phpBB

<?php

/**

*

* @package phpBB3

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

define('IN_PHPBB', true);

if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');

if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));

include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);

// Start session management

$user->session_begin();

$auth->acl($user->data);

$user->setup('search');

// Define initial vars

$mode			= request_var('mode', '');

$search_id		= request_var('search_id', '');

$start			= max(request_var('start', 0), 0);

$post_id		= request_var('p', 0);

$topic_id		= request_var('t', 0);

$view			= request_var('view', '');

$submit			= request_var('submit', false);

$keywords		= utf8_normalize_nfc(request_var('keywords', '', true));

$add_keywords	= utf8_normalize_nfc(request_var('add_keywords', '', true));

$author			= request_var('author', '', true);

$author_id		= request_var('author_id', 0);

$show_results	= ($topic_id) ? 'posts' : request_var('sr', 'posts');

$show_results	= ($show_results == 'posts') ? 'posts' : 'topics';

$search_terms	= request_var('terms', 'all');

$search_fields	= request_var('sf', 'all');

$search_child	= request_var('sc', true);

$sort_days		= request_var('st', 0);

$sort_key		= request_var('sk', 't');

$sort_dir		= request_var('sd', 'd');

$return_chars	= request_var('ch', ($topic_id) ? -1 : 300);

$search_forum	= request_var('fid', array(0));

// Is user able to search? Has search been disabled?

if (!$auth->acl_get('u_search') || !$auth->acl_getf_global('f_search') || !$config['load_search'])

{

	$template->assign_var('S_NO_SEARCH', true);

	trigger_error('NO_SEARCH');

}

// Check search load limit

if ($user->load && $config['limit_search_load'] && ($user->load > doubleval($config['limit_search_load'])))

{

	$template->assign_var('S_NO_SEARCH', true);

	trigger_error('NO_SEARCH_TIME');

}

// Check flood limit ... if applicable

$interval = ($user->data['user_id'] == ANONYMOUS) ? $config['search_anonymous_interval'] : $config['search_interval'];

if ($interval && !$auth->acl_get('u_ignoreflood'))

{

	if ($user->data['user_last_search'] > time() - $interval)

	{

		$template->assign_var('S_NO_SEARCH', true);

		trigger_error('NO_SEARCH_TIME');

	}

}

// Define some vars

$limit_days		= array(0 => $user->lang['ALL_RESULTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 365 => $user->lang['1_YEAR']);

$sort_by_text	= array('a' => $user->lang['SORT_AUTHOR'], 't' => $user->lang['SORT_TIME'], 'f' => $user->lang['SORT_FORUM'], 'i' => $user->lang['SORT_TOPIC_TITLE'], 's' => $user->lang['SORT_POST_SUBJECT']);

$s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';

gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);

if ($keywords || $author || $author_id || $search_id || $submit)

{

	// clear arrays

	$id_ary = array();

	// egosearch is an author search

	if ($search_id == 'egosearch')

	{

		$author_id = $user->data['user_id'];

		if ($user->data['user_id'] == ANONYMOUS)

		{

			login_box('', $user->lang['LOGIN_EXPLAIN_EGOSEARCH']);

		}

	}

	// If we are looking for authors get their ids

	$author_id_ary = array();

	if ($author_id)

	{

		$author_id_ary[] = $author_id;

	}

	else if ($author)

	{

		if ((strpos($author, '*') !== false) && (utf8_strlen(str_replace(array('*', '%'), '', $author)) < $config['min_search_author_chars']))

		{

			trigger_error(sprintf($user->lang['TOO_FEW_AUTHOR_CHARS'], $config['min_search_author_chars']));

		}

		$sql_where = (strpos($author, '*') !== false) ? ' username_clean ' . $db->sql_like_expression(str_replace('*', $db->any_char, utf8_clean_string($author))) : " username_clean = '" . $db->sql_escape(utf8_clean_string($author)) . "'";

		$sql = 'SELECT user_id

			FROM ' . USERS_TABLE . "

			WHERE $sql_where

				AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

		$result = $db->sql_query_limit($sql, 100);

		while ($row = $db->sql_fetchrow($result))

		{

			$author_id_ary[] = (int) $row['user_id'];

		}

		$db->sql_freeresult($result);

		if (!sizeof($author_id_ary))

		{

			trigger_error('NO_SEARCH_RESULTS');

		}

	}

	// if we search in an existing search result just add the additional keywords. But we need to use "all search terms"-mode

	// so we can keep the old keywords in their old mode, but add the new ones as required words

	if ($add_keywords)

	{

		if ($search_terms == 'all')

		{

			$keywords .= ' ' . $add_keywords;

		}

		else

		{

			$search_terms = 'all';

			$keywords = implode(' |', explode(' ', preg_replace('#\s+#u', ' ', $keywords))) . ' ' .$add_keywords;

		}

	}

	// Which forums should not be searched? Author searches are also carried out in unindexed forums

	if (empty($keywords) && sizeof($author_id_ary))

	{

		$ex_fid_ary = array_keys($auth->acl_getf('!f_read', true));

	}

	else

	{

		$ex_fid_ary = array_unique(array_merge(array_keys($auth->acl_getf('!f_read', true)), array_keys($auth->acl_getf('!f_search', true))));

	}

	$not_in_fid = (sizeof($ex_fid_ary)) ? 'WHERE ' . $db->sql_in_set('f.forum_id', $ex_fid_ary, true) . " OR (f.forum_password <> '' AND fa.user_id <> " . (int) $user->data['user_id'] . ')' : "";

	$sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.right_id, f.forum_password, fa.user_id

		FROM ' . FORUMS_TABLE . ' f

		LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id

			AND fa.session_id = '" . $db->sql_escape($user->session_id) . "')

		$not_in_fid

		ORDER BY f.left_id";

	$result = $db->sql_query($sql);

	$right_id = 0;

	$reset_search_forum = true;

	while ($row = $db->sql_fetchrow($result))

	{

		if ($row['forum_password'] && $row['user_id'] != $user->data['user_id'])

		{

			$ex_fid_ary[] = (int) $row['forum_id'];

			continue;

		}

		if (sizeof($search_forum))

		{

			if ($search_child)

			{

				if (in_array($row['forum_id'], $search_forum) && $row['right_id'] > $right_id)

				{

					$right_id = (int) $row['right_id'];

				}

				else if ($row['right_id'] < $right_id)

				{

					continue;

				}

			}

			if (!in_array($row['forum_id'], $search_forum))

			{

				$ex_fid_ary[] = (int) $row['forum_id'];

				$reset_search_forum = false;

			}

		}

	}

	$db->sql_freeresult($result);

	// find out in which forums the user is allowed to view approved posts

	if ($auth->acl_get('m_approve'))

	{

		$m_approve_fid_ary = array(-1);

		$m_approve_fid_sql = '';

	}

	else if ($auth->acl_getf_global('m_approve'))

	{

		$m_approve_fid_ary = array_diff(array_keys($auth->acl_getf('!m_approve', true)), $ex_fid_ary);

		$m_approve_fid_sql = ' AND (p.post_approved = 1' . ((sizeof($m_approve_fid_ary)) ? ' OR ' . $db->sql_in_set('p.forum_id', $m_approve_fid_ary, true) : '') . ')';

	}

	else

	{

		$m_approve_fid_ary = array();

		$m_approve_fid_sql = ' AND p.post_approved = 1';

	}

	if ($reset_search_forum)

	{

		$search_forum = array();

	}

	// Select which method we'll use to obtain the post_id or topic_id information

	$search_type = basename($config['search_type']);

	if (!file_exists(PHPBB_ROOT_PATH . 'includes/search/' . $search_type . '.' . PHP_EXT))

	{

		trigger_error('NO_SUCH_SEARCH_MODULE');

	}

	require(PHPBB_ROOT_PATH . "includes/search/$search_type." . PHP_EXT);

	// We do some additional checks in the module to ensure it can actually be utilised

	$error = false;

	$search = new $search_type($error);

	if ($error)

	{

		trigger_error($error);

	}

	// let the search module split up the keywords

	if ($keywords)

	{

		$correct_query = $search->split_keywords($keywords, $search_terms);

		if (!$correct_query || (empty($search->search_query) && !sizeof($author_id_ary) && !$search_id))

		{

			$ignored = (sizeof($search->common_words)) ? sprintf($user->lang['IGNORED_TERMS_EXPLAIN'], implode(' ', $search->common_words)) . '<br />' : '';

			trigger_error($ignored . sprintf($user->lang['NO_KEYWORDS'], $search->word_length['min'], $search->word_length['max']));

		}

	}

	if (!$keywords && sizeof($author_id_ary))

	{

		// if it is an author search we want to show topics by default

		$show_results = ($topic_id) ? 'posts' : request_var('sr', ($search_id == 'egosearch') ? 'topics' : 'posts');

		$show_results = ($show_results == 'posts') ? 'posts' : 'topics';

	}

	// define some variables needed for retrieving post_id/topic_id information

	$sort_by_sql = array('a' => 'u.username_clean', 't' => (($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time'), 'f' => 'f.forum_id', 'i' => 't.topic_title', 's' => (($show_results == 'posts') ? 'p.post_subject' : 't.topic_title'));

	// pre-made searches

	$sql = $field = $l_search_title = '';

	if ($search_id)

	{

		switch ($search_id)

		{

			// Oh holy Bob, bring us some activity...

			case 'active_topics':

				$l_search_title = $user->lang['SEARCH_ACTIVE_TOPICS'];

				$show_results = 'topics';

				$sort_key = 't';

				$sort_dir = 'd';

				$sort_days = request_var('st', 7);

				$sort_by_sql['t'] = 't.topic_last_post_time';

				gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);

				$s_sort_key = $s_sort_dir = '';

				$last_post_time_sql = ($sort_days) ? ' AND t.topic_last_post_time > ' . (time() - ($sort_days * 24 * 3600)) : '';

				$sql = 'SELECT t.topic_last_post_time, t.topic_id

					FROM ' . TOPICS_TABLE . " t

					WHERE t.topic_moved_id = 0

						$last_post_time_sql

						" . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '

						' . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . '

					ORDER BY t.topic_last_post_time DESC';

				$field = 'topic_id';

			break;

			case 'unanswered':

				$l_search_title = $user->lang['SEARCH_UNANSWERED'];

				$show_results = request_var('sr', 'topics');

				$show_results = ($show_results == 'posts') ? 'posts' : 'topics';

				$sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';

				$sort_by_sql['s'] = ($show_results == 'posts') ? 'p.post_subject' : 't.topic_title';

				$sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');

				$sort_join = ($sort_key == 'f') ? FORUMS_TABLE . ' f, ' : '';

				$sql_sort = ($sort_key == 'f') ? ' AND f.forum_id = p.forum_id ' . $sql_sort : $sql_sort;

				if ($sort_days)

				{

					$last_post_time = 'AND p.post_time > ' . (time() - ($sort_days * 24 * 3600));

				}

				else

				{

					$last_post_time = '';

				}

				if ($sort_key == 'a')

				{

					$sort_join = USERS_TABLE . ' u, ';

					$sql_sort = ' AND u.user_id = p.poster_id ' . $sql_sort;

				}

				if ($show_results == 'posts')

				{

					$sql = "SELECT p.post_id

						FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t

						WHERE t.topic_replies = 0

							AND p.topic_id = t.topic_id

							$last_post_time

							$m_approve_fid_sql

							" . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "

							$sql_sort";

					$field = 'post_id';

				}

				else

				{

					$sql = 'SELECT DISTINCT ' . $sort_by_sql[$sort_key] . ", p.topic_id

						FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t

						WHERE t.topic_replies = 0

							AND t.topic_moved_id = 0

							AND p.topic_id = t.topic_id

							$last_post_time

							$m_approve_fid_sql

							" . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "

						$sql_sort";

					$field = 'topic_id';

				}

			break;

			case 'newposts':

				$l_search_title = $user->lang['SEARCH_NEW'];

				// force sorting

				$show_results = (request_var('sr', 'topics') == 'posts') ? 'posts' : 'topics';

				$sort_key = 't';

				$sort_dir = 'd';

				$sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';

				$sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');

				gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);

				$s_sort_key = $s_sort_dir = $u_sort_param = $s_limit_days = '';

				if ($show_results == 'posts')

				{

					$sql = 'SELECT p.post_id

						FROM ' . POSTS_TABLE . ' p

						WHERE p.post_time > ' . $user->data['user_lastvisit'] . "

							$m_approve_fid_sql

							" . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "

						$sql_sort";

					$field = 'post_id';

				}

				else

				{

					$sql = 'SELECT t.topic_id

						FROM ' . TOPICS_TABLE . ' t

						WHERE t.topic_last_post_time > ' . $user->data['user_lastvisit'] . '

							AND t.topic_moved_id = 0

							' . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '

							' . ((sizeof($ex_fid_ary)) ? 'AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . "

						$sql_sort";

					$field = 'topic_id';

				}

			break;

			case 'egosearch':

				$l_search_title = $user->lang['SEARCH_SELF'];

			break;

		}

	}

	// show_results should not change after this

	$per_page = ($show_results == 'posts') ? $config['posts_per_page'] : $config['topics_per_page'];

	$total_match_count = 0;

	if ($search_id)

	{

		if ($sql)

		{

			// only return up to 1000 ids (the last one will be removed later)

			$result = $db->sql_query_limit($sql, 1001 - $start, $start);

			while ($row = $db->sql_fetchrow($result))

			{

				$id_ary[] = $row[$field];

			}

			$db->sql_freeresult($result);

			$total_match_count = sizeof($id_ary) + $start;

			$id_ary = array_slice($id_ary, 0, $per_page);

		}

		else

		{

			$search_id = '';

		}

	}

	// make sure that some arrays are always in the same order

	sort($ex_fid_ary);

	sort($m_approve_fid_ary);

	sort($author_id_ary);

	if (!empty($search->search_query))

	{

		$total_match_count = $search->keyword_search($show_results, $search_fields, $search_terms, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);

	}

	else if (sizeof($author_id_ary))

	{

		$firstpost_only = ($search_fields === 'firstpost') ? true : false;

		$total_match_count = $search->author_search($show_results, $firstpost_only, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);

	}

	// For some searches we need to print out the "no results" page directly to allow re-sorting/refining the search options.

	if (!sizeof($id_ary) && !$search_id)

	{

		trigger_error('NO_SEARCH_RESULTS');

	}