phpBB/search.php

   1 <?php
   2 /**
   3 *
   4 * @package phpBB3
   5 * @version $Id$
   6 * @copyright (c) 2005 phpBB Group
   7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
   8 *
   9 */
  10
  11 /**
  12 * @ignore
  13 */
  14 define('IN_PHPBB', true);
  15 if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');
  16 if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));
  17 include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);
  18
  19 // Start session management
  20 $user->session_begin();
  21 $auth->acl($user->data);
  22 $user->setup('search');
  23
  24 // Define initial vars
  25 $mode                   = request_var('mode', '');
  26 $search_id              = request_var('search_id', '');
  27 $start                  = max(request_var('start', 0), 0);
  28 $post_id                = request_var('p', 0);
  29 $topic_id               = request_var('t', 0);
  30 $view                   = request_var('view', '');
  31
  32 $submit                 = request_var('submit', false);
  33 $keywords               = utf8_normalize_nfc(request_var('keywords', '', true));
  34 $add_keywords   = utf8_normalize_nfc(request_var('add_keywords', '', true));
  35 $author                 = request_var('author', '', true);
  36 $author_id              = request_var('author_id', 0);
  37 $show_results   = ($topic_id) ? 'posts' : request_var('sr', 'posts');
  38 $show_results   = ($show_results == 'posts') ? 'posts' : 'topics';
  39 $search_terms   = request_var('terms', 'all');
  40 $search_fields  = request_var('sf', 'all');
  41 $search_child   = request_var('sc', true);
  42
  43 $sort_days              = request_var('st', 0);
  44 $sort_key               = request_var('sk', 't');
  45 $sort_dir               = request_var('sd', 'd');
  46
  47 $return_chars   = request_var('ch', ($topic_id) ? -1 : 300);
  48 $search_forum   = request_var('fid', array(0));
  49
  50 // Is user able to search? Has search been disabled?
  51 if (!$auth->acl_get('u_search') || !$auth->acl_getf_global('f_search') || !$config['load_search'])
  52 {
  53         $template->assign_var('S_NO_SEARCH', true);
  54         trigger_error('NO_SEARCH');
  55 }
  56
  57 // Check search load limit
  58 if ($user->load && $config['limit_search_load'] && ($user->load > doubleval($config['limit_search_load'])))
  59 {
  60         $template->assign_var('S_NO_SEARCH', true);
  61         trigger_error('NO_SEARCH_TIME');
  62 }
  63
  64 // Check flood limit ... if applicable
  65 $interval = ($user->data['user_id'] == ANONYMOUS) ? $config['search_anonymous_interval'] : $config['search_interval'];
  66 if ($interval && !$auth->acl_get('u_ignoreflood'))
  67 {
  68         if ($user->data['user_last_search'] > time() - $interval)
  69         {
  70                 $template->assign_var('S_NO_SEARCH', true);
  71                 trigger_error('NO_SEARCH_TIME');
  72         }
  73 }
  74
  75 // Define some vars
  76 $limit_days             = array(0 => $user->lang['ALL_RESULTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 365 => $user->lang['1_YEAR']);
  77 $sort_by_text   = array('a' => $user->lang['SORT_AUTHOR'], 't' => $user->lang['SORT_TIME'], 'f' => $user->lang['SORT_FORUM'], 'i' => $user->lang['SORT_TOPIC_TITLE'], 's' => $user->lang['SORT_POST_SUBJECT']);
  78
  79 $s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';
  80 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
  81
  82 if ($keywords || $author || $author_id || $search_id || $submit)
  83 {
  84         // clear arrays
  85         $id_ary = array();
  86
  87         // egosearch is an author search
  88         if ($search_id == 'egosearch')
  89         {
  90                 $author_id = $user->data['user_id'];
  91
  92                 if ($user->data['user_id'] == ANONYMOUS)
  93                 {
  94                         login_box('', $user->lang['LOGIN_EXPLAIN_EGOSEARCH']);
  95                 }
  96         }
  97
  98         // If we are looking for authors get their ids
  99         $author_id_ary = array();
 100         if ($author_id)
 101         {
 102                 $author_id_ary[] = $author_id;
 103         }
 104         else if ($author)
 105         {
 106                 if ((strpos($author, '*') !== false) && (utf8_strlen(str_replace(array('*', '%'), '', $author)) < $config['min_search_author_chars']))
 107                 {
 108                         trigger_error(sprintf($user->lang['TOO_FEW_AUTHOR_CHARS'], $config['min_search_author_chars']));
 109                 }
 110
 111                 $sql_where = (strpos($author, '*') !== false) ? ' username_clean ' . $db->sql_like_expression(str_replace('*', $db->any_char, utf8_clean_string($author))) : " username_clean = '" . $db->sql_escape(utf8_clean_string($author)) . "'";
 112
 113                 $sql = 'SELECT user_id
 114                         FROM ' . USERS_TABLE . "
 115                         WHERE $sql_where
 116                                 AND user_type IN (" . phpbb::USER_NORMAL . ', ' . phpbb::USER_FOUNDER . ')';
 117                 $result = $db->sql_query_limit($sql, 100);
 118
 119                 while ($row = $db->sql_fetchrow($result))
 120                 {
 121                         $author_id_ary[] = (int) $row['user_id'];
 122                 }
 123                 $db->sql_freeresult($result);
 124
 125                 if (!sizeof($author_id_ary))
 126                 {
 127                         trigger_error('NO_SEARCH_RESULTS');
 128                 }
 129         }
 130
 131         // if we search in an existing search result just add the additional keywords. But we need to use "all search terms"-mode
 132         // so we can keep the old keywords in their old mode, but add the new ones as required words
 133         if ($add_keywords)
 134         {
 135                 if ($search_terms == 'all')
 136                 {
 137                         $keywords .= ' ' . $add_keywords;
 138                 }
 139                 else
 140                 {
 141                         $search_terms = 'all';
 142                         $keywords = implode(' |', explode(' ', preg_replace('#\s+#u', ' ', $keywords))) . ' ' .$add_keywords;
 143                 }
 144         }
 145
 146         // Which forums should not be searched? Author searches are also carried out in unindexed forums
 147         if (empty($keywords) && sizeof($author_id_ary))
 148         {
 149                 $ex_fid_ary = array_keys($auth->acl_getf('!f_read', true));
 150         }
 151         else
 152         {
 153                 $ex_fid_ary = array_unique(array_merge(array_keys($auth->acl_getf('!f_read', true)), array_keys($auth->acl_getf('!f_search', true))));
 154         }
 155
 156         $not_in_fid = (sizeof($ex_fid_ary)) ? 'WHERE ' . $db->sql_in_set('f.forum_id', $ex_fid_ary, true) . " OR (f.forum_password <> '' AND fa.user_id <> " . (int) $user->data['user_id'] . ')' : "";
 157
 158         $sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.right_id, f.forum_password, fa.user_id
 159                 FROM ' . FORUMS_TABLE . ' f
 160                 LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id
 161                         AND fa.session_id = '" . $db->sql_escape($user->session_id) . "')
 162                 $not_in_fid
 163                 ORDER BY f.left_id";
 164         $result = $db->sql_query($sql);
 165
 166         $right_id = 0;
 167         $reset_search_forum = true;
 168         while ($row = $db->sql_fetchrow($result))
 169         {
 170                 if ($row['forum_password'] && $row['user_id'] != $user->data['user_id'])
 171                 {
 172                         $ex_fid_ary[] = (int) $row['forum_id'];
 173                         continue;
 174                 }
 175
 176                 if (sizeof($search_forum))
 177                 {
 178                         if ($search_child)
 179                         {
 180                                 if (in_array($row['forum_id'], $search_forum) && $row['right_id'] > $right_id)
 181                                 {
 182                                         $right_id = (int) $row['right_id'];
 183                                 }
 184                                 else if ($row['right_id'] < $right_id)
 185                                 {
 186                                         continue;
 187                                 }
 188                         }
 189
 190                         if (!in_array($row['forum_id'], $search_forum))
 191                         {
 192                                 $ex_fid_ary[] = (int) $row['forum_id'];
 193                                 $reset_search_forum = false;
 194                         }
 195                 }
 196         }
 197         $db->sql_freeresult($result);
 198
 199         // find out in which forums the user is allowed to view approved posts
 200         if ($auth->acl_get('m_approve'))
 201         {
 202                 $m_approve_fid_ary = array(-1);
 203                 $m_approve_fid_sql = '';
 204         }
 205         else if ($auth->acl_getf_global('m_approve'))
 206         {
 207                 $m_approve_fid_ary = array_diff(array_keys($auth->acl_getf('!m_approve', true)), $ex_fid_ary);
 208                 $m_approve_fid_sql = ' AND (p.post_approved = 1' . ((sizeof($m_approve_fid_ary)) ? ' OR ' . $db->sql_in_set('p.forum_id', $m_approve_fid_ary, true) : '') . ')';
 209         }
 210         else
 211         {
 212                 $m_approve_fid_ary = array();
 213                 $m_approve_fid_sql = ' AND p.post_approved = 1';
 214         }
 215
 216         if ($reset_search_forum)
 217         {
 218                 $search_forum = array();
 219         }
 220
 221         // Select which method we'll use to obtain the post_id or topic_id information
 222         $search_type = basename($config['search_type']);
 223
 224         if (!file_exists(PHPBB_ROOT_PATH . 'includes/search/' . $search_type . '.' . PHP_EXT))
 225         {
 226                 trigger_error('NO_SUCH_SEARCH_MODULE');
 227         }
 228
 229         require(PHPBB_ROOT_PATH . "includes/search/$search_type." . PHP_EXT);
 230
 231         // We do some additional checks in the module to ensure it can actually be utilised
 232         $error = false;
 233         $search = new $search_type($error);
 234
 235         if ($error)
 236         {
 237                 trigger_error($error);
 238         }
 239
 240         // let the search module split up the keywords
 241         if ($keywords)
 242         {
 243                 $correct_query = $search->split_keywords($keywords, $search_terms);
 244                 if (!$correct_query || (empty($search->search_query) && !sizeof($author_id_ary) && !$search_id))
 245                 {
 246                         $ignored = (sizeof($search->common_words)) ? sprintf($user->lang['IGNORED_TERMS_EXPLAIN'], implode(' ', $search->common_words)) . '<br />' : '';
 247                         trigger_error($ignored . sprintf($user->lang['NO_KEYWORDS'], $search->word_length['min'], $search->word_length['max']));
 248                 }
 249         }
 250
 251         if (!$keywords && sizeof($author_id_ary))
 252         {
 253                 // if it is an author search we want to show topics by default
 254                 $show_results = ($topic_id) ? 'posts' : request_var('sr', ($search_id == 'egosearch') ? 'topics' : 'posts');
 255                 $show_results = ($show_results == 'posts') ? 'posts' : 'topics';
 256         }
 257
 258         // define some variables needed for retrieving post_id/topic_id information
 259         $sort_by_sql = array('a' => 'u.username_clean', 't' => (($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time'), 'f' => 'f.forum_id', 'i' => 't.topic_title', 's' => (($show_results == 'posts') ? 'p.post_subject' : 't.topic_title'));
 260
 261         // pre-made searches
 262         $sql = $field = $l_search_title = '';
 263         if ($search_id)
 264         {
 265                 switch ($search_id)
 266                 {
 267                         // Oh holy Bob, bring us some activity...
 268                         case 'active_topics':
 269                                 $l_search_title = $user->lang['SEARCH_ACTIVE_TOPICS'];
 270                                 $show_results = 'topics';
 271                                 $sort_key = 't';
 272                                 $sort_dir = 'd';
 273                                 $sort_days = request_var('st', 7);
 274                                 $sort_by_sql['t'] = 't.topic_last_post_time';
 275
 276                                 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
 277                                 $s_sort_key = $s_sort_dir = '';
 278
 279                                 $last_post_time_sql = ($sort_days) ? ' AND t.topic_last_post_time > ' . (time() - ($sort_days * 24 * 3600)) : '';
 280
 281                                 $sql = 'SELECT t.topic_last_post_time, t.topic_id
 282                                         FROM ' . TOPICS_TABLE . " t
 283                                         WHERE t.topic_moved_id = 0
 284                                                 $last_post_time_sql
 285                                                 " . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '
 286                                                 ' . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . '
 287                                         ORDER BY t.topic_last_post_time DESC';
 288                                 $field = 'topic_id';
 289                         break;
 290
 291                         case 'unanswered':
 292                                 $l_search_title = $user->lang['SEARCH_UNANSWERED'];
 293                                 $show_results = request_var('sr', 'topics');
 294                                 $show_results = ($show_results == 'posts') ? 'posts' : 'topics';
 295                                 $sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';
 296                                 $sort_by_sql['s'] = ($show_results == 'posts') ? 'p.post_subject' : 't.topic_title';
 297                                 $sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');
 298
 299                                 $sort_join = ($sort_key == 'f') ? FORUMS_TABLE . ' f, ' : '';
 300                                 $sql_sort = ($sort_key == 'f') ? ' AND f.forum_id = p.forum_id ' . $sql_sort : $sql_sort;
 301
 302                                 if ($sort_days)
 303                                 {
 304                                         $last_post_time = 'AND p.post_time > ' . (time() - ($sort_days * 24 * 3600));
 305                                 }
 306                                 else
 307                                 {
 308                                         $last_post_time = '';
 309                                 }
 310
 311
 312                                 if ($sort_key == 'a')
 313                                 {
 314                                         $sort_join = USERS_TABLE . ' u, ';
 315                                         $sql_sort = ' AND u.user_id = p.poster_id ' . $sql_sort;
 316                                 }
 317                                 if ($show_results == 'posts')
 318                                 {
 319                                         $sql = "SELECT p.post_id
 320                                                 FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t
 321                                                 WHERE t.topic_replies = 0
 322                                                         AND p.topic_id = t.topic_id
 323                                                         $last_post_time
 324                                                         $m_approve_fid_sql
 325                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 326                                                         $sql_sort";
 327                                         $field = 'post_id';
 328                                 }
 329                                 else
 330                                 {
 331                                         $sql = 'SELECT DISTINCT ' . $sort_by_sql[$sort_key] . ", p.topic_id
 332                                                 FROM $sort_join" . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t
 333                                                 WHERE t.topic_replies = 0
 334                                                         AND t.topic_moved_id = 0
 335                                                         AND p.topic_id = t.topic_id
 336                                                         $last_post_time
 337                                                         $m_approve_fid_sql
 338                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 339                                                 $sql_sort";
 340                                         $field = 'topic_id';
 341                                 }
 342                         break;
 343
 344                         case 'newposts':
 345                                 $l_search_title = $user->lang['SEARCH_NEW'];
 346                                 // force sorting
 347                                 $show_results = (request_var('sr', 'topics') == 'posts') ? 'posts' : 'topics';
 348                                 $sort_key = 't';
 349                                 $sort_dir = 'd';
 350                                 $sort_by_sql['t'] = ($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time';
 351                                 $sql_sort = 'ORDER BY ' . $sort_by_sql[$sort_key] . (($sort_dir == 'a') ? ' ASC' : ' DESC');
 352
 353                                 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
 354                                 $s_sort_key = $s_sort_dir = $u_sort_param = $s_limit_days = '';
 355
 356                                 if ($show_results == 'posts')
 357                                 {
 358                                         $sql = 'SELECT p.post_id
 359                                                 FROM ' . POSTS_TABLE . ' p
 360                                                 WHERE p.post_time > ' . $user->data['user_lastvisit'] . "
 361                                                         $m_approve_fid_sql
 362                                                         " . ((sizeof($ex_fid_ary)) ? ' AND ' . $db->sql_in_set('p.forum_id', $ex_fid_ary, true) : '') . "
 363                                                 $sql_sort";
 364                                         $field = 'post_id';
 365                                 }
 366                                 else
 367                                 {
 368                                         $sql = 'SELECT t.topic_id
 369                                                 FROM ' . TOPICS_TABLE . ' t
 370                                                 WHERE t.topic_last_post_time > ' . $user->data['user_lastvisit'] . '
 371                                                         AND t.topic_moved_id = 0
 372                                                         ' . str_replace(array('p.', 'post_'), array('t.', 'topic_'), $m_approve_fid_sql) . '
 373                                                         ' . ((sizeof($ex_fid_ary)) ? 'AND ' . $db->sql_in_set('t.forum_id', $ex_fid_ary, true) : '') . "
 374                                                 $sql_sort";
 375                                         $field = 'topic_id';
 376                                 }
 377                         break;
 378
 379                         case 'egosearch':
 380                                 $l_search_title = $user->lang['SEARCH_SELF'];
 381                         break;
 382                 }
 383         }
 384
 385         // show_results should not change after this
 386         $per_page = ($show_results == 'posts') ? $config['posts_per_page'] : $config['topics_per_page'];
 387         $total_match_count = 0;
 388
 389         if ($search_id)
 390         {
 391                 if ($sql)
 392                 {
 393                         // only return up to 1000 ids (the last one will be removed later)
 394                         $result = $db->sql_query_limit($sql, 1001 - $start, $start);
 395
 396                         while ($row = $db->sql_fetchrow($result))
 397                         {
 398                                 $id_ary[] = $row[$field];
 399                         }
 400                         $db->sql_freeresult($result);
 401
 402                         $total_match_count = sizeof($id_ary) + $start;
 403                         $id_ary = array_slice($id_ary, 0, $per_page);
 404                 }
 405                 else
 406                 {
 407                         $search_id = '';
 408                 }
 409         }
 410
 411         // make sure that some arrays are always in the same order
 412         sort($ex_fid_ary);
 413         sort($m_approve_fid_ary);
 414         sort($author_id_ary);
 415
 416         if (!empty($search->search_query))
 417         {
 418                 $total_match_count = $search->keyword_search($show_results, $search_fields, $search_terms, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);
 419         }
 420         else if (sizeof($author_id_ary))
 421         {
 422                 $firstpost_only = ($search_fields === 'firstpost') ? true : false;
 423                 $total_match_count = $search->author_search($show_results, $firstpost_only, $sort_by_sql, $sort_key, $sort_dir, $sort_days, $ex_fid_ary, $m_approve_fid_ary, $topic_id, $author_id_ary, $id_ary, $start, $per_page);
 424         }
 425
 426         // For some searches we need to print out the "no results" page directly to allow re-sorting/refining the search options.
 427         if (!sizeof($id_ary) && !$search_id)
 428         {
 429                 trigger_error('NO_SEARCH_RESULTS');
 430         }
 431
 432         $sql_where = '';
 433
 434         if (sizeof($id_ary))
 435         {
 436                 $sql_where .= $db->sql_in_set(($show_results == 'posts') ? 'p.post_id' : 't.topic_id', $id_ary);
 437                 $sql_where .= (sizeof($ex_fid_ary)) ? ' AND (' . $db->sql_in_set('f.forum_id', $ex_fid_ary, true) . ' OR f.forum_id IS NULL)' : '';
 438                 $sql_where .= ($show_results == 'posts') ? $m_approve_fid_sql : str_replace(array('p.post_approved', 'p.forum_id'), array('t.topic_approved', 't.forum_id'), $m_approve_fid_sql);
 439         }
 440
 441         if ($show_results == 'posts')
 442         {
 443                 include(PHPBB_ROOT_PATH . 'includes/functions_posting.' . PHP_EXT);
 444         }
 445         else
 446         {
 447                 include(PHPBB_ROOT_PATH . 'includes/functions_display.' . PHP_EXT);
 448         }
 449
 450         $user->add_lang('viewtopic');
 451
 452         // Grab icons
 453         $icons = phpbb_cache::obtain_icons();
 454
 455         // Output header
 456         if ($search_id && ($total_match_count > 1000))
 457         {
 458                 // limit the number to 1000 for pre-made searches
 459                 $total_match_count--;
 460                 $l_search_matches = sprintf($user->lang['FOUND_MORE_SEARCH_MATCHES'], $total_match_count);
 461         }
 462         else
 463         {
 464                 $l_search_matches = ($total_match_count == 1) ? sprintf($user->lang['FOUND_SEARCH_MATCH'], $total_match_count) : sprintf($user->lang['FOUND_SEARCH_MATCHES'], $total_match_count);
 465         }
 466
 467         // define some vars for urls
 468         $hilit = implode('|', explode(' ', preg_replace('#\s+#u', ' ', str_replace(array('+', '-', '|', '(', ')', '&quot;'), ' ', $keywords))));
 469         // Do not allow *only* wildcard being used for hilight
 470         $hilit = (strspn($hilit, '*') === strlen($hilit)) ? '' : $hilit;
 471
 472         $u_hilit = urlencode(htmlspecialchars_decode(str_replace('|', ' ', $hilit)));
 473         $u_show_results = ($show_results != 'posts') ? '&amp;sr=' . $show_results : '';
 474         $u_search_forum = implode('&amp;fid%5B%5D=', $search_forum);
 475
 476         $u_search = append_sid('search', $u_sort_param . $u_show_results);
 477         $u_search .= ($search_id) ? '&amp;search_id=' . $search_id : '';
 478         $u_search .= ($u_hilit) ? '&amp;keywords=' . urlencode(htmlspecialchars_decode($search->search_query)) : '';
 479         $u_search .= ($search_terms != 'all') ? '&amp;terms=' . $search_terms : '';
 480         $u_search .= ($topic_id) ? '&amp;t=' . $topic_id : '';
 481         $u_search .= ($author) ? '&amp;author=' . urlencode(htmlspecialchars_decode($author)) : '';
 482         $u_search .= ($author_id) ? '&amp;author_id=' . $author_id : '';
 483         $u_search .= ($u_search_forum) ? '&amp;fid%5B%5D=' . $u_search_forum : '';
 484         $u_search .= (!$search_child) ? '&amp;sc=0' : '';
 485         $u_search .= ($search_fields != 'all') ? '&amp;sf=' . $search_fields : '';
 486         $u_search .= ($return_chars != 300) ? '&amp;ch=' . $return_chars : '';
 487
 488         $template->assign_vars(array(
 489                 'SEARCH_TITLE'          => $l_search_title,
 490                 'SEARCH_MATCHES'        => $l_search_matches,
 491                 'SEARCH_WORDS'          => $search->search_query,
 492                 'IGNORED_WORDS'         => (sizeof($search->common_words)) ? implode(' ', $search->common_words) : '',
 493                 'PAGINATION'            => generate_pagination($u_search, $total_match_count, $per_page, $start),
 494                 'PAGE_NUMBER'           => on_page($total_match_count, $per_page, $start),
 495                 'TOTAL_MATCHES'         => $total_match_count,
 496                 'SEARCH_IN_RESULTS'     => ($search_id) ? false : true,
 497
 498                 'S_SELECT_SORT_DIR'             => $s_sort_dir,
 499                 'S_SELECT_SORT_KEY'             => $s_sort_key,
 500                 'S_SELECT_SORT_DAYS'    => $s_limit_days,
 501                 'S_SEARCH_ACTION'               => $u_search,
 502                 'S_SHOW_TOPICS'                 => ($show_results == 'posts') ? false : true,
 503
 504                 'GOTO_PAGE_IMG'         => $user->img('icon_post_target', 'GOTO_PAGE'),
 505                 'NEWEST_POST_IMG'       => $user->img('icon_topic_newest', 'VIEW_NEWEST_POST'),
 506                 'REPORTED_IMG'          => $user->img('icon_topic_reported', 'TOPIC_REPORTED'),
 507                 'UNAPPROVED_IMG'        => $user->img('icon_topic_unapproved', 'TOPIC_UNAPPROVED'),
 508                 'LAST_POST_IMG'         => $user->img('icon_topic_latest', 'VIEW_LATEST_POST'),
 509
 510                 'U_SEARCH_WORDS'        => $u_search,
 511         ));
 512
 513         if ($sql_where)
 514         {
 515                 if ($show_results == 'posts')
 516                 {
 517                         // @todo Joining this query to the one below?
 518                         $sql = 'SELECT zebra_id, friend, foe
 519                                 FROM ' . ZEBRA_TABLE . '
 520                                 WHERE user_id = ' . $user->data['user_id'];
 521                         $result = $db->sql_query($sql);
 522
 523                         $zebra = array();
 524                         while ($row = $db->sql_fetchrow($result))
 525                         {
 526                                 $zebra[($row['friend']) ? 'friend' : 'foe'][] = $row['zebra_id'];
 527                         }
 528                         $db->sql_freeresult($result);
 529
 530                         $sql = 'SELECT p.*, f.forum_id, f.forum_name, t.*, u.username, u.username_clean, u.user_sig, u.user_sig_bbcode_uid, u.user_colour
 531                                 FROM ' . POSTS_TABLE . ' p
 532                                         LEFT JOIN ' . TOPICS_TABLE . ' t ON (p.topic_id = t.topic_id)
 533                                         LEFT JOIN ' . FORUMS_TABLE . ' f ON (p.forum_id = f.forum_id)
 534                                         LEFT JOIN ' . USERS_TABLE . " u ON (p.poster_id = u.user_id)
 535                                 WHERE $sql_where";
 536                 }
 537                 else
 538                 {
 539                         $sql_from = TOPICS_TABLE . ' t
 540                                 LEFT JOIN ' . FORUMS_TABLE . ' f ON (f.forum_id = t.forum_id)
 541                                 ' . (($sort_key == 'a') ? ' LEFT JOIN ' . USERS_TABLE . ' u ON (u.user_id = t.topic_poster) ' : '');
 542                         $sql_select = 't.*, f.forum_id, f.forum_name';
 543
 544                         if ($user->data['is_registered'])
 545                         {
 546                                 if ($config['load_db_track'] && $author_id !== $user->data['user_id'])
 547                                 {
 548                                         $sql_from .= ' LEFT JOIN ' . TOPICS_POSTED_TABLE . ' tp ON (tp.user_id = ' . $user->data['user_id'] . '
 549                                                 AND t.topic_id = tp.topic_id)';
 550                                         $sql_select .= ', tp.topic_posted';
 551                                 }
 552
 553                                 if ($config['load_db_lastread'])
 554                                 {
 555                                         $sql_from .= ' LEFT JOIN ' . TOPICS_TRACK_TABLE . ' tt ON (tt.user_id = ' . $user->data['user_id'] . '
 556                                                         AND t.topic_id = tt.topic_id)
 557                                                 LEFT JOIN ' . FORUMS_TRACK_TABLE . ' ft ON (ft.user_id = ' . $user->data['user_id'] . '
 558                                                         AND ft.forum_id = f.forum_id)';
 559                                         $sql_select .= ', tt.mark_time, ft.mark_time as f_mark_time';
 560                                 }
 561                         }
 562
 563                         if ($config['load_anon_lastread'] || ($user->data['is_registered'] && !$config['load_db_lastread']))
 564                         {
 565                                 $tracking_topics = phpbb_request::variable($config['cookie_name'] . '_track', '', false, phpbb_request::COOKIE);
 566                                 $tracking_topics = ($tracking_topics) ? tracking_unserialize($tracking_topics) : array();
 567                         }
 568
 569                         $sql = "SELECT $sql_select
 570                                 FROM $sql_from
 571                                 WHERE $sql_where";
 572                 }
 573                 $sql .= ' ORDER BY ' . $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ? 'DESC' : 'ASC');
 574                 $result = $db->sql_query($sql);
 575                 $result_topic_id = 0;
 576
 577                 $rowset = array();
 578
 579                 if ($show_results == 'topics')
 580                 {
 581                         $forums = $rowset = $shadow_topic_list = array();
 582                         while ($row = $db->sql_fetchrow($result))
 583                         {
 584                                 if ($row['topic_status'] == ITEM_MOVED)
 585                                 {
 586                                         $shadow_topic_list[$row['topic_moved_id']] = $row['topic_id'];
 587                                 }
 588
 589                                 $rowset[$row['topic_id']] = $row;
 590
 591                                 if (!isset($forums[$row['forum_id']]) && $user->data['is_registered'] && $config['load_db_lastread'])
 592                                 {
 593                                         $forums[$row['forum_id']]['mark_time'] = $row['f_mark_time'];
 594                                 }
 595                                 $forums[$row['forum_id']]['topic_list'][] = $row['topic_id'];
 596                                 $forums[$row['forum_id']]['rowset'][$row['topic_id']] = &$rowset[$row['topic_id']];
 597                         }
 598                         $db->sql_freeresult($result);
 599
 600                         // If we have some shadow topics, update the rowset to reflect their topic information
 601                         if (sizeof($shadow_topic_list))
 602                         {
 603                                 $sql = 'SELECT *
 604                                         FROM ' . TOPICS_TABLE . '
 605                                         WHERE ' . $db->sql_in_set('topic_id', array_keys($shadow_topic_list));
 606                                 $result = $db->sql_query($sql);
 607
 608                                 while ($row = $db->sql_fetchrow($result))
 609                                 {
 610                                         $orig_topic_id = $shadow_topic_list[$row['topic_id']];
 611
 612                                         // We want to retain some values
 613                                         $row = array_merge($row, array(
 614                                                 'topic_moved_id'        => $rowset[$orig_topic_id]['topic_moved_id'],
 615                                                 'topic_status'          => $rowset[$orig_topic_id]['topic_status'],
 616                                                 'forum_name'            => $rowset[$orig_topic_id]['forum_name'])
 617                                         );
 618
 619                                         $rowset[$orig_topic_id] = $row;
 620                                 }
 621                                 $db->sql_freeresult($result);
 622                         }
 623                         unset($shadow_topic_list);
 624
 625                         foreach ($forums as $forum_id => $forum)
 626                         {
 627                                 if ($user->data['is_registered'] && $config['load_db_lastread'])
 628                                 {
 629                                         $topic_tracking_info[$forum_id] = get_topic_tracking($forum_id, $forum['topic_list'], $forum['rowset'], array($forum_id => $forum['mark_time']), ($forum_id) ? false : $forum['topic_list']);
 630                                 }
 631                                 else if ($config['load_anon_lastread'] || $user->data['is_registered'])
 632                                 {
 633                                         $topic_tracking_info[$forum_id] = get_complete_topic_tracking($forum_id, $forum['topic_list'], ($forum_id) ? false : $forum['topic_list']);
 634
 635                                         if (!$user->data['is_registered'])
 636                                         {
 637                                                 $user->data['user_lastmark'] = (isset($tracking_topics['l'])) ? (int) (base_convert($tracking_topics['l'], 36, 10) + $config['board_startdate']) : 0;
 638                                         }
 639                                 }
 640                         }
 641                         unset($forums);
 642                 }
 643                 else
 644                 {
 645                         $bbcode_bitfield = $text_only_message = '';
 646                         $attach_list = array();
 647
 648                         while ($row = $db->sql_fetchrow($result))
 649                         {
 650                                 // We pre-process some variables here for later usage
 651                                 $row['post_text'] = censor_text($row['post_text']);
 652
 653                                 $text_only_message = $row['post_text'];
 654                                 // make list items visible as such
 655                                 if ($row['bbcode_uid'])
 656                                 {
 657                                         $text_only_message = str_replace('[*:' . $row['bbcode_uid'] . ']', '&sdot;&nbsp;', $text_only_message);
 658                                         // no BBCode in text only message
 659                                         strip_bbcode($text_only_message, $row['bbcode_uid']);
 660                                 }
 661
 662                                 if ($return_chars == -1 || utf8_strlen($text_only_message) < ($return_chars + 3))
 663                                 {
 664                                         $row['display_text_only'] = false;
 665                                         $bbcode_bitfield = $bbcode_bitfield | base64_decode($row['bbcode_bitfield']);
 666
 667                                         // Does this post have an attachment? If so, add it to the list
 668                                         if ($row['post_attachment'] && $config['allow_attachments'])
 669                                         {
 670                                                 $attach_list[$row['forum_id']][] = $row['post_id'];
 671                                         }
 672                                 }
 673                                 else
 674                                 {
 675                                         $row['post_text'] = $text_only_message;
 676                                         $row['display_text_only'] = true;
 677                                 }
 678
 679                                 $rowset[] = $row;
 680                         }
 681                         $db->sql_freeresult($result);
 682
 683                         unset($text_only_message);
 684
 685                         // Instantiate BBCode if needed
 686                         if ($bbcode_bitfield !== '')
 687                         {
 688                                 include_once(PHPBB_ROOT_PATH . 'includes/bbcode.' . PHP_EXT);
 689                                 $bbcode = new bbcode(base64_encode($bbcode_bitfield));
 690                         }
 691
 692                         // Pull attachment data
 693                         if (sizeof($attach_list))
 694                         {
 695                                 $use_attach_list = $attach_list;
 696                                 $attach_list = array();
 697
 698                                 foreach ($use_attach_list as $forum_id => $_list)
 699                                 {
 700                                         if ($auth->acl_get('u_download') && $auth->acl_get('f_download', $forum_id))
 701                                         {
 702                                                 $attach_list = array_merge($attach_list, $_list);
 703                                         }
 704                                 }
 705                         }
 706
 707                         if (sizeof($attach_list))
 708                         {
 709                                 $sql = 'SELECT *
 710                                         FROM ' . ATTACHMENTS_TABLE . '
 711                                         WHERE ' . $db->sql_in_set('post_msg_id', $attach_list) . '
 712                                                 AND in_message = 0
 713                                         ORDER BY filetime DESC, post_msg_id ASC';
 714                                 $result = $db->sql_query($sql);
 715
 716                                 while ($row = $db->sql_fetchrow($result))
 717                                 {
 718                                         $attachments[$row['post_msg_id']][] = $row;
 719                                 }
 720                                 $db->sql_freeresult($result);
 721                         }
 722                 }
 723
 724                 if ($hilit)
 725                 {
 726                         // Remove bad highlights
 727                         $hilit_array = array_filter(explode('|', $hilit), 'strlen');
 728                         foreach ($hilit_array as $key => $value)
 729                         {
 730                                 $hilit_array[$key] = str_replace('\*', '\w*?', preg_quote($value, '#'));
 731                                 $hilit_array[$key] = preg_replace('#(^|\s)\\\\w\*\?(\s|$)#', '$1\w+?$2', $hilit_array[$key]);
 732                         }
 733                         $hilit = implode('|', $hilit_array);
 734                 }
 735
 736                 foreach ($rowset as $row)
 737                 {
 738                         $forum_id = $row['forum_id'];
 739                         $result_topic_id = $row['topic_id'];
 740                         $topic_title = censor_text($row['topic_title']);
 741
 742                         // we need to select a forum id for this global topic
 743                         if (!$forum_id)
 744                         {
 745                                 if (!isset($g_forum_id))
 746                                 {
 747                                         // Get a list of forums the user cannot read
 748                                         $forum_ary = array_unique(array_keys($auth->acl_getf('!f_read', true)));
 749
 750                                         // Determine first forum the user is able to read (must not be a category)
 751                                         $sql = 'SELECT forum_id
 752                                                 FROM ' . FORUMS_TABLE . '
 753                                                 WHERE forum_type = ' . FORUM_POST;
 754
 755                                         if (sizeof($forum_ary))
 756                                         {
 757                                                 $sql .= ' AND ' . $db->sql_in_set('forum_id', $forum_ary, true);
 758                                         }
 759
 760                                         $result = $db->sql_query_limit($sql, 1);
 761                                         $g_forum_id = (int) $db->sql_fetchfield('forum_id');
 762                                 }
 763                                 $u_forum_id = $g_forum_id;
 764                         }
 765                         else
 766                         {
 767                                 $u_forum_id = $forum_id;
 768                         }
 769
 770                         $view_topic_url = append_sid('viewtopic', "f=$u_forum_id&amp;t=$result_topic_id" . (($u_hilit) ? "&amp;hilit=$u_hilit" : ''));
 771
 772                         $replies = ($auth->acl_get('m_approve', $forum_id)) ? $row['topic_replies_real'] : $row['topic_replies'];
 773
 774                         if ($show_results == 'topics')
 775                         {
 776                                 if ($config['load_db_track'] && $author_id === $user->data['user_id'])
 777                                 {
 778                                         $row['topic_posted'] = 1;
 779                                 }
 780
 781                                 $folder_img = $folder_alt = $topic_type = '';
 782                                 topic_status($row, $replies, (isset($topic_tracking_info[$forum_id][$row['topic_id']]) && $row['topic_last_post_time'] > $topic_tracking_info[$forum_id][$row['topic_id']]) ? true : false, $folder_img, $folder_alt, $topic_type);
 783
 784                                 $unread_topic = (isset($topic_tracking_info[$forum_id][$row['topic_id']]) && $row['topic_last_post_time'] > $topic_tracking_info[$forum_id][$row['topic_id']]) ? true : false;
 785
 786                                 $topic_unapproved = (!$row['topic_approved'] && $auth->acl_get('m_approve', $forum_id)) ? true : false;
 787                                 $posts_unapproved = ($row['topic_approved'] && $row['topic_replies'] < $row['topic_replies_real'] && $auth->acl_get('m_approve', $forum_id)) ? true : false;
 788                                 $u_mcp_queue = ($topic_unapproved || $posts_unapproved) ? append_sid('mcp', 'i=queue&amp;mode=' . (($topic_unapproved) ? 'approve_details' : 'unapproved_posts') . "&amp;t=$result_topic_id", true, $user->session_id) : '';
 789
 790                                 $row['topic_title'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['topic_title']);
 791
 792                                 $tpl_ary = array(
 793                                         'TOPIC_AUTHOR'                          => get_username_string('username', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 794                                         'TOPIC_AUTHOR_COLOUR'           => get_username_string('colour', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 795                                         'TOPIC_AUTHOR_FULL'                     => get_username_string('full', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 796                                         'FIRST_POST_TIME'                       => $user->format_date($row['topic_time']),
 797                                         'LAST_POST_SUBJECT'                     => $row['topic_last_post_subject'],
 798                                         'LAST_POST_TIME'                        => $user->format_date($row['topic_last_post_time']),
 799                                         'LAST_VIEW_TIME'                        => $user->format_date($row['topic_last_view_time']),
 800                                         'LAST_POST_AUTHOR'                      => get_username_string('username', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 801                                         'LAST_POST_AUTHOR_COLOUR'       => get_username_string('colour', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 802                                         'LAST_POST_AUTHOR_FULL'         => get_username_string('full', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 803
 804                                         'PAGINATION'            => topic_generate_pagination($replies, $view_topic_url),
 805                                         'TOPIC_TYPE'            => $topic_type,
 806
 807                                         'TOPIC_FOLDER_IMG'              => $user->img($folder_img, $folder_alt),
 808                                         'TOPIC_FOLDER_IMG_SRC'  => $user->img($folder_img, $folder_alt, 'src'),
 809                                         'TOPIC_FOLDER_IMG_ALT'  => $user->lang[$folder_alt],
 810                                         'TOPIC_FOLDER_IMG_WIDTH'=> $user->img($folder_img, '', 'width'),
 811                                         'TOPIC_FOLDER_IMG_HEIGHT'       => $user->img($folder_img, '', 'height'),
 812
 813                                         'TOPIC_ICON_IMG'                => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['img'] : '',
 814                                         'TOPIC_ICON_IMG_WIDTH'  => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['width'] : '',
 815                                         'TOPIC_ICON_IMG_HEIGHT' => (!empty($icons[$row['icon_id']])) ? $icons[$row['icon_id']]['height'] : '',
 816                                         'ATTACH_ICON_IMG'               => ($auth->acl_get('u_download') && $auth->acl_get('f_download', $forum_id) && $row['topic_attachment']) ? $user->img('icon_topic_attach', $user->lang['TOTAL_ATTACHMENTS']) : '',
 817                                         'UNAPPROVED_IMG'                => ($topic_unapproved || $posts_unapproved) ? $user->img('icon_topic_unapproved', ($topic_unapproved) ? 'TOPIC_UNAPPROVED' : 'POSTS_UNAPPROVED') : '',
 818
 819                                         'S_TOPIC_GLOBAL'                => (!$forum_id) ? true : false,
 820                                         'S_TOPIC_TYPE'                  => $row['topic_type'],
 821                                         'S_USER_POSTED'                 => (!empty($row['mark_type'])) ? true : false,
 822                                         'S_UNREAD_TOPIC'                => $unread_topic,
 823
 824                                         'S_TOPIC_REPORTED'              => (!empty($row['topic_reported']) && $auth->acl_get('m_report', $forum_id)) ? true : false,
 825                                         'S_TOPIC_UNAPPROVED'    => $topic_unapproved,
 826                                         'S_POSTS_UNAPPROVED'    => $posts_unapproved,
 827
 828                                         'U_LAST_POST'                   => $view_topic_url . '&amp;p=' . $row['topic_last_post_id'] . '#p' . $row['topic_last_post_id'],
 829                                         'U_LAST_POST_AUTHOR'    => get_username_string('profile', $row['topic_last_poster_id'], $row['topic_last_poster_name'], $row['topic_last_poster_colour']),
 830                                         'U_TOPIC_AUTHOR'                => get_username_string('profile', $row['topic_poster'], $row['topic_first_poster_name'], $row['topic_first_poster_colour']),
 831                                         'U_NEWEST_POST'                 => $view_topic_url . '&amp;view=unread#unread',
 832                                         'U_MCP_REPORT'                  => append_sid('mcp', 'i=reports&amp;mode=reports&amp;t=' . $result_topic_id, true, $user->session_id),
 833                                         'U_MCP_QUEUE'                   => $u_mcp_queue,
 834                                 );
 835                         }
 836                         else
 837                         {
 838                                 if ((isset($zebra['foe']) && in_array($row['poster_id'], $zebra['foe'])) && (!$view || $view != 'show' || $post_id != $row['post_id']))
 839                                 {
 840                                         $template->assign_block_vars('searchresults', array(
 841                                                 'S_IGNORE_POST' => true,
 842
 843                                                 'L_IGNORE_POST' => sprintf($user->lang['POST_BY_FOE'], $row['username'], "<a href=\"$u_search&amp;start=$start&amp;p=" . $row['post_id'] . '&amp;view=show#p' . $row['post_id'] . '">', '</a>'))
 844                                         );
 845
 846                                         continue;
 847                                 }
 848
 849                                 // Replace naughty words such as farty pants
 850                                 $row['post_subject'] = censor_text($row['post_subject']);
 851
 852                                 if ($row['display_text_only'])
 853                                 {
 854                                         // now find context for the searched words
 855                                         $row['post_text'] = get_context($row['post_text'], array_filter(explode('|', $hilit), 'strlen'), $return_chars);
 856                                         $row['post_text'] = bbcode_nl2br($row['post_text']);
 857                                 }
 858                                 else
 859                                 {
 860                                         // Second parse bbcode here
 861                                         if ($row['bbcode_bitfield'])
 862                                         {
 863                                                 $bbcode->bbcode_second_pass($row['post_text'], $row['bbcode_uid'], $row['bbcode_bitfield']);
 864                                         }
 865
 866                                         $row['post_text'] = bbcode_nl2br($row['post_text']);
 867                                         $row['post_text'] = smiley_text($row['post_text']);
 868
 869                                         if (!empty($attachments[$row['post_id']]))
 870                                         {
 871                                                 parse_attachments($forum_id, $row['post_text'], $attachments[$row['post_id']], $update_count);
 872
 873                                                 // we only display inline attachments
 874                                                 unset($attachments[$row['post_id']]);
 875                                         }
 876                                 }
 877
 878                                 if ($hilit)
 879                                 {
 880                                         // post highlighting
 881                                         $row['post_text'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['post_text']);
 882                                         $row['post_subject'] = preg_replace('#(?!<.*)(?<!\w)(' . $hilit . ')(?!\w|[^<>]*(?:</s(?:cript|tyle))?>)#is', '<span class="posthilit">$1</span>', $row['post_subject']);
 883                                 }
 884
 885                                 $tpl_ary = array(
 886                                         'POST_AUTHOR_FULL'              => get_username_string('full', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 887                                         'POST_AUTHOR_COLOUR'    => get_username_string('colour', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 888                                         'POST_AUTHOR'                   => get_username_string('username', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 889                                         'U_POST_AUTHOR'                 => get_username_string('profile', $row['poster_id'], $row['username'], $row['user_colour'], $row['post_username']),
 890
 891                                         'POST_SUBJECT'          => $row['post_subject'],
 892                                         'POST_DATE'                     => (!empty($row['post_time'])) ? $user->format_date($row['post_time']) : '',
 893                                         'MESSAGE'                       => $row['post_text']
 894                                 );
 895                         }
 896
 897                         $template->assign_block_vars('searchresults', array_merge($tpl_ary, array(
 898                                 'FORUM_ID'                      => $forum_id,
 899                                 'TOPIC_ID'                      => $result_topic_id,
 900                                 'POST_ID'                       => ($show_results == 'posts') ? $row['post_id'] : false,
 901
 902                                 'FORUM_TITLE'           => $row['forum_name'],
 903                                 'TOPIC_TITLE'           => $topic_title,
 904                                 'TOPIC_REPLIES'         => $replies,
 905                                 'TOPIC_VIEWS'           => $row['topic_views'],
 906
 907                                 'U_VIEW_TOPIC'          => $view_topic_url,
 908                                 'U_VIEW_FORUM'          => append_sid('viewforum', 'f=' . $forum_id),
 909                                 'U_VIEW_POST'           => (!empty($row['post_id'])) ? append_sid('viewtopic', "f=$forum_id&amp;t=" . $row['topic_id'] . '&amp;p=' . $row['post_id'] . (($u_hilit) ? '&amp;hilit=' . $u_hilit : '')) . '#p' . $row['post_id'] : '')
 910                         ));
 911                 }
 912
 913                 if ($topic_id && ($topic_id == $result_topic_id))
 914                 {
 915                         $template->assign_vars(array(
 916                                 'SEARCH_TOPIC'          => $topic_title,
 917                                 'U_SEARCH_TOPIC'        => $view_topic_url
 918                         ));
 919                 }
 920         }
 921         unset($rowset);
 922
 923         page_header(($l_search_title) ? $l_search_title : $user->lang['SEARCH']);
 924
 925         $template->set_filenames(array(
 926                 'body' => 'search_results.html')
 927         );
 928         make_jumpbox(append_sid('viewforum'));
 929
 930         page_footer();
 931 }
 932
 933
 934 // Search forum
 935 $s_forums = '';
 936 $sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.left_id, f.right_id, f.forum_password, f.enable_indexing, fa.user_id
 937         FROM ' . FORUMS_TABLE . ' f
 938         LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id
 939                 AND fa.session_id = '" . $db->sql_escape($user->session_id) . "')
 940         ORDER BY f.left_id ASC";
 941 $result = $db->sql_query($sql);
 942
 943 $right = $cat_right = $padding_inc = 0;
 944 $padding = $forum_list = $holding = '';
 945 $pad_store = array('0' => '');
 946
 947 while ($row = $db->sql_fetchrow($result))
 948 {
 949         if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id']))
 950         {
 951                 // Non-postable forum with no subforums, don't display
 952                 continue;
 953         }
 954
 955         if ($row['forum_type'] == FORUM_POST && ($row['left_id'] + 1 == $row['right_id']) && !$row['enable_indexing'])
 956         {
 957                 // Postable forum with no subforums and indexing disabled, don't display
 958                 continue;
 959         }
 960
 961         if ($row['forum_type'] == FORUM_LINK || ($row['forum_password'] && !$row['user_id']))
 962         {
 963                 // if this forum is a link or password protected (user has not entered the password yet) then skip to the next branch
 964                 continue;
 965         }
 966
 967         if ($row['left_id'] < $right)
 968         {
 969                 $padding .= '&nbsp; &nbsp;';
 970                 $pad_store[$row['parent_id']] = $padding;
 971         }
 972         else if ($row['left_id'] > $right + 1)
 973         {
 974                 if (isset($pad_store[$row['parent_id']]))
 975                 {
 976                         $padding = $pad_store[$row['parent_id']];
 977                 }
 978                 else
 979                 {
 980                         continue;
 981                 }
 982         }
 983
 984         $right = $row['right_id'];
 985
 986         if ($auth->acl_gets('!f_search', '!f_list', $row['forum_id']))
 987         {
 988                 // if the user does not have permissions to search or see this forum skip only this forum/category
 989                 continue;
 990         }
 991
 992         $selected = (in_array($row['forum_id'], $search_forum)) ? ' selected="selected"' : '';
 993
 994         if ($row['left_id'] > $cat_right)
 995         {
 996                 // make sure we don't forget anything
 997                 $s_forums .= $holding;
 998                 $holding = '';
 999         }
1000
1001         if ($row['right_id'] - $row['left_id'] > 1)
1002         {
1003                 $cat_right = max($cat_right, $row['right_id']);
1004
1005                 $holding .= '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';
1006         }
1007         else
1008         {
1009                 $s_forums .= $holding . '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';
1010                 $holding = '';
1011         }
1012 }
1013
1014 if ($holding)
1015 {
1016         $s_forums .= $holding;
1017 }
1018
1019 $db->sql_freeresult($result);
1020 unset($pad_store);
1021
1022 if (!$s_forums)
1023 {
1024         trigger_error('NO_SEARCH');
1025 }
1026
1027 // Number of chars returned
1028 $s_characters = '<option value="-1">' . $user->lang['ALL_AVAILABLE'] . '</option>';
1029 $s_characters .= '<option value="0">0</option>';
1030 $s_characters .= '<option value="25">25</option>';
1031 $s_characters .= '<option value="50">50</option>';
1032
1033 for ($i = 100; $i <= 1000 ; $i += 100)
1034 {
1035         $selected = ($i == 300) ? ' selected="selected"' : '';
1036         $s_characters .= '<option value="' . $i . '"' . $selected . '>' . $i . '</option>';
1037 }
1038
1039 $s_hidden_fields = array('t' => $topic_id);
1040
1041 /**
1042 * @todo get rid of this global $_SID voodoo!
1043 */
1044 if ($_SID)
1045 {
1046         $s_hidden_fields['sid'] = $_SID;
1047 }
1048
1049 /**
1050 * @todo get rid of this global $_EXTRA_URL voodoo, too!
1051 */
1052 if (!empty($_EXTRA_URL))
1053 {
1054         foreach ($_EXTRA_URL as $url_param)
1055         {
1056                 $url_param = explode('=', $url_param, 2);
1057                 $s_hidden_fields[$url_param[0]] = $url_param[1];
1058         }
1059 }
1060
1061 $template->assign_vars(array(
1062         'S_SEARCH_ACTION'               => append_sid('search', false, true, 0), // We force no ?sid= appending by using 0
1063         'S_HIDDEN_FIELDS'               => build_hidden_fields($s_hidden_fields),
1064         'S_CHARACTER_OPTIONS'   => $s_characters,
1065         'S_FORUM_OPTIONS'               => $s_forums,
1066         'S_SELECT_SORT_DIR'             => $s_sort_dir,
1067         'S_SELECT_SORT_KEY'             => $s_sort_key,
1068         'S_SELECT_SORT_DAYS'    => $s_limit_days,
1069         'S_IN_SEARCH'                   => true,
1070 ));
1071
1072 // only show recent searches to search administrators
1073 if ($auth->acl_get('a_search'))
1074 {
1075         $sql = 'SELECT search_time, search_keywords
1076                 FROM ' . SEARCH_RESULTS_TABLE . '
1077                 WHERE ' . $db->sql_function('length_text', 'search_keywords') . ' > 0
1078                 ORDER BY search_time DESC';
1079         $result = $db->sql_query_limit($sql, 5);
1080
1081         while ($row = $db->sql_fetchrow($result))
1082         {
1083                 $keywords = $row['search_keywords'];
1084
1085                 $template->assign_block_vars('recentsearch', array(
1086                         'KEYWORDS'      => $keywords,
1087                         'TIME'          => $user->format_date($row['search_time']),
1088
1089                         'U_KEYWORDS'    => append_sid('search', 'keywords=' . urlencode(htmlspecialchars_decode($keywords)))
1090                 ));
1091         }
1092         $db->sql_freeresult($result);
1093 }
1094
1095 // Output the basic page
1096 page_header($user->lang['SEARCH']);
1097
1098 $template->set_filenames(array(
1099         'body' => 'search_body.html')
1100 );
1101 make_jumpbox(append_sid('viewforum'));
1102
1103 page_footer();
1104
1105 ?>