WooYun.org

public function actionVoteSubmit() {
        $voteId = intval($_POST['vote_id']);
        $options = $_POST['option'];
        if(!$options || count($options) == 0) {
            $this->redirect($this->createUrl('plaza/viewVote', array('id' => $voteId)));
        }
        $vote  = ActVote::model()->findByPk($voteId);
        // 0.0 判断该用户是否参加过在投票
        $hasVoted = ActVoteRecord::model()->hasVoted($this->user->id, $voteId);
        if($hasVoted) {
            $this->redirect($this->createUrl('plaza/viewVote', array('id' => $voteId)));
        }
        // 0.1 判断是否为多选并且该投票有限制多选的最多数量，如果超过，则截取前$vote->limit_num个
        if($vote->type == ActVote::TYPE_MULTI && $vote->limit_num > 0) {
            if(count($options) > $vote->limit_num) {
                $options = array_slice($options, 0, $vote->limit_num);
            }
        }
        // 1.1 选项选中数(selected_num) +1 & 投票的participate_num + 1
        $strOptionIds = implode(',', $options);
        $voteItem = new ActVoteItem();
        $voteItem->updateCounters(array(
            'selected_num' => 1
        ), "id in ({$strOptionIds})");