units/files/function_search_rss.php

   1 <?php
   2
   3         global $search_exclusions;
   4
   5         if (isset($parameter) && $parameter[0] == "file") {
   6
   7                 $search_exclusions[] = "folder";
   8                 $search_exclusions[] = "file";
   9
  10                 $owner = (int) $_REQUEST['owner'];
  11                 $accessline = "(" . run("users:access_level_sql_where",$_SESSION['userid']) . ")";
  12                 $searchline_files = "$accessline and tagtype = 'file' and tag = '".addslashes($parameter[1])."'";
  13                 $searchline_folders = "$accessline and tagtype = 'folder' and tag = '".addslashes($parameter[1])."'";
  14                 $searchline_files = str_replace("access", "files.access", $searchline_files);
  15                 $searchline_files = str_replace("owner", "files.owner", $searchline_files);
  16                 $searchline_folders = str_replace("access", "file_folders.access", $searchline_folders);
  17                 $searchline_folders = str_replace("owner", "file_folders.owner", $searchline_folders);
  18                 $file_refs = db_query("select files.*, users.username, users.name as fullname, ref from tags join files on files.ident = tags.ref join users on users.ident = tags.owner where $searchline_files limit 50");
  19                 $folder_refs = db_query("select file_folders.*, users.username, users.name as fullname, ref from tags join file_folders on file_folders.ident = tags.ref join users on users.ident = tags.owner where $searchline_folders limit 50");
  20                 $searchline = "";
  21                 if (sizeof($folder_refs) > 0) {
  22                         foreach($folder_refs as $folder) {
  23                                 $run_result .= "\t<item>\n";
  24                                 $run_result .= "\t\t<title><![CDATA[". gettext("File folder") ." :: " . (stripslashes($folder->fullname)) . " :: " . (stripslashes($folder->name)) . "]]></title>\n";
  25                                 $run_result .= "\t\t<link>" . url  . htmlentities(stripslashes($folder->username)) . "/files/" . $folder->ident . "</link>\n";
  26                                 $run_result .= "\t</item>\n";
  27                         }
  28                 }
  29                 if (sizeof($file_refs) > 0) {
  30                         foreach($file_refs as $file) {
  31                                         $mimetype = run("files:mimetype:determine",$file->location);
  32                                         if ($mimetype == false) {
  33                                                 $mimetype = "application/octet-stream";
  34                                         }
  35                                         $run_result .= "\t<item>\n";
  36                                         $run_result .= "\t\t<title><![CDATA[". gettext("File") ." :: " . (stripslashes($file->fullname)) . " :: " . (stripslashes($file->title)) . "]]></title>\n";
  37                                         $run_result .= "\t\t<link>" . url  . (stripslashes($file->username)) . "/files/" . $file->folder . "/" . $file->ident . "/" . (stripslashes($file->originalname)) . "</link>\n";
  38                                         $run_result .= "\t\t<enclosure url=\"" . url  . htmlentities(stripslashes($file->username)) . "/files/" . $file->folder . "/" . $file->ident . "/" . htmlentities(stripslashes($file->originalname)) . "\" length=\"". $file->size ."\" mimetype=\"$mimetype\" />\n";
  39                                         $run_result .= "\t</item>\n";
  40                         }
  41                 }
  42
  43         }
  44
  45 ?>