From fa1b8fb203c45219d3ed7d4560031a6edf25f2b0 Mon Sep 17 00:00:00 2001
From: josch <josch@7eef14d0-6ed0-489d-bf55-20463b2d70db>
Date: Fri, 4 Apr 2008 09:16:55 +0000
Subject: [PATCH] fixed tag exploit

git-svn-id: http://yolanda.mister-muffin.de/svn@272 7eef14d0-6ed0-489d-bf55-20463b2d70db
---
 trunk/tools/tagcloud.pl | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/trunk/tools/tagcloud.pl b/trunk/tools/tagcloud.pl
index 9001e78..bb56aca 100755
--- a/trunk/tools/tagcloud.pl
+++ b/trunk/tools/tagcloud.pl
@@ -11,24 +11,42 @@ $dbh = DBI->connect("DBI:mysql:$database:$dbhost", $dbuser, $dbpass);
 
 $sth = $dbh->prepare("select subject from videos");
 $sth->execute();
+#cycle through all video subjects
 while(($subject) = $sth->fetchrow_array())
 {
     @subject = split(' ', $subject);
+    #cycle through all tags of video
     foreach my $val (@subject)
     {
+        #strip whitespaces
         $val =~ s/^\s*(.*?)\s*$/$1/;
         if(length($val) >= 4)
         {
-            %hash->{$val}++;
+            #check if some clever guy has written a tag multiple times
+            $found = 0;
+            foreach my $tmpval (@subject)
+            {
+                if($val eq $tmpval)
+                {
+                    $found = 1;
+                }
+            }
+            #only add tag if it is not been entered twice or more
+            if(!$found)
+            {
+                %hash->{$val}++;
+            }
         }
     }
 }
 $sth->finish();
 
+#sort by count
 @sorted = sort {$hash{$b} cmp $hash{$a}} keys %hash;
 
 $dbh->do("delete from tagcloud");
 $sth = $dbh->prepare("insert into tagcloud (text, count) values (?, ?)");
+#insert first 20 tags into tagcloud table
 for($i=0;$i<20 and $i<=$#sorted;$i++)
 {
     $sth->execute( $sorted[$i], %hash->{$sorted[$i]} );