<?php
$file = dirname( __FILE__ );
$file = substr( $file, 0, stripos( $file, "wp-content" ) );

require( $file . '/wp-load.php' );

// settings
$aOptions = ThemeName::initOptions( false );
$cookiespan = ( strlen( $aOptions[ 'cookiespan' ] ) > 0 ) ? intval( $aOptions[ 'cookiespan' ] ) : 0;
if( $cookiespan > 0 ) $cookiespan = time() + 60 * 60 * 24 * $cookiespan;

// userinfo
get_currentuserinfo();
global $wpdb, $user_ID;

// vars
$pid = intval( $_POST[ 'pid' ] ); // post id
$act = stripslashes( strip_tags( $_POST[ 'act' ] ) ); // action: pro or con
$cook_str = $act . '_' . $pid;

if( '' != $user_ID && $pid > 0 && ( $act == 'pro' || $act == 'con' ) && $_COOKIE[ "themename" ][ "$cook_str" ] != 'Y' ) {

// current votes num
$current_votes = $wpdb->get_var( "SELECT no_votes FROM $wpdb->posts WHERE ID = $pid" );

if( $act == 'pro' ) $new_votes = $current_votes + 1;
else if( $act == 'con' ) $new_votes = $current_votes - 1;

// save to db
$q_store_string = "UPDATE $wpdb->posts SET no_votes = '$new_votes' WHERE ID = $pid";
$q_store = $wpdb->query( $wpdb->prepare( $q_store_string ) );

// everything OK?
if( $q_store ) {

// handle cookies
setcookie( "themename[$cook_str]", "Y", $cookiespan, '/' );
echo $new_votes;

}

}
?>