Code Forge

<?php

/***************************************************************************

 *                                search.php

 *                            -------------------

 *   begin                : Saturday, Feb 13, 2001

 *   copyright            : (C) 2001 The phpBB Group

 *   email                : support@phpbb.com

 *

 *   $Id$

 *

 *

 ***************************************************************************/

/***************************************************************************

 *

 *   This program is free software; you can redistribute it and/or modify

 *   it under the terms of the GNU General Public License as published by

 *   the Free Software Foundation; either version 2 of the License, or

 *   (at your option) any later version.

 *

 ***************************************************************************/

define('IN_PHPBB', true);

$phpbb_root_path = './';

include($phpbb_root_path . 'extension.inc');

include($phpbb_root_path . 'common.'.$phpEx);

include($phpbb_root_path . 'includes/bbcode.'.$phpEx);

include($phpbb_root_path . 'includes/functions_search.'.$phpEx);

//

// Start session management

//

$userdata = session_pagestart($user_ip, PAGE_SEARCH);

init_userprefs($userdata);

//

// End session management

//

//

// Define initial vars

//

if ( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )

{

        $mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];

}

else

{

        $mode = '';

}

if ( isset($HTTP_POST_VARS['search_keywords']) || isset($HTTP_GET_VARS['search_keywords']) )

{

        $search_keywords = ( isset($HTTP_POST_VARS['search_keywords']) ) ? $HTTP_POST_VARS['search_keywords'] : $HTTP_GET_VARS['search_keywords'];

}

else

{

        $search_keywords = '';

}

if ( isset($HTTP_POST_VARS['search_author']) || isset($HTTP_GET_VARS['search_author']))

{

        $search_author = ( isset($HTTP_POST_VARS['search_author']) ) ? $HTTP_POST_VARS['search_author'] : $HTTP_GET_VARS['search_author'];

}

else

{

        $search_author = '';

}

$search_id = ( isset($HTTP_GET_VARS['search_id']) ) ? $HTTP_GET_VARS['search_id'] : '';

$show_results = ( isset($HTTP_POST_VARS['show_results']) ) ? $HTTP_POST_VARS['show_results'] : 'posts';

if ( isset($HTTP_POST_VARS['search_terms']) )

{

        $search_terms = ( $HTTP_POST_VARS['search_terms'] == 'all' ) ? 1 : 0;

}

else

{

        $search_terms = 0;

}

if ( isset($HTTP_POST_VARS['search_fields']) )

{

        $search_fields = ( $HTTP_POST_VARS['search_fields'] == 'all' ) ? 1 : 0;

}

else

{

        $search_fields = 0;

}

$return_chars = ( isset($HTTP_POST_VARS['return_chars']) ) ? intval($HTTP_POST_VARS['return_chars']) : 200;

$search_cat = ( isset($HTTP_POST_VARS['search_cat']) ) ? intval($HTTP_POST_VARS['search_cat']) : -1;

$search_forum = ( isset($HTTP_POST_VARS['search_forum']) ) ? intval($HTTP_POST_VARS['search_forum']) : -1;

$sort_by = ( isset($HTTP_POST_VARS['sort_by']) ) ? intval($HTTP_POST_VARS['sort_by']) : 0;

if ( isset($HTTP_POST_VARS['sort_dir']) )

{

        $sort_dir = ( $HTTP_POST_VARS['sort_dir'] == 'DESC' ) ? 'DESC' : 'ASC';

}

else

{

        $sort_dir =  'DESC';

}

if ( !empty($HTTP_POST_VARS['search_time']) || !empty($HTTP_GET_VARS['search_time']))

{

        $search_time = time() - ( ( ( !empty($HTTP_POST_VARS['search_time']) ) ? intval($HTTP_POST_VARS['search_time']) : intval($HTTP_GET_VARS['search_time']) ) * 86400 );

}

else

{

        $search_time = 0;

}

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;

$sort_by_types = array($lang['Sort_Time'], $lang['Sort_Post_Subject'], $lang['Sort_Topic_Title'], $lang['Sort_Author'], $lang['Sort_Forum']);

//

// encoding match for workaround

//

$multibyte_charset = 'utf-8, big5, shift_jis, euc-kr, gb2312';

//

// Begin core code

//

if ( $mode == 'searchuser' )

{

        //

        // This handles the simple windowed user search functions called from various other scripts

        //

        if ( isset($HTTP_POST_VARS['search_username']) )

        {

                username_search($HTTP_POST_VARS['search_username']);

        }

        else

        {

                username_search('');

        }

        exit;

}

else if ( $search_keywords != '' || $search_author != '' || $search_id )

{

        $store_vars = array('search_results', 'total_match_count', 'split_search', 'sort_by', 'sort_dir', 'show_results', 'return_chars');

        //

        // Cycle through options ...

        //

        if ( $search_id == 'newposts' || $search_id == 'egosearch' || $search_id == 'unanswered' || $search_keywords != '' || $search_author != '' )

        {

                if ( $search_id == 'newposts' || $search_id == 'egosearch' || ( $search_author != '' && $search_keywords == '' )  )

                {

                        if ( $search_id == 'newposts' )

                        {

                                if ( $userdata['session_logged_in'] )

                                {

                                        $sql = "SELECT post_id

                                                FROM " . POSTS_TABLE . "

                                                WHERE post_time >= " . $userdata['user_lastvisit'];

                                }

                                else

                                {

                                        header("Location: login.$phpEx?redirect=search.$phpEx&search_id=newposts", true);

                                        exit;

                                }

                                $show_results = 'topics';

                                $sort_by = 0;

                                $sort_dir = 'DESC';

                        }

                        else if ( $search_id == 'egosearch' )

                        {

                                if ( $userdata['session_logged_in'] )

                                {

                                        $sql = "SELECT post_id

                                                FROM " . POSTS_TABLE . "

                                                WHERE poster_id = " . $userdata['user_id'];;

                                }

                                else

                                {

                                        header("Location: login.$phpEx?redirect=search.$phpEx&search_id=egosearch", true);

                                        exit;

                                }

                                $show_results = 'topics';

                                $sort_by = 0;

                                $sort_dir = 'DESC';

                        }

                        else

                        {

                                $search_author = str_replace('*', '%', trim($search_author));

                                $sql = "SELECT user_id

                                        FROM " . USERS_TABLE . "

                                        WHERE username LIKE '" . str_replace("\'", "''", $search_author) . "'";

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, "Couldn't obtain list of matching users (searching for: $search_author)", "", __LINE__, __FILE__, $sql);

                                }

                                $matching_userids = '';

                                if ( $row = $db->sql_fetchrow($result) )

                                {

                                        do

                                        {

                                                $matching_userids .= ( ( $matching_userids != '' ) ? ', ' : '' ) . $row['user_id'];

                                        }

                                        while( $row = $db->sql_fetchrow($result) );

                                }

                                else

                                {

                                        message_die(GENERAL_MESSAGE, $lang['No_search_match']);

                                }

                                $sql = "SELECT post_id

                                        FROM " . POSTS_TABLE . "

                                        WHERE poster_id IN ($matching_userids)";

                        }

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain matched posts list', '', __LINE__, __FILE__, $sql);

                        }

                        $search_ids = array();

                        while( $row = $db->sql_fetchrow($result) )

                        {

                                $search_ids[] = $row['post_id'];

                        }

                        $db->sql_freeresult($result);

                        $total_match_count = count($search_ids);

                }

                else if ( $search_keywords != '' )

                {

                        $stopword_array = @file($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/search_stopwords.txt');

                        $synonym_array = @file($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/search_synonyms.txt');

                        $split_search = array();

                        $split_search = ( !strstr($multibyte_charset, $lang['ENCODING']) ) ?  split_words(clean_words('search', stripslashes($search_keywords), $stopword_array, $synonym_array), 'search') : split(' ', $search_keywords);

                        $search_msg_only = ( !$search_fields ) ? "AND m.title_match = 0" : ( ( strstr($multibyte_charset, $lang['ENCODING']) ) ? '' : '' );

                        $word_count = 0;

                        $current_match_type = 'or';

                        $word_match = array();

                        $result_list = array();

                        for($i = 0; $i < count($split_search); $i++)

                        {

                                switch ( $split_search[$i] )

                                {

                                        case 'and':

                                                $current_match_type = 'and';

                                                break;

                                        case 'or':

                                                $current_match_type = 'or';

                                                break;

                                        case 'not':

                                                $current_match_type = 'not';

                                                break;

                                        default:

                                                if ( !empty($search_terms) )

                                                {

                                                        $current_match_type = 'and';

                                                }

                                                if ( !strstr($multibyte_charset, $lang['ENCODING']) )

                                                {

                                                        $match_word = str_replace('*', '%', $split_search[$i]);

                                                        $sql = "SELECT m.post_id

                                                                FROM " . SEARCH_WORD_TABLE . " w, " . SEARCH_MATCH_TABLE . " m

                                                                WHERE w.word_text LIKE '$match_word'

                                                                        AND m.word_id = w.word_id

                                                                        AND w.word_common <> 1

                                                                        $search_msg_only";

                                                }

                                                else

                                                {

                                                        $match_word =  addslashes('%' . str_replace('*', '', $split_search[$i]) . '%');

                                                        $search_msg_only = ( $search_fields ) ? "OR post_subject LIKE '$match_word'" : '';

                                                        $sql = "SELECT post_id

                                                                FROM " . POSTS_TEXT_TABLE . "

                                                                WHERE post_text LIKE '$match_word'

                                                                $search_msg_only";

                                                }

                                                if ( !($result = $db->sql_query($sql)) )

                                                {

                                                        message_die(GENERAL_ERROR, 'Could not obtain matched posts list', '', __LINE__, __FILE__, $sql);

                                                }

                                                $row = array();

                                                while( $temp_row = $db->sql_fetchrow($result) )

                                                {

                                                        $row[$temp_row['post_id']] = 1;

                                                        if ( !$word_count )

                                                        {

                                                                $result_list[$temp_row['post_id']] = 1;

                                                        }

                                                        else if ( $current_match_type == 'or' )

                                                        {

                                                                $result_list[$temp_row['post_id']] = 1;

                                                        }

                                                        else if ( $current_match_type == 'not' )

                                                        {

                                                                $result_list[$temp_row['post_id']] = 0;

                                                        }

                                                }

                                                if ( $current_match_type == 'and' && $word_count )

                                                {

                                                        @reset($result_list);

                                                        while( list($post_id, $match_count) = @each($result_list) )

                                                        {

                                                                if ( !$row[$post_id] )

                                                                {

                                                                        $result_list[$post_id] = 0;

                                                                }

                                                        }

                                                }

                                                $word_count++;

                                                $db->sql_freeresult($result);

                                        }

                        }

                        @reset($result_list);

                        $search_ids = array();

                        while( list($post_id, $matches) = each($result_list) )

                        {

                                if ( $matches )

                                {

                                        $search_ids[] = $post_id;

                                }

                        }

                        unset($result_list);

                        $total_match_count = count($search_ids);

                }

                //

                // If user is logged in then we'll check to see which (if any) private

                // forums they are allowed to view and include them in the search.

                //

                // If not logged in we explicitly prevent searching of private forums

                //

                $auth_sql = '';

                if ( $search_forum != -1 )

                {

                        $is_auth = auth(AUTH_READ, $search_forum, $userdata);

                        if ( !$is_auth['auth_read'] )

                        {

                                message_die(GENERAL_MESSAGE, $lang['No_searchable_forums']);

                        }

                        $auth_sql = "f.forum_id = $search_forum";

                }

                else

                {

                        $is_auth_ary = auth(AUTH_READ, AUTH_LIST_ALL, $userdata);

                        if ( $search_cat != -1 )

                        {

                                $auth_sql = "f.cat_id = $search_cat";

                        }

                        $ignore_forum_sql = '';

                        while( list($key, $value) = each($is_auth_ary) )

                        {

                                if ( !$value['auth_read'] )

                                {

                                        $ignore_forum_sql .= ( ( $ignore_forum_sql != '' ) ? ', ' : '' ) . $key;

                                }

                        }

                        if ( $ignore_forum_sql != '' )

                        {

                                $auth_sql .= ( $auth_sql != '' ) ? " AND f.forum_id NOT IN ($ignore_forum_sql) " : "f.forum_id NOT IN ($ignore_forum_sql) ";

                        }

                }

                //

                // Author name search

                //

                if ( $search_author != '' )

                {

                        $search_author = str_replace('*', '%', trim(str_replace("\'", "''", $search_author)));

                }

                if ( $total_match_count )

                {

                        if ( $show_results == 'topics' )

                        {

                                $where_sql = '';

                                if ( $search_time )

                                {

                                        $where_sql .= ( $search_author == '' && $auth_sql == ''  ) ? " AND post_time >= $search_time " : " AND p.post_time >= $search_time ";

                                }

                                if ( $search_author == '' && $auth_sql == '' )

                                {

                                        $sql = "SELECT topic_id

                                                FROM " . POSTS_TABLE . "

                                                WHERE post_id IN (" . implode(", ", $search_ids) . ")

                                                        $where_sql

                                                GROUP BY topic_id";

                                }

                                else

                                {

                                        $from_sql = POSTS_TABLE . " p";

                                        if ( $search_author != '' )

                                        {

                                                $from_sql .= ", " . USERS_TABLE . " u";

                                                $where_sql .= " AND u.user_id = p.poster_id AND u.username LIKE '$search_author' ";

                                        }

                                        if ( $auth_sql != '' )

                                        {

                                                $from_sql .= ", " . FORUMS_TABLE . " f";

                                                $where_sql .= " AND f.forum_id = p.forum_id AND $auth_sql";

                                        }

                                        $sql = "SELECT p.topic_id

                                                FROM $from_sql

                                                WHERE p.post_id IN (" . implode(", ", $search_ids) . ")

                                                        $where_sql

                                                GROUP BY p.topic_id";

                                }

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not obtain topic ids', '', __LINE__, __FILE__, $sql);

                                }

                                $search_ids = array();

                                while( $row = $db->sql_fetchrow($result) )

                                {

                                        $search_ids[] = $row['topic_id'];

                                }

                                $db->sql_freeresult($result);

                                $total_match_count = sizeof($search_ids);

                        }

                        else if ( $search_author != '' || $search_time || $auth_sql != '' )

                        {

                                $where_sql = ( $search_author == '' && $auth_sql == '' ) ? 'post_id IN (' . implode(', ', $search_ids) . ')' : 'p.post_id IN (' . implode(', ', $search_ids) . ')';

                                $from_sql = (  $search_author == '' && $auth_sql == '' ) ? POSTS_TABLE : POSTS_TABLE . ' p';

                                if ( $search_time )

                                {

                                        $where_sql .= ( $search_author == '' && $auth_sql == '' ) ? " AND post_time >= $search_time " : " AND p.post_time >= $search_time";

                                }

                                if ( $auth_sql != '' )

                                {

                                        $from_sql .= ", " . FORUMS_TABLE . " f";

                                        $where_sql .= " AND f.forum_id = p.forum_id AND $auth_sql";

                                }

                                if ( $search_author != '' )

                                {

                                        $from_sql .= ", " . USERS_TABLE . " u";

                                        $where_sql .= " AND u.user_id = p.poster_id AND u.username LIKE '$search_author'";

                                }

                                $sql = "SELECT p.post_id

                                        FROM $from_sql

                                        WHERE $where_sql";

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not obtain post ids', '', __LINE__, __FILE__, $sql);

                                }

                                $search_ids = array();

                                while( $row = $db->sql_fetchrow($result) )

                                {

                                        $search_ids[] = $row['post_id'];

                                }

                                $db->sql_freeresult($result);

                                $total_match_count = count($search_ids);

                        }

                }

                else if ( $search_id == 'unanswered' )

                {

                        if ( $auth_sql != '' )

                        {

                                $sql = "SELECT t.topic_id, f.forum_id

                                        FROM " . TOPICS_TABLE . "  t, " . FORUMS_TABLE . " f

                                        WHERE t.topic_replies = 0

                                                AND t.forum_id = f.forum_id

                                                AND t.topic_moved_id = 0

                                                AND $auth_sql";

                        }

                        else

                        {

                                $sql = "SELECT topic_id

                                        FROM " . TOPICS_TABLE . "

                                        WHERE topic_replies = 0

                                                AND topic_moved_id = 0";

                        }

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain post ids', '', __LINE__, __FILE__, $sql);

                        }

                        $search_ids = array();

                        while( $row = $db->sql_fetchrow($result) )

                        {

                                $search_ids[] = $row['topic_id'];

                        }

                        $db->sql_freeresult($result);

                        $total_match_count = count($search_ids);

                        //

                        // Basic requirements

                        //

                        $show_results = 'topics';

                        $sort_by = 0;

                        $sort_dir = 'DESC';

                }

                else

                {

                        message_die(GENERAL_MESSAGE, $lang['No_search_match']);

                }

                //

                // Finish building query (for all combinations)

                // and run it ...

                //

                $sql = "SELECT session_id

                        FROM " . SESSIONS_TABLE;

                if ( $result = $db->sql_query($sql) )

                {

                        $delete_search_ids = array();

                        while( $row = $db->sql_fetchrow($result) )

                        {

                                $delete_search_ids[] = "'" . $row['session_id'] . "'";

                        }

                        if ( count($delete_search_ids) )

                        {

                                $sql = "DELETE FROM " . SEARCH_TABLE . "

                                        WHERE session_id NOT IN (" . implode(", ", $delete_search_ids) . ")";

                                if ( !$result = $db->sql_query($sql) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not delete old search id sessions', '', __LINE__, __FILE__, $sql);

                                }

                        }

                }

                //

                // Store new result data

                //

                $search_results = implode(', ', $search_ids);

                $per_page = ( $show_results == 'posts' ) ? $board_config['posts_per_page'] : $board_config['topics_per_page'];

                //

                // Combine both results and search data (apart from original query)

                // so we can serialize it and place it in the DB

                //

                $store_search_data = array();

                for($i = 0; $i < count($store_vars); $i++)

                {

                        $store_search_data[$store_vars[$i]] = $$store_vars[$i];

                }

                $result_array = serialize($store_search_data);

                unset($store_search_data);

                mt_srand ((double) microtime() * 1000000);

                $search_id = mt_rand();

                $sql = "UPDATE " . SEARCH_TABLE . "

                        SET search_id = $search_id, search_array = '$result_array'

                        WHERE session_id = '" . $userdata['session_id'] . "'";

                if ( !($result = $db->sql_query($sql)) || !$db->sql_affectedrows() )

                {

                        $sql = "INSERT INTO " . SEARCH_TABLE . " (search_id, session_id, search_array)

                                VALUES($search_id, '" . $userdata['session_id'] . "', '" . str_replace("\'", "''", $result_array) . "')";

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not insert search results', '', __LINE__, __FILE__, $sql);

                        }

                }

        }

        else

        {

                if ( intval($search_id) )

                {

                        $sql = "SELECT search_array

                                FROM " . SEARCH_TABLE . "

                                WHERE search_id = $search_id

                                        AND session_id = '". $userdata['session_id'] . "'";

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain search results', '', __LINE__, __FILE__, $sql);

                        }

                        if ( $row = $db->sql_fetchrow($result) )

                        {

                                $search_data = unserialize($row['search_array']);

                                for($i = 0; $i < count($store_vars); $i++)

                                {

                                        $$store_vars[$i] = $search_data[$store_vars[$i]];

                                }

                        }

                }

        }

        //

        // Look up data ...

        //

        if ( $search_results != '' )

        {

                if ( $show_results == 'posts' )

                {

                        $sql = "SELECT pt.post_text, pt.bbcode_uid, pt.post_subject, p.*, f.forum_id, f.forum_name, t.*, u.username, u.user_id, u.user_sig, u.user_sig_bbcode_uid

                                FROM " . FORUMS_TABLE . " f, " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TEXT_TABLE . " pt

                                WHERE p.post_id IN ($search_results)

                                        AND pt.post_id = p.post_id

                                        AND f.forum_id = p.forum_id

                                        AND p.topic_id = t.topic_id

                                        AND p.poster_id = u.user_id";

                }

                else

                {

                        $sql = "SELECT t.*, f.forum_id, f.forum_name, u.username, u.user_id, u2.username as user2, u2.user_id as id2, p.post_username, p2.post_username AS post_username2, p2.post_time

                                FROM " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TABLE . " p2, " . USERS_TABLE . " u2

                                WHERE t.topic_id IN ($search_results)

                                        AND t.topic_poster = u.user_id

                                        AND f.forum_id = t.forum_id

                                        AND p.post_id = t.topic_first_post_id

                                        AND p2.post_id = t.topic_last_post_id

                                        AND u2.user_id = p2.poster_id";

                }

                $per_page = ( $show_results == 'posts' ) ? $board_config['posts_per_page'] : $board_config['topics_per_page'];

                $sql .= " ORDER BY ";

                switch ( $sort_by )

                {

                        case 1:

                                $sql .= ( $show_results == 'posts' ) ? 'pt.post_subject' : 't.topic_title';

                                break;

                        case 2:

                                $sql .= 't.topic_title';

                                break;

                        case 3:

                                $sql .= 'u.username';

                                break;

                        case 4:

                                $sql .= 'f.forum_id';

                                break;

                        default:

                                $sql .= ( $show_results == 'posts' ) ? 'p.post_time' : 'p2.post_time';

                                break;

                }

                $sql .= " $sort_dir LIMIT $start, " . $per_page;

                if ( !$result = $db->sql_query($sql) )

                {

                        message_die(GENERAL_ERROR, 'Could not obtain search results', '', __LINE__, __FILE__, $sql);

                }

                $searchset = array();

                while( $row = $db->sql_fetchrow($result) )

                {

                        $searchset[] = $row;

                }

                $db->sql_freeresult($result);

                //

                // Define censored word matches

                //

                $orig_word = array();

                $replacement_word = array();

                obtain_word_list($orig_word, $replacement_word);

                //

                // Output header

                //

                $page_title = $lang['Search'];

                include($phpbb_root_path . 'includes/page_header.'.$phpEx);

                if ( $show_results == 'posts' )

                {

                        $template->set_filenames(array(

                                'body' => 'search_results_posts.tpl')

                        );

                }

                else

                {

                        $template->set_filenames(array(

                                'body' => 'search_results_topics.tpl')

                        );

                }

                make_jumpbox('viewforum.'.$phpEx);