phpBB/search.php

   1 <?php
   2 /**
   3 *
   4 * @package phpBB3
   5 * @version $Id$
   6 * @copyright (c) 2005 phpBB Group
   7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
   8 *
   9 */
  10
  11 /**
  12 * @ignore
  13 */
  14 define('IN_PHPBB', true);
  15 if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');
  16 if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));
  17 include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);
  18
  19 // Start session management
  20 $user->session_begin();
  21 $auth->acl($user->data);
  22 $user->setup('search');
  23
  24 // Define initial vars
  25 $mode                   = request_var('mode', '');
  26 $search_id              = request_var('search_id', '');
  27 $start                  = max(request_var('start', 0), 0);
  28 $post_id                = request_var('p', 0);
  29 $topic_id               = request_var('t', 0);
  30 $view                   = request_var('view', '');
  31
  32 $submit                 = request_var('submit', false);
  33 $keywords               = utf8_normalize_nfc(request_var('keywords', '', true));
  34 $add_keywords   = utf8_normalize_nfc(request_var('add_keywords', '', true));
  35 $author                 = request_var('author', '', true);
  36 $author_id              = request_var('author_id', 0);
  37 $show_results   = ($topic_id) ? 'posts' : request_var('sr', 'posts');
  38 $show_results   = ($show_results == 'posts') ? 'posts' : 'topics';
  39 $search_terms   = request_var('terms', 'all');
  40 $search_fields  = request_var('sf', 'all');
  41 $search_child   = request_var('sc', true);
  42
  43 $sort_days              = request_var('st', 0);
  44 $sort_key               = request_var('sk', 't');
  45 $sort_dir               = request_var('sd', 'd');
  46
  47 $return_chars   = request_var('ch', ($topic_id) ? -1 : 300);
  48 $search_forum   = request_var('fid', array(0));
  49
  50 // Is user able to search? Has search been disabled?
  51 if (!$auth->acl_get('u_search') || !$auth->acl_getf_global('f_search') || !$config['load_search'])
  52 {
  53         $template->assign_var('S_NO_SEARCH', true);
  54         trigger_error('NO_SEARCH');
  55 }
  56
  57 // Check search load limit
  58 if ($user->load && $config['limit_search_load'] && ($user->load > doubleval($config['limit_search_load'])))
  59 {
  60         $template->assign_var('S_NO_SEARCH', true);
  61         trigger_error('NO_SEARCH_TIME');
  62 }
  63
  64 // Check flood limit ... if applicable
  65 $interval = ($user->data['user_id'] == ANONYMOUS) ? $config['search_anonymous_interval'] : $config['search_interval'];
  66 if ($interval && !$auth->acl_get('u_ignoreflood'))
  67 {
  68         if ($user->data['user_last_search'] > time() - $interval)
  69         {
  70                 $template->assign_var('S_NO_SEARCH', true);
  71                 trigger_error('NO_SEARCH_TIME');
  72         }
  73 }
  74
  75 // Define some vars
  76 $limit_days             = array(0 => $user->lang['ALL_RESULTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 365 => $user->lang['1_YEAR']);
  77 $sort_by_text   = array('a' => $user->lang['SORT_AUTHOR'], 't' => $user->lang['SORT_TIME'], 'f' => $user->lang['SORT_FORUM'], 'i' => $user->lang['SORT_TOPIC_TITLE'], 's' => $user->lang['SORT_POST_SUBJECT']);
  78
  79 $s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';
  80 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
  81
  82 if ($keywords || $author || $author_id || $search_id || $submit)
  83 {
  84         // clear arrays
  85         $id_ary = array();
  86
  87         // egosearch is an author search
  88         if ($search_id == 'egosearch')
  89         {
  90                 $author_id = $user->data['user_id'];
  91
  92                 if ($user->data['user_id'] == ANONYMOUS)
  93                 {
  94                         login_box('', $user->lang['LOGIN_EXPLAIN_EGOSEARCH']);
  95                 }
  96         }
  97
  98         // If we are looking for authors get their ids
  99         $author_id_ary = array();
 100         if ($author_id)
 101         {
 102                 $author_id_ary[] = $author_id;
 103         }
 104         else if ($author)
 105         {
 106                 if ((strpos($author, '*') !== false) && (utf8_strlen(str_replace(array('*', '%'), '', $author)) < $config['min_search_author_chars']))
 107                 {
 108                         trigger_error(sprintf($user->lang['TOO_FEW_AUTHOR_CHARS'], $config['min_search_author_chars']));
 109                 }
 110
 111                 $sql_where = (strpos($author, '*') !== false) ? ' username_clean ' . $db->sql_like_expression(str_replace('*', $db->any_char, utf8_clean_string($author))) : " username_clean = '" . $db->sql_escape(utf8_clean_string($author)) . "'";
 112
 113                 $sql = 'SELECT user_id
 114                         FROM ' . USERS_TABLE . "
 115                         WHERE $sql_where
 116                                 AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';
 117                 $result = $db->sql_query_limit($sql, 100);
 118
 119                 while ($row = $db->sql_fetchrow($result))
 120                 {
 121                         $author_id_ary[] = (int) $row['user_id'];
 122                 }
 123                 $db->sql_freeresult($result);
 124
 125                 if (!sizeof($author_id_ary))
 126                 {
 127                         trigger_error('NO_SEARCH_RESULTS');
 128                 }
 129         }
 130
 131         // if we search in an existing search result just add the additional keywords. But we need to use "all search terms"-mode
 132         // so we can keep the old keywords in their old mode, but add the new ones as required words
 133         if ($add_keywords)
 134         {
 135                 if ($search_terms == 'all')
 136                 {
 137                         $keywords .= ' ' . $add_keywords;
 138                 }
 139                 else
 140                 {
 141                         $search_terms = 'all';
 142                         $keywords = implode(' |', explode(' ', preg_replace('#\s+#u', ' ', $keywords))) . ' ' .$add_keywords;
 143                 }
 144         }
 145
 146         // Which forums should not be searched? Author searches are also carried out in unindexed forums
 147         if (empty($keywords) && sizeof($author_id_ary))
 148         {
 149                 $ex_fid_ary = array_keys($auth->acl_getf('!f_read', true));
 150         }
 151         else
 152         {
 153                 $ex_fid_ary = array_unique(array_merge(array_keys($auth->acl_getf('!f_read', true)), array_keys($auth->acl_getf('!f_search', true))));
 154         }
 155
 156         $not_in_fid = (sizeof($ex_fid_ary)) ? 'WHERE ' . $db->sql_in_set('f.forum_id', $ex_fid_ary, true) . " OR (f.forum_password <> '' AND fa.user_id <> " . (int) $user->data['user_id'] . ')' : "";
 157
 158         $sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.right_id, f.forum_password, fa.user_id
 159                 FROM ' . FORUMS_TABLE . ' f
 160                 LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id
 161                         AND fa.session_id = '" . $db->sql_escape($user->session_id) . "')
 162                 $not_in_fid
 163                 ORDER BY f.left_id";
 164         $result = $db->sql_query($sql);
 165
 166         $right_id = 0;
 167         $reset_search_forum = true;
 168         while ($row = $db->sql_fetchrow($result))
 169         {
 170                 if ($row['forum_password'] && $row['user_id'] != $user->data['user_id'])
 171                 {
 172                         $ex_fid_ary[] = (int) $row['forum_id'];
 173                         continue;
 174                 }
 175
 176                 if (sizeof($search_forum))
 177                 {
 178                         if ($search_child)
 179                         {
 180                                 if (in_array($row['forum_id'], $search_forum) && $row['right_id'] > $right_id)
 181                                 {
 182                                         $right_id = (int) $row['right_id'];
 183                                 }
 184                                 else if ($row['right_id'] < $right_id)
 185                                 {
 186                                         continue;
 187                                 }
 188                         }
 189
 190                         if (!in_array($row['forum_id'], $search_forum))
 191                         {
 192                                 $ex_fid_ary[] = (int) $row['forum_id'];
 193                                 $reset_search_forum = false;
 194                         }
 195                 }
 196         }
 197         $db->sql_freeresult($result);
 198
 199         // find out in which forums the user is allowed to view approved posts
 200         if ($auth->acl_get('m_approve'))
 201         {
 202                 $m_approve_fid_ary = array(-1);
 203                 $m_approve_fid_sql = '';
 204         }
 205         else if ($auth->acl_getf_global('m_approve'))
 206         {
 207                 $m_approve_fid_ary = array_diff(array_keys($auth->acl_getf('!m_approve', true)), $ex_fid_ary);
 208                 $m_approve_fid_sql = ' AND (p.post_approved = 1' . ((sizeof($m_approve_fid_ary)) ? ' OR ' . $db->sql_in_set('p.forum_id', $m_approve_fid_ary, true) : '') . ')';
 209         }
 210         else
 211         {
 212                 $m_approve_fid_ary = array();
 213                 $m_approve_fid_sql = ' AND p.post_approved = 1';
 214         }
 215
 216         if ($reset_search_forum)
 217         {
 218                 $search_forum = array();
 219         }
 220
 221         // Select which method we'll use to obtain the post_id or topic_id information
 222         $search_type = basename($config['search_type']);
 223
 224         if (!file_exists(PHPBB_ROOT_PATH . 'includes/search/' . $search_type . '.' . PHP_EXT))
 225         {
 226                 trigger_error('NO_SUCH_SEARCH_MODULE');
 227         }
 228
 229         require(PHPBB_ROOT_PATH . "includes/search/$search_type." . PHP_EXT);
 230
 231         // We do some additional checks in the module to ensure it can actually be utilised
 232         $error = false;
 233         $search = new $search_type($error);
 234
 235         if ($error)
 236         {
 237                 trigger_error($error);
 238         }
 239
 240         // let the search module split up the keywords
 241         if ($keywords)
 242         {
 243                 $correct_query = $search->split_keywords($keywords, $search_terms);
 244                 if (!$correct_query || (empty($search->search_query) && !sizeof($author_id_ary) && !$search_id))
 245                 {
 246                         $ignored = (sizeof($search->common_words)) ? sprintf($user->lang['IGNORED_TERMS_EXPLAIN'], implode(' ', $search->common_words)) . '<br />' : '';
 247                         trigger_error($ignored . sprintf($user->lang['NO_KEYWORDS'], $search->word_length['min'], $search->word_length['max']));
 248                 }
 249         }
 250
 251         if (!$keywords && sizeof($author_id_ary))
 252         {
 253                 // if it is an author search we want to show topics by default
 254                 $show_results = ($topic_id) ? 'posts' : request_var('sr', ($search_id == 'egosearch') ? 'topics' : 'posts');
 255                 $show_results = ($show_results == 'posts') ? 'posts' : 'topics';
 256         }
 257
 258         // define some variables needed for retrieving post_id/topic_id information
 259         $sort_by_sql = array('a' => 'u.username_clean', 't' => (($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time'), 'f' => 'f.forum_id', 'i' => 't.topic_title', 's' => (($show_results == 'posts') ? 'p.post_subject' : 't.topic_title'));
 260
 261         // pre-made searches
 262         $sql = $field = $l_search_title = '';
 263         if ($search_id)
 264         {
 265                 switch ($search_id)
 266                 {
 267                         // Oh holy Bob, bring us some activity...
 268                         case 'active_topics':
 269                                 $l_search_title = $user->lang['SEARCH_ACTIVE_TOPICS'];
 270                                 $show_results = 'topics';
 271                                 $sort_key = 't';
 272                                 $sort_dir = 'd';
 273                                 $sort_days = request_var('st', 7);
 274                                 $sort_by_sql['t'] = 't.topic_last_post_time';
 275
 276                                 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
 277                                 $s_sort_key = $s_sort_dir = '';
 278
 279                                 $last_post_time_sql = ($sort_days) ? ' AND t.topic_last_post_time > ' . (time() - ($sort_days * 24 * 3600)) : '';
 280
 281                                 $sql = 'SELECT t.topic_last_post_time, t.topic_id
 282                                         FROM ' . TOPICS_TABLE . " t
 283                                         WHERE t.topic_moved_id = 0
 284                                                 $last_post_time_sql
 285                                                 " . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '
 286                                                 ' . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . '
 287                                         ORDER BY t.topic_last_post_time DESC';
 288                                 $field = 'topic_id';
 289                         break;
 290
 291                         case 'unanswered':
 292                                 $l_search_title = $user->lang['SEARCH_UNANSWERED'];
 293                                 $show_results = request_var('sr', 'topics');
 294                                 $show_results = ($show_results == 'posts') ? 'posts' : 'topics';
 295                                 $sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';
 296                                 $sort_by_sql['s'] = ($show_results == 'posts') ? 'p.post_subject' : 't.topic_title';
 297                                 $sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');
 298
 299                                 $sort_join = ($sort_key == 'f') ? FORUMS_TABLE . ' f, ' : '';
 300                                 $sql_sort = ($sort_key == 'f') ? ' AND f.forum_id = p.forum_id ' . $sql_sort : $sql_sort;
 301
 302                                 if ($sort_days)
 303                                 {
 304                                         $last_post_time = 'AND p.post_time > ' . (time() - ($sort_days * 24 * 3600));
 305                                 }
 306                                 else
 307                                 {
 308                                         $last_post_time = '';
 309                                 }
 310
 311
 312                                 if ($sort_key == 'a')
 313                                 {
 314                                         $sort_join = USERS_TABLE . ' u, ';
 315                                         $sql_sort = ' AND u.user_id = p.poster_id ' . $sql_sort;
 316                                 }
 317                                 if ($show_results == 'posts')
 318                                 {
 319                                         $sql = "SELECT p.post_id
 320                                                 FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t
 321                                                 WHERE t.topic_replies = 0
 322                                                         AND p.topic_id = t.topic_id
 323                                                         $last_post_time
 324                                                         $m_approve_fid_sql
 325                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 326                                                         $sql_sort";
 327                                         $field = 'post_id';
 328                                 }
 329                                 else
 330                                 {
 331                                         $sql = 'SELECT DISTINCT ' . $sort_by_sql[$sort_key] . ", p.topic_id
 332                                                 FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t
 333                                                 WHERE t.topic_replies = 0
 334                                                         AND t.topic_moved_id = 0
 335                                                         AND p.topic_id = t.topic_id
 336                                                         $last_post_time
 337                                                         $m_approve_fid_sql
 338                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 339                                                 $sql_sort";
 340                                         $field = 'topic_id';
 341                                 }
 342                         break;
 343
 344                         case 'newposts':
 345                                 $l_search_title = $user->lang['SEARCH_NEW'];
 346                                 // force sorting
 347                                 $show_results = (request_var('sr', 'topics') == 'posts') ? 'posts' : 'topics';
 348                                 $sort_key = 't';
 349                                 $sort_dir = 'd';
 350                                 $sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';
 351                                 $sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');
 352
 353                                 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
 354                                 $s_sort_key = $s_sort_dir = $u_sort_param = $s_limit_days = '';
 355
 356                                 if ($show_results == 'posts')
 357                                 {
 358                                         $sql = 'SELECT p.post_id
 359                                                 FROM ' . POSTS_TABLE . ' p
 360                                                 WHERE p.post_time > ' . $user->data['user_lastvisit'] . "
 361                                                         $m_approve_fid_sql
 362                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 363                                                 $sql_sort";
 364                                         $field = 'post_id';
 365                                 }
 366                                 else
 367                                 {
 368                                         $sql = 'SELECT t.topic_id
 369                                                 FROM ' . TOPICS_TABLE . ' t
 370                                                 WHERE t.topic_last_post_time > ' . $user->data['user_lastvisit'] . '
 371                                                         AND t.topic_moved_id = 0
 372                                                         ' . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '
 373                                                         ' . ((sizeof($ex_fid_ary)) ? 'AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . "
 374                                                 $sql_sort";
 375                                         $field = 'topic_id';
 376                                 }
 377                         break;
 378
 379                         case 'egosearch':
 380                                 $l_search_title = $user->lang['SEARCH_SELF'];
 381                         break;
 382                 }
 383         }
 384
 385         // show_results should not change after this
 386         $per_page = ($show_results == 'posts') ? $config['posts_per_page'] : $config['topics_per_page'];
 387         $total_match_count = 0;
 388
 389         if ($search_id)
 390         {
 391                 if ($sql)
 392                 {
 393                         // only return up to 1000 ids (the last one will be removed later)
 394                         $result = $db->sql_query_limit($sql, 1001 - $start, $start);
 395
 396                         while ($row = $db->sql_fetchrow($result))
 397                         {
 398                                 $id_ary[] = $row[$field];
 399                         }
 400                         $db->sql_freeresult($result);
 401
 402                         $total_match_count = sizeof($id_ary) + $start;
 403                         $id_ary = array_slice($id_ary, 0, $per_page);
 404                 }
 405                 else
 406                 {
 407                         $search_id = '';
 408                 }
 409         }
 410
 411         // make sure that some arrays are always in the same order
 412         sort($ex_fid_ary);
 413         sort($m_approve_fid_ary);
 414         sort($author_id_ary);
 415
 416         if (!empty($search->search_query))
 417         {
 418                 $total_match_count = $search->keyword_search($show_results, $search_fields, $search_terms, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);
 419         }
 420         else if (sizeof($author_id_ary))
 421         {
 422                 $firstpost_only = ($search_fields === 'firstpost') ? true : false;
 423                 $total_match_count = $search->author_search($show_results, $firstpost_only, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);
 424         }
 425
 426         // For some searches we need to print out the "no results" page directly to allow re-sorting/refining the search options.
 427         if (!sizeof($id_ary) && !$search_id)
 428         {
 429                 trigger_error('NO_SEARCH_RESULTS');
 430         }
 431
 432         $sql_where = '';
 433
 434         if (sizeof($id_ary))
 435         {
 436                 $sql_where .= $db->sql_in_set(($show_results == 'posts') ? 'p.post_id' : 't.topic_id', $id_ary);
 437                 $sql_where .= (sizeof($ex_fid_ary)) ? ' AND (' . $db->sql_in_set('f.forum_id', $ex_fid_ary, true) . ' OR f.forum_id IS NULL)' : '';
 438                 $sql_where .= ($show_results == 'posts') ? $m_approve_fid_sql : str_replace(array('p.post_approved', 'p.forum_id'), array('t.topic_approved', 't.forum_id'), $m_approve_fid_sql);
 439         }
 440
 441         if ($show_results == 'posts')
 442         {
 443                 include(PHPBB_ROOT_PATH . 'includes/functions_posting.' . PHP_EXT);
 444         }
 445         else
 446         {
 447                 include(PHPBB_ROOT_PATH . 'includes/functions_display.' . PHP_EXT);
 448         }
 449
 450         $user->add_lang('viewtopic');
 451
 452         // Grab icons
 453         $icons = cache::obtain_icons();
 454
 455         // Output header
 456         if ($search_id && ($total_match_count > 1000))
 457         {
 458                 // limit the number to 1000 for pre-made searches
 459                 $total_match_count--;
 460                 $l_search_matches = sprintf($user->lang['FOUND_MORE_SEARCH_MATCHES'], $total_match_count);
 461         }
 462         else
 463         {
 464                 $l_search_matches = ($total_match_count == 1) ? sprintf($user->lang['FOUND_SEARCH_MATCH'], $total_match_count) : sprintf($user->lang['FOUND_SEARCH_MATCHES'], $total_match_count);
 465         }
 466
 467         // define some vars for urls
 468         $hilit = implode('|', explode(' ', preg_replace('#\s+#u', ' ', str_replace(array('+', '-', '|', '(', ')', '&quot;'), ' ', $keywords))));
 469         // Do not allow *only* wildcard being used for hilight
 470         $hilit = (strspn($hilit, '*') === strlen($hilit)) ? '' : $hilit;
 471
 472         $u_hilit = urlencode(htmlspecialchars_decode(str_replace('|', ' ', $hilit)));
 473         $u_show_results = ($show_results != 'posts') ? '&amp;sr=' . $show_results : '';
 474         $u_search_forum = implode('&amp;fid%5B%5D=', $search_forum);
 475
 476         $u_search = append_sid('search', $u_sort_param . $u_show_results);
 477         $u_search .= ($search_id) ? '&amp;search_id=' . $search_id : '';
 478         $u_search .= ($u_hilit) ? '&amp;keywords=' . urlencode(htmlspecialchars_decode($search->search_query)) : '';
 479         $u_search .= ($topic_id) ? '&amp;t=' . $topic_id : '';
 480         $u_search .= ($author) ? '&amp;author=' . urlencode(htmlspecialchars_decode($author)) : '';
 481         $u_search .= ($author_id) ? '&amp;author_id=' . $author_id : '';
 482         $u_search .= ($u_search_forum) ? '&amp;fid%5B%5D=' . $u_search_forum : '';
 483         $u_search .= (!$search_child) ? '&amp;sc=0' : '';
 484         $u_search .= ($search_fields != 'all') ? '&amp;sf=' . $search_fields : '';
 485         $u_search .= ($return_chars != 300) ? '&amp;ch=' . $return_chars : '';
 486
 487         $template->assign_vars(array(
 488                 'SEARCH_TITLE'          => $l_search_title,
 489                 'SEARCH_MATCHES'        => $l_search_matches,
 490                 'SEARCH_WORDS'          => $search->search_query,
 491                 'IGNORED_WORDS'         => (sizeof($search->common_words)) ? implode(' ', $search->common_words) : '',
 492                 'PAGINATION'            => generate_pagination($u_search, $total_match_count, $per_page, $start),
 493                 'PAGE_NUMBER'           => on_page($total_match_count, $per_page, $start),
 494                 'TOTAL_MATCHES'         => $total_match_count,
 495                 'SEARCH_IN_RESULTS'     => ($search_id) ? false : true,
 496
 497                 'S_SELECT_SORT_DIR'             => $s_sort_dir,
 498                 'S_SELECT_SORT_KEY'             => $s_sort_key,
 499                 'S_SELECT_SORT_DAYS'    => $s_limit_days,
 500                 'S_SEARCH_ACTION'               => $u_search,
 501                 'S_SHOW_TOPICS'                 => ($show_results == 'posts') ? false : true,
 502
 503                 'GOTO_PAGE_IMG'         => $user->img('icon_post_target', 'GOTO_PAGE'),
 504                 'NEWEST_POST_IMG'       => $user->img('icon_topic_newest', 'VIEW_NEWEST_POST'),
 505                 'REPORTED_IMG'          => $user->img('icon_topic_reported', 'TOPIC_REPORTED'),
 506                 'UNAPPROVED_IMG'        => $user->img('icon_topic_unapproved', 'TOPIC_UNAPPROVED'),
 507                 'LAST_POST_IMG'         => $user->img('icon_topic_latest', 'VIEW_LATEST_POST'),
 508
 509                 'U_SEARCH_WORDS'        => $u_search,
 510         ));
 511
 512         if ($sql_where)
 513         {
 514                 if ($show_results == 'posts')
 515                 {
 516                         // @todo Joining this query to the one below?
 517                         $sql = 'SELECT zebra_id, friend, foe
 518                                 FROM ' . ZEBRA_TABLE . '
 519                                 WHERE user_id = ' . $user->data['user_id'];
 520                         $result = $db->sql_query($sql);
 521
 522                         $zebra = array();
 523                         while ($row = $db->sql_fetchrow($result))
 524                         {
 525                                 $zebra[($row['friend']) ? 'friend' : 'foe'][] = $row['zebra_id'];
 526                         }
 527                         $db->sql_freeresult($result);
 528
 529                         $sql = 'SELECT p.*, f.forum_id, f.forum_name, t.*, u.username, u.username_clean, u.user_sig, u.user_sig_bbcode_uid, u.user_colour
 530                                 FROM ' . POSTS_TABLE . ' p
 531                                         LEFT JOIN ' . TOPICS_TABLE . ' t ON (p.topic_id = t.topic_id)
 532                                         LEFT JOIN ' . FORUMS_TABLE . ' f ON (p.forum_id = f.forum_id)
 533                                         LEFT JOIN ' . USERS_TABLE . " u ON (p.poster_id = u.user_id)
 534                                 WHERE $sql_where";
 535                 }
 536                 else
 537                 {
 538                         $sql_from = TOPICS_TABLE . ' t
 539                                 LEFT JOIN ' . FORUMS_TABLE . ' f ON (f.forum_id = t.forum_id)
 540                                 ' . (($sort_key == 'a') ? ' LEFT JOIN ' . USERS_TABLE . ' u ON (u.user_id = t.topic_poster) ' : '');
 541                         $sql_select = 't.*, f.forum_id, f.forum_name';
 542
 543                         if ($user->data['is_registered'])
 544                         {
 545                                 if ($config['load_db_track'])
 546                                 {
 547                                         $sql_from .= ' LEFT JOIN ' . TOPICS_POSTED_TABLE . ' tp ON (tp.user_id = ' . $user->data['user_id'] . '
 548                                                 AND t.topic_id = tp.topic_id)';
 549                                         $sql_select .= ', tp.topic_posted';
 550                                 }
 551
 552                                 if ($config['load_db_lastread'])
 553                                 {
 554                                         $sql_from .= ' LEFT JOIN ' . TOPICS_TRACK_TABLE . ' tt ON (tt.user_id = ' . $user->data['user_id'] . '
 555                                                         AND t.topic_id = tt.topic_id)
 556                                                 LEFT JOIN ' . FORUMS_TRACK_TABLE . ' ft ON (ft.user_id = ' . $user->data['user_id'] . '
 557                                                         AND ft.forum_id = f.forum_id)';
 558                                         $sql_select .= ', tt.mark_time, ft.mark_time as f_mark_time';
 559                                 }
 560                         }
 561
 562                         if ($config['load_anon_lastread'] || ($user->data['is_registered'] && !$config['load_db_lastread']))
 563                         {
 564                                 $tracking_topics = (isset($_COOKIE[$config['cookie_name'] . '_track'])) ? ((STRIP) ? stripslashes($_COOKIE[$config['cookie_name'] . '_track']) : $_COOKIE[$config['cookie_name'] . '_track']) : '';
 565                                 $tracking_topics = ($tracking_topics) ? tracking_unserialize($tracking_topics) : array();
 566                         }
 567
 568                         $sql = "SELECT $sql_select
 569                                 FROM $sql_from
 570                                 WHERE $sql_where";
 571                 }
 572                 $sql .= ' ORDER BY ' . $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ? 'DESC' : 'ASC');
 573                 $result = $db->sql_query($sql);
 574                 $result_topic_id = 0;
 575
 576                 $rowset = array();
 577
 578                 if ($show_results == 'topics')
 579                 {
 580                         $forums = $rowset = $shadow_topic_list = array();
 581                         while ($row = $db->sql_fetchrow($result))
 582                         {
 583                                 if ($row['topic_status'] == ITEM_MOVED)
 584                                 {
 585                                         $shadow_topic_list[$row['topic_moved_id']] = $row['topic_id'];
 586                                 }
 587
 588                                 $rowset[$row['topic_id']] = $row;
 589
 590                                 if (!isset($forums[$row['forum_id']]) && $user->data['is_registered'] && $config['load_db_lastread'])
 591                                 {
 592                                         $forums[$row['forum_id']]['mark_time'] = $row['f_mark_time'];
 593                                 }
 594                                 $forums[$row['forum_id']]['topic_list'][] = $row['topic_id'];
 595                                 $forums[$row['forum_id']]['rowset'][$row['topic_id']] = &$rowset[$row['topic_id']];
 596                         }
 597                         $db->sql_freeresult($result);
 598
 599                         // If we have some shadow topics, update the rowset to reflect their topic information
 600                         if (sizeof($shadow_topic_list))
 601                         {
 602                                 $sql = 'SELECT *
 603                                         FROM ' . TOPICS_TABLE . '
 604                                         WHERE ' . $db->sql_in_set('topic_id', array_keys($shadow_topic_list));
 605                                 $result = $db->sql_query($sql);
 606
 607                                 while ($row = $db->sql_fetchrow($result))
 608                                 {
 609                                         $orig_topic_id = $shadow_topic_list[$row['topic_id']];
 610
 611                                         // We want to retain some values
 612                                         $row = array_merge($row, array(
 613                                                 'topic_moved_id'        => $rowset[$orig_topic_id]['topic_moved_id'],
 614                                                 'topic_status'          => $rowset[$orig_topic_id]['topic_status'],
 615                                                 'forum_name'            => $rowset[$orig_topic_id]['forum_name'])
 616                                         );
 617
 618                                         $rowset[$orig_topic_id] = $row;
 619                                 }
 620                                 $db->sql_freeresult($result);
 621                         }
 622                         unset($shadow_topic_list);
 623
 624                         foreach ($forums as $forum_id => $forum)
 625                         {
 626                                 if ($user->data['is_registered'] && $config['load_db_lastread'])
 627                                 {
 628                                         $topic_tracking_info[$forum_id] = get_topic_tracking($forum_id, $forum['topic_list'], $forum['rowset'], array($forum_id => $forum['mark_time']), ($forum_id) ? false : $forum['topic_list']);
 629                                 }
 630                                 else if ($config['load_anon_lastread'] || $user->data['is_registered'])
 631                                 {
 632                                         $topic_tracking_info[$forum_id] = get_complete_topic_tracking($forum_id, $forum['topic_list'], ($forum_id) ? false : $forum['topic_list']);
 633
 634                                         if (!$user->data['is_registered'])
 635                                         {
 636                                                 $user->data['user_lastmark'] = (isset($tracking_topics['l'])) ? (int) (base_convert($tracking_topics['l'], 36, 10) + $config['board_startdate']) : 0;
 637                                         }
 638                                 }
 639                         }
 640                         unset($forums);
 641                 }
 642                 else
 643                 {
 644                         $bbcode_bitfield = $text_only_message = '';
 645                         $attach_list = array();
 646
 647                         while ($row = $db->sql_fetchrow($result))
 648                         {
 649                                 // We pre-process some variables here for later usage
 650                                 $row['post_text'] = censor_text($row['post_text']);
 651
 652                                 $text_only_message = $row['post_text'];
 653                                 // make list items visible as such
 654                                 if ($row['bbcode_uid'])
 655                                 {
 656                                         $text_only_message = str_replace('[*:' . $row['bbcode_uid'] . ']', '&sdot;&nbsp;', $text_only_message);
 657                                         // no BBCode in text only message
 658                                         strip_bbcode($text_only_message, $row['bbcode_uid']);
 659                                 }
 660
 661                                 if ($return_chars == -1 || utf8_strlen($text_only_message) < ($return_chars + 3))
 662                                 {
 663                                         $row['display_text_only'] = false;
 664                                         $bbcode_bitfield = $bbcode_bitfield | base64_decode($row['bbcode_bitfield']);
 665
 666                                         // Does this post have an attachment? If so, add it to the list
 667                                         if ($row['post_attachment'] && $config['allow_attachments'])
 668                                         {
 669                                                 $attach_list[$row['forum_id']][] = $row['post_id'];
 670                                         }
 671                                 }
 672                                 else
 673                                 {
 674                                         $row['post_text'] = $text_only_message;
 675                                         $row['display_text_only'] = true;
 676                                 }
 677
 678                                 $rowset[] = $row;
 679                         }
 680                         $db->sql_freeresult($result);
 681
 682                         unset($text_only_message);
 683
 684                         // Instantiate BBCode if needed
 685                         if ($bbcode_bitfield !== '')
 686                         {
 687                                 include_once(PHPBB_ROOT_PATH . 'includes/bbcode.' . PHP_EXT);
 688                                 $bbcode = new bbcode(base64_encode($bbcode_bitfield));
 689                         }
 690
 691                         // Pull attachment data
 692                         if (sizeof($attach_list))
 693                         {
 694                                 $use_attach_list = $attach_list;
 695                                 $attach_list = array();
 696
 697                                 foreach ($use_attach_list as $forum_id => $_list)
 698                                 {
 699                                         if ($auth->acl_get('u_download') && $auth->acl_get('f_download', $forum_id))
 700                                         {
 701                                                 $attach_list = array_merge($attach_list, $_list);
 702                                         }
 703                                 }
 704                         }
 705
 706                         if (sizeof($attach_list))
 707                         {
 708                                 $sql = 'SELECT *
 709                                         FROM ' . ATTACHMENTS_TABLE . '
 710                                         WHERE ' . $db->sql_in_set('post_msg_id', $attach_list) . '
 711                                                 AND in_message = 0
 712                                         ORDER BY filetime DESC, post_msg_id ASC';
 713                                 $result = $db->sql_query($sql);
 714
 715                                 while ($row = $db->sql_fetchrow($result))
 716                                 {
 717                                         $attachments[$row['post_msg_id']][] = $row;
 718                                 }
 719                                 $db->sql_freeresult($result);
 720                         }
 721                 }
 722
 723                 if ($hilit)
 724                 {
 725                         // Remove bad highlights
 726                         $hilit_array = array_filter(explode('|', $hilit), 'strlen');
 727                         foreach ($hilit_array as $key => $value)
 728                         {
 729                                 $hilit_array[$key] = str_replace('\*', '\w*?', preg_quote($value, '#'));
 730                                 $hilit_array[$key] = preg_replace('#(^|\s)\\\\w\*\?(\s|$)#', '$1\w+?$2', $hilit_array[$key]);
 731                         }
 732                         $hilit = implode('|', $hilit_array);
 733                 }
 734
 735                 foreach ($rowset as $row)
 736                 {
 737                         $forum_id = $row['forum_id'];
 738                         $result_topic_id = $row['topic_id'];
 739                         $topic_title = censor_text($row['topic_title']);
 740
 741                         // we need to select a forum id for this global topic
 742                         if (!$forum_id)
 743                         {
 744                                 if (!isset($g_forum_id))
 745                                 {
 746                                         // Get a list of forums the user cannot read
 747                                         $forum_ary = array_unique(array_keys($auth->acl_getf('!f_read', true)));
 748
 749                                         // Determine first forum the user is able to read (must not be a category)
 750                                         $sql = 'SELECT forum_id
 751                                                 FROM ' . FORUMS_TABLE . '
 752                                                 WHERE forum_type = ' . FORUM_POST;
 753
 754                                         if (sizeof($forum_ary))
 755                                         {
 756                                                 $sql .= ' AND ' . $db->sql_in_set('forum_id', $forum_ary, true);
 757                                         }
 758
 759                                         $result = $db->sql_query_limit($sql, 1);
 760                                         $g_forum_id = (int) $db->sql_fetchfield('forum_id');
 761                                 }
 762                                 $u_forum_id = $g_forum_id;
 763                         }
 764                         else
 765                         {
 766                                 $u_forum_id = $forum_id;
 767                         }
 768
 769                         $view_topic_url = append_sid('viewtopic', "f=$u_forum_id&amp;t=$result_topic_id" . (($u_hilit) ? "&amp;hilit=$u_hilit" : ''));
 770
 771                         $replies = ($auth->acl_get('m_approve', $forum_id)) ? $row['topic_replies_real'] : $row['topic_replies'];
 772
 773                         if ($show_results == 'topics')
 774                         {
 775                                 $folder_img = $folder_alt = $topic_type = '';
 776                                 topic_status($row, $replies, (isset($topic_tracking_info[$forum_id][$row['topic_id']]) && $row['topic_last_post_time'] > $topic_tracking_info[$forum_id][$row['topic_id']]) ? true : false, $folder_img, $folder_alt, $topic_type);
 777
 778                                 $unread_topic = (isset($topic_tracking_info[$forum_id][$row['topic_id']]) && $row['topic_last_post_time'] > $topic_tracking_info[$forum_id][$row['topic_id']]) ? true : false;
 779
 780                                 $topic_unapproved = (!$row['topic_approved'] && $auth->acl_get('m_approve', $forum_id)) ? true : false;
 781                                 $posts_unapproved = ($row['topic_approved'] && $row['topic_replies'] < $row['topic_replies_real'] && $auth->acl_get('m_approve', $forum_id)) ? true : false;
 782                                 $u_mcp_queue = ($topic_unapproved || $posts_unapproved) ? append_sid('mcp', 'i=queue&amp;mode=' . (($topic_unapproved) ? 'approve_details' : 'unapproved_posts') . "&amp;t=$result_topic_id", true, $user->session_id) : '';
 783
 784                                 $row['topic_title'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['topic_title']);
 785
 786                                 $tpl_ary = array(
 787                                         'TOPIC_AUTHOR'                          => get_username_string('username', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 788                                         'TOPIC_AUTHOR_COLOUR'           => get_username_string('colour', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 789                                         'TOPIC_AUTHOR_FULL'                     => get_username_string('full', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 790                                         'FIRST_POST_TIME'                       => $user->format_date($row['topic_time']),
 791                                         'LAST_POST_SUBJECT'                     => $row['topic_last_post_subject'],
 792                                         'LAST_POST_TIME'                        => $user->format_date($row['topic_last_post_time']),
 793                                         'LAST_VIEW_TIME'                        => $user->format_date($row['topic_last_view_time']),
 794                                         'LAST_POST_AUTHOR'                      => get_username_string('username', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 795                                         'LAST_POST_AUTHOR_COLOUR'       => get_username_string('colour', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 796                                         'LAST_POST_AUTHOR_FULL'         => get_username_string('full', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 797
 798                                         'PAGINATION'            => topic_generate_pagination($replies, $view_topic_url),
 799                                         'TOPIC_TYPE'            => $topic_type,
 800
 801                                         'TOPIC_FOLDER_IMG'              => $user->img($folder_img, $folder_alt),
 802                                         'TOPIC_FOLDER_IMG_SRC'  => $user->img($folder_img, $folder_alt, 'src'),
 803                                         'TOPIC_FOLDER_IMG_ALT'  => $user->lang[$folder_alt],
 804                                         'TOPIC_FOLDER_IMG_WIDTH'=> $user->img($folder_img, '', 'width'),
 805                                         'TOPIC_FOLDER_IMG_HEIGHT'       => $user->img($folder_img, '', 'height'),
 806
 807                                         'TOPIC_ICON_IMG'                => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['img'] : '',
 808                                         'TOPIC_ICON_IMG_WIDTH'  => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['width'] : '',
 809                                         'TOPIC_ICON_IMG_HEIGHT' => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['height'] : '',
 810                                         'ATTACH_ICON_IMG'               => ($auth->acl_get('u_download') && $auth->acl_get('f_download', $forum_id) && $row['topic_attachment']) ? $user->img('icon_topic_attach', $user->lang['TOTAL_ATTACHMENTS']) : '',
 811                                         'UNAPPROVED_IMG'                => ($topic_unapproved || $posts_unapproved) ? $user->img('icon_topic_unapproved', ($topic_unapproved) ? 'TOPIC_UNAPPROVED' : 'POSTS_UNAPPROVED') : '',
 812
 813                                         'S_TOPIC_GLOBAL'                => (!$forum_id) ? true : false,
 814                                         'S_TOPIC_TYPE'                  => $row['topic_type'],
 815                                         'S_USER_POSTED'                 => (!empty($row['mark_type'])) ? true : false,
 816                                         'S_UNREAD_TOPIC'                => $unread_topic,
 817
 818                                         'S_TOPIC_REPORTED'              => (!empty($row['topic_reported']) && $auth->acl_get('m_report', $forum_id)) ? true : false,
 819                                         'S_TOPIC_UNAPPROVED'    => $topic_unapproved,
 820                                         'S_POSTS_UNAPPROVED'    => $posts_unapproved,
 821
 822                                         'U_LAST_POST'                   => $view_topic_url . '&amp;p=' . $row['topic_last_post_id'] . '#p' . $row['topic_last_post_id'],
 823                                         'U_LAST_POST_AUTHOR'    => get_username_string('profile', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 824                                         'U_TOPIC_AUTHOR'                => get_username_string('profile', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 825                                         'U_NEWEST_POST'                 => $view_topic_url . '&amp;view=unread#unread',
 826                                         'U_MCP_REPORT'                  => append_sid('mcp', 'i=reports&amp;mode=reports&amp;t=' . $result_topic_id, true, $user->session_id),
 827                                         'U_MCP_QUEUE'                   => $u_mcp_queue,
 828                                 );
 829                         }
 830                         else
 831                         {
 832                                 if ((isset($zebra['foe']) && in_array($row['poster_id'], $zebra['foe'])) && (!$view || $view != 'show' || $post_id != $row['post_id']))
 833                                 {
 834                                         $template->assign_block_vars('searchresults', array(
 835                                                 'S_IGNORE_POST' => true,
 836
 837                                                 'L_IGNORE_POST' => sprintf($user->lang['POST_BY_FOE'], $row['username'], "<a href=\"$u_search&amp;start=$start&amp;p=" . $row['post_id'] . '&amp;view=show#p' . $row['post_id'] . '">', '</a>'))
 838                                         );
 839
 840                                         continue;
 841                                 }
 842
 843                                 // Replace naughty words such as farty pants
 844                                 $row['post_subject'] = censor_text($row['post_subject']);
 845
 846                                 if ($row['display_text_only'])
 847                                 {
 848                                         // now find context for the searched words
 849                                         $row['post_text'] = get_context($row['post_text'], array_filter(explode('|', $hilit), 'strlen'), $return_chars);
 850                                         $row['post_text'] = bbcode_nl2br($row['post_text']);
 851                                 }
 852                                 else
 853                                 {
 854                                         // Second parse bbcode here
 855                                         if ($row['bbcode_bitfield'])
 856                                         {
 857                                                 $bbcode->bbcode_second_pass($row['post_text'], $row['bbcode_uid'], $row['bbcode_bitfield']);
 858                                         }
 859
 860                                         $row['post_text'] = bbcode_nl2br($row['post_text']);
 861                                         $row['post_text'] = smiley_text($row['post_text']);
 862
 863                                         if (!empty($attachments[$row['post_id']]))
 864                                         {
 865                                                 parse_attachments($forum_id, $row['post_text'], $attachments[$row['post_id']], $update_count);
 866
 867                                                 // we only display inline attachments
 868                                                 unset($attachments[$row['post_id']]);
 869                                         }
 870                                 }
 871
 872                                 if ($hilit)
 873                                 {
 874                                         // post highlighting
 875                                         $row['post_text'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['post_text']);
 876                                         $row['post_subject'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['post_subject']);
 877                                 }
 878
 879                                 $tpl_ary = array(
 880                                         'POST_AUTHOR_FULL'              => get_username_string('full', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 881                                         'POST_AUTHOR_COLOUR'    => get_username_string('colour', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 882                                         'POST_AUTHOR'                   => get_username_string('username', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 883                                         'U_POST_AUTHOR'                 => get_username_string('profile', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 884
 885                                         'POST_SUBJECT'          => $row['post_subject'],
 886                                         'POST_DATE'                     => (!empty($row['post_time'])) ? $user->format_date($row['post_time']) : '',
 887                                         'MESSAGE'                       => $row['post_text']
 888                                 );
 889                         }
 890
 891                         $template->assign_block_vars('searchresults', array_merge($tpl_ary, array(
 892                                 'FORUM_ID'                      => $forum_id,
 893                                 'TOPIC_ID'                      => $result_topic_id,
 894                                 'POST_ID'                       => ($show_results == 'posts') ? $row['post_id'] : false,
 895
 896                                 'FORUM_TITLE'           => $row['forum_name'],
 897                                 'TOPIC_TITLE'           => $topic_title,
 898                                 'TOPIC_REPLIES'         => $replies,
 899                                 'TOPIC_VIEWS'           => $row['topic_views'],
 900
 901                                 'U_VIEW_TOPIC'          => $view_topic_url,
 902                                 'U_VIEW_FORUM'          => append_sid('viewforum', 'f=' . $forum_id),
 903                                 'U_VIEW_POST'           => (!empty($row['post_id'])) ? append_sid('viewtopic', "f=$forum_id&amp;t=" . $row['topic_id'] . '&amp;p=' . $row['post_id'] . (($u_hilit) ? '&amp;hilit=' . $u_hilit : '')) . '#p' . $row['post_id'] : '')
 904                         ));
 905                 }
 906
 907                 if ($topic_id && ($topic_id == $result_topic_id))
 908                 {
 909                         $template->assign_vars(array(
 910                                 'SEARCH_TOPIC'          => $topic_title,
 911                                 'U_SEARCH_TOPIC'        => $view_topic_url
 912                         ));
 913                 }
 914         }
 915         unset($rowset);
 916
 917         page_header(($l_search_title) ? $l_search_title : $user->lang['SEARCH']);
 918
 919         $template->set_filenames(array(
 920                 'body' => 'search_results.html')
 921         );
 922         make_jumpbox(append_sid('viewforum'));
 923
 924         page_footer();
 925 }
 926
 927
 928 // Search forum
 929 $s_forums = '';
 930 $sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.left_id, f.right_id, f.forum_password, f.enable_indexing, fa.user_id
 931         FROM ' . FORUMS_TABLE . ' f
 932         LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id
 933                 AND fa.session_id = '" . $db->sql_escape($user->session_id) . "')
 934         ORDER BY f.left_id ASC";
 935 $result = $db->sql_query($sql);
 936
 937 $right = $cat_right = $padding_inc = 0;
 938 $padding = $forum_list = $holding = '';
 939 $pad_store = array('0' => '');
 940
 941 while ($row = $db->sql_fetchrow($result))
 942 {
 943         if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id']))
 944         {
 945                 // Non-postable forum with no subforums, don't display
 946                 continue;
 947         }
 948
 949         if ($row['forum_type'] == FORUM_POST && ($row['left_id'] + 1 == $row['right_id']) && !$row['enable_indexing'])
 950         {
 951                 // Postable forum with no subforums and indexing disabled, don't display
 952                 continue;
 953         }
 954
 955         if ($row['forum_type'] == FORUM_LINK || ($row['forum_password'] && !$row['user_id']))
 956         {
 957                 // if this forum is a link or password protected (user has not entered the password yet) then skip to the next branch
 958                 continue;
 959         }
 960
 961         if ($row['left_id'] < $right)
 962         {
 963                 $padding .= '&nbsp; &nbsp;';
 964                 $pad_store[$row['parent_id']] = $padding;
 965         }
 966         else if ($row['left_id'] > $right + 1)
 967         {
 968                 if (isset($pad_store[$row['parent_id']]))
 969                 {
 970                         $padding = $pad_store[$row['parent_id']];
 971                 }
 972                 else
 973                 {
 974                         continue;
 975                 }
 976         }
 977
 978         $right = $row['right_id'];
 979
 980         if ($auth->acl_gets('!f_search', '!f_list', $row['forum_id']))
 981         {
 982                 // if the user does not have permissions to search or see this forum skip only this forum/category
 983                 continue;
 984         }
 985
 986         $selected = (in_array($row['forum_id'], $search_forum)) ? ' selected="selected"' : '';
 987
 988         if ($row['left_id'] > $cat_right)
 989         {
 990                 // make sure we don't forget anything
 991                 $s_forums .= $holding;
 992                 $holding = '';
 993         }
 994
 995         if ($row['right_id'] - $row['left_id'] > 1)
 996         {
 997                 $cat_right = max($cat_right, $row['right_id']);
 998
 999                 $holding .= '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';
1000         }
1001         else
1002         {
1003                 $s_forums .= $holding . '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';
1004                 $holding = '';
1005         }
1006 }
1007
1008 if ($holding)
1009 {
1010         $s_forums .= $holding;
1011 }
1012
1013 $db->sql_freeresult($result);
1014 unset($pad_store);
1015
1016 if (!$s_forums)
1017 {
1018         trigger_error('NO_SEARCH');
1019 }
1020
1021 // Number of chars returned
1022 $s_characters = '<option value="-1">' . $user->lang['ALL_AVAILABLE'] . '</option>';
1023 $s_characters .= '<option value="0">0</option>';
1024 $s_characters .= '<option value="25">25</option>';
1025 $s_characters .= '<option value="50">50</option>';
1026
1027 for ($i = 100; $i <= 1000 ; $i += 100)
1028 {
1029         $selected = ($i == 300) ? ' selected="selected"' : '';
1030         $s_characters .= '<option value="' . $i . '"' . $selected . '>' . $i . '</option>';
1031 }
1032
1033 $s_hidden_fields = array('t' => $topic_id);
1034
1035 if ($_SID)
1036 {
1037         $s_hidden_fields['sid'] = $_SID;
1038 }
1039
1040 if (!empty($_EXTRA_URL))
1041 {
1042         foreach ($_EXTRA_URL as $url_param)
1043         {
1044                 $url_param = explode('=', $url_param, 2);
1045                 $s_hidden_fields[$url_param[0]] = $url_param[1];
1046         }
1047 }
1048
1049 $template->assign_vars(array(
1050         'S_SEARCH_ACTION'               => append_sid('search'),
1051         'S_HIDDEN_FIELDS'               => build_hidden_fields($s_hidden_fields),
1052         'S_CHARACTER_OPTIONS'   => $s_characters,
1053         'S_FORUM_OPTIONS'               => $s_forums,
1054         'S_SELECT_SORT_DIR'             => $s_sort_dir,
1055         'S_SELECT_SORT_KEY'             => $s_sort_key,
1056         'S_SELECT_SORT_DAYS'    => $s_limit_days,
1057         'S_IN_SEARCH'                   => true,
1058 ));
1059
1060 // only show recent searches to search administrators
1061 if ($auth->acl_get('a_search'))
1062 {
1063         $sql = 'SELECT search_time, search_keywords
1064                 FROM ' . SEARCH_RESULTS_TABLE . '
1065                 WHERE ' . $db->sql_function('length_text', 'search_keywords') . ' > 0
1066                 ORDER BY search_time DESC';
1067         $result = $db->sql_query_limit($sql, 5);
1068
1069         while ($row = $db->sql_fetchrow($result))
1070         {
1071                 $keywords = $row['search_keywords'];
1072
1073                 $template->assign_block_vars('recentsearch', array(
1074                         'KEYWORDS'      => $keywords,
1075                         'TIME'          => $user->format_date($row['search_time']),
1076
1077                         'U_KEYWORDS'    => append_sid('search', 'keywords=' . urlencode(htmlspecialchars_decode($keywords)))
1078                 ));
1079         }
1080         $db->sql_freeresult($result);
1081 }
1082
1083 // Output the basic page
1084 page_header($user->lang['SEARCH']);
1085
1086 $template->set_filenames(array(
1087         'body' => 'search_body.html')
1088 );
1089 make_jumpbox(append_sid('viewforum'));
1090
1091 page_footer();
1092
1093 ?>