feedback.php

<?php 
	if (!$included) {
		exit;
	}
?>
<section style="display: inline-block; width: 710px;">
	<style>
		h1 {
			font-size: 18pt;
			margin-bottom: 0;
		}
		.star {
			cursor: pointer;
			font-size: 16pt;
		}
	</style>
<?php 
	if (isset($_POST['code'])) {
		$code = $_POST['code'];
	}
	else {
		$code = $_GET['code'];
	}

	$result = $db->query('SELECT id, title, speaker, link FROM presentations
		WHERE code = "' . $db->escape_string($code) . '"
		AND `datetime` > ' . (time() - ($code_validity * 3600 * 24)))
		or die(translate('dberr') . '5.');
	
	if ($result->num_rows == 0) {
		die(translate('code not found'));
	}

	$row = $result->fetch_row();
	$presentationid = $row[0];
	$title = $row[1];
	$speaker = $row[2];
	$link = $row[3];

	echo '<h1>' . htmlspecialchars($title) . '</h1>';
	echo '&mdash; <i>' . htmlspecialchars($speaker) . '</i>';
	if (!empty($link)) {
		if (substr($link, 0, 4) !== 'http') {
			$reallink = 'http://' . $link;
			$reallink = htmlspecialchars($reallink);
		}
		else {
			$reallink = htmlspecialchars($link);
		}
		echo ", <a href='$reallink'>$link</a>";
	}
	echo "<br><br>";

	if (isset($_POST['code'])) {
		$db->query("INSERT INTO presentation_feedback (presentationid) VALUES($presentationid)")
			or die(translate('dberr') . '762');

		$feedbackid = $db->insert_id;
		$i = 0;
		foreach ($_POST['q'] as $answer) {
			$response = $db->escape_string($answer);
			$db->query("INSERT INTO presentation_question_responses
				(feedbackid, response, sequenceNumber)
				VALUES($feedbackid, '$response', $i)")
				or die(translate('dberr') . '1525');
			$i++;
		}
		echo '<strong>' . translate('thanks for feedback') . '</strong>';
	}
	else {
		$result = $db->query('SELECT pq.sequenceNumber, pq.question, pq.type
			FROM presentations p
			INNER JOIN presentation_questions pq ON pq.presentationid = p.id
			WHERE p.code = "' . $db->escape_string($code) . '"
			ORDER BY pq.sequenceNumber')
			or die(translate('dberr') . '7');

		$questions = [];
		while ($row = $result->fetch_row()) {
			$questions[$row[0]] = [$row[1], $row[2]];
		}

		?>
			<form method=post>
				<input type=hidden name=code value="<?php echo htmlspecialchars($_GET['code']); ?>">
				<?php 
					foreach ($questions as $n=>$question) {
						list($question, $type) = $question;
						echo '<strong>' . htmlspecialchars($question) . '</strong><br>';

						if ($type == 1) {
							// 5-star rating
							$wstar = '&#9734;'; // white star
							$bstar = '&#9733;'; // black star
							$i = 0;
							while ($i < 5) {
								echo "<span class='sq$n-$i star' onclick='star($n, $i);'>$wstar</span>";
								$i++;
							}
							echo "<input type=hidden name='q[]' id='q$n' value='-1'>";
							echo "<br><br>";
						}

						else if ($type == 2) {
							// text field
							echo "<textarea name='q[]' cols=75 rows=2></textarea><br><br>";
						}

						else {
							continue;
						}
					}
				?>
				<input type=submit value="<?php echo translate('Submit'); ?>">
			</form>
			<script>
				function $(q) {
					return document.querySelector(q);
				}
				function star(question_n, star_n) {
					for (var i = 0; i <= star_n; i++) {
						$(".sq" + question_n + "-" + i).innerHTML = "&#9733;";
					}
					for (var i = star_n + 1; i < 5; i++) {
						$(".sq" + question_n + "-" + i).innerHTML = '&#9734;';
					}
					$("#q" + question_n).value = star_n + 1;
				}
			</script>
		<?php 
	}
?>
</section>