_ele_controllosez set $campo='$err',status='$err' where id_cons='$id_cons' and id_sez='$id_sez'";
			$res = $dbi->prepare("$sql");
			$res->execute();
		}
		
	}
	if($err || $aff['status'])
		$sql="UPDATE ".$prefix."_ele_sezioni set colore='style=\" background: #FF3300;' where id_cons='$id_cons' and id_sez='$id_sez'"; #ROSSO
	else {
		$col="#F0E68C;";
		$sql="select id_cand from ".$prefix."_ele_voti_candidati where id_sez='$id_sez' group by id_cand";
		$res = $dbi->prepare("$sql");
		$res->execute();
		$vv=$res->rowCount();
		$sql="select id_cand from ".$prefix."_ele_candidati where id_cons='$id_cons'";
		$res = $dbi->prepare("$sql");
		$res->execute();
		$vvt=$res->rowCount();
		if($vvt=$vv) $col="#32CD32;"; #"LIMEGREEN" colore se finito l'inserimento dei voti ai candidati 
		else{
			$sql="select id_lista from ".$prefix."_ele_voti_lista where id_sez='$id_sez' group by id_lista";
			$res = $dbi->prepare("$sql");
			$res->execute();
			$vv=$res->rowCount();
			$sql="select id_lista from ".$prefix."_ele_lista where id_cons='id_cons'";
			$res = $dbi->prepare("$sql");
			$res->execute();
			$vvt=$res->rowCount();
			if($vvt=$vv) $col="#F0E68C;"; #"KHAKY" colore se finito l'inserimento dei voti alle liste			
		}
		$sql="UPDATE ".$prefix."_ele_sezioni set colore='style=\" background: $col' where id_cons='$id_cons' and id_sez='$id_sez'"; 
	}
	$res = $dbi->prepare("$sql");
	$res->execute();
	
}

?>