Scratch

<?php
function writeimageoftext($string, $subtext) {
    // Set font size
    $font_size = 2;
    $font = realpath('aller.ttf');
    // Create image width dependant on width of the string
    $width  = imagefontwidth($font_size)*strlen($string);
    // Set height to that of the font
    $height = imagefontheight($font_size);
    if (isset($subtext)) {
        $height = imagefontheight($font_size) + imagefontheight($font_size/2);
        $lensub = strlen($subtext);
    }
    // Create the image pallette
    $img = imagecreate($width,$height);
    // Grey background
    $bg    = imagecolorallocate($img, 222, 223, 223);
    // Black font color
    $color = imagecolorallocate($img, 0, 0, 0);
    // Length of the string
    $len = strlen($string);
    // Y-coordinate of character, X changes, Y is static
    $ypos = 0;
    // Loop through the string
    for($i=0;$i<$len;$i++){
        // Position of the character horizontally
        $xpos = $i * imagefontwidth($font_size);
        // Draw character
        imagechar($img, $font_size, $xpos, $ypos, $string, $color);
        // Remove character from string
        $string = substr($string, 1);
    }
    if (isset($subtext)) {
        $ypos = imagefontheight($font_size) + 1;
        $font_size = $font_size / 2;
        for($i=0;$i<$len;$i++){
            // Position of the character horizontally
            $xpos = $i * imagefontwidth($font_size);
            // Draw character
            imagechar($img, $font_size, $xpos, $ypos, $subtext, $color);
            // Remove character from string
            $subtext = substr($subtext, 1);
        }
    }
    // Return the image
    header("Content-Type: image/gif");
    imagegif($img);
    // Remove image
    imagedestroy($img);
}

$mysql_host = "*****";
$mysql_database = "*****";
$mysql_user = "*****";
$mysql_password = "*****";
$topicid = $_REQUEST['id'];
$userip = $_SERVER['REMOTE_ADDR'];

if ($_REQUEST['ret'] == 'image') {
    $topicid = $_REQUEST['id'];
    if (is_numeric($topicid) === false) {
        writeimageoftext('Error: id is not valid', '');
        exit();
    }
    $url = 'http://scratch.mit.edu/forums/viewtopic.php?id=' . $topicid;
    $urlcontents = trim(file_get_contents($url));
    if (strpos($urlcontents, 'Badrequest') != false) { //badrequest should have a space inbetween but it breaks this page otherwise.
        writeimageoftext('Error: id not found', '');
        exit();
    }
    mysql_connect($mysql_host, $mysql_user, $mysql_password) or die(mysql_error());
    mysql_select_db($mysql_database) or die(mysql_error());
    $checkquery = mysql_query("SELECT * FROM topicrate WHERE postid='$topicid'");
    if (mysql_num_rows($checkquery) == 0) {
        $likes = 0;
    }
    else {
        $topicratings = mysql_fetch_row($checkquery) or die(mysql_error());
        $ratedips = explode(',', $topicratings[1]);
        $likes = count($ratedips);
        if ($ratedips[0] == '') {
            $likes = 0;
        }
    }
    if ($likes == 1) {
        $likes = 1 . ' Like';
    }
    else {
        $likes = $likes . ' Likes';
    }
    $checkquery = mysql_query("SELECT * FROM topicrate WHERE postid='$topicid'");
    if (mysql_num_rows($checkquery) == 0) {
        $already_liked = 'Like';
    }
    else {
        $topicratings = mysql_fetch_row($checkquery) or die(mysql_error());
        $ratedips = explode(',', $topicratings[1]);
        $count = count($ratedips);
        $already_liked = 'Like';
        for($i=0; $i<$count; $i++) {
            if($ratedips[$i] == $userip) {
                $already_liked = 'Unlike';
            }
        }
    }
    writeimageoftext($likes, $already_liked);
}
elseif ($_REQUEST['ret'] == 'add') {
    $headerurl = 'Location:http://scratch.mit.edu/forums/viewtopic.php?id=' . $topicid;
    $topicid = $_REQUEST['id'];
    mysql_connect($mysql_host, $mysql_user, $mysql_password) or die(mysql_error());
    mysql_select_db($mysql_database) or die(mysql_error());
    $checkquery = mysql_query("SELECT * FROM topicrate WHERE postid='$topicid'");
    if (mysql_num_rows($checkquery) == 0) {
        $addtopic_query = mysql_query("INSERT INTO topicrate (postid, ips) VALUES ('$topicid', '$userip')");
        header($headerurl);
        exit();
    }
    else {
        $topicratings = mysql_fetch_row($checkquery) or die(mysql_error());
        $ratedips = explode(',', $topicratings[1]);
        $count = count($ratedips);
        for($i=0; $i<$count; $i++) {
            if($ratedips[$i] == $userip) {
                unset($ratedips[$i]);
                $ratedips = implode(',', $ratedips);
                $updateips_query = mysql_query("UPDATE topicrate SET ips='$ratedips' WHERE postid='$topicid'") or die(mysql_error());
                header($headerurl);
                exit();
            }
        }
        $ratedips[$count] = $userip;
        $ratedips2 = implode(',', $ratedips);
        if ($ratedips[0] == '') {
            $ratedips2 = $userip;
        }
        $updateips_query = mysql_query("UPDATE topicrate SET ips='$ratedips2' WHERE postid='$topicid'") or die(mysql_error());
        header($headerurl);
        exit();
    }
}
else {
    writeimageoftext('Error: incorrect URL vars used', 'Better luck next time!');
}
?>