Gazelle/sections/forums/search.php

<?
//TODO: Clean up this fucking mess
/*
Forums search result page
*/

list($Page, $Limit) = Format::page_limit(POSTS_PER_PAGE);

if (isset($_GET['type']) && $_GET['type'] === 'body') {
	$Type = 'body';
} else {
	$Type = 'title';
}

// What are we looking for? Let's make sure it isn't dangerous.
if (isset($_GET['search'])) {
	$Search = trim($_GET['search']);
} else {
	$Search = '';
}

$ThreadAfterDate = db_string($_GET['thread_created_after']);
$ThreadBeforeDate = db_string($_GET['thread_created_before']);

if ((!empty($ThreadAfterDate) && !is_valid_date($ThreadAfterDate)) || (!empty($ThreadBeforeDate) && !is_valid_date($ThreadBeforeDate))) {
	error("Incorrect topic created date");
}

$PostAfterDate = db_string($_GET['post_created_after']);
$PostBeforeDate = db_string($_GET['post_created_before']);

if ((!empty($PostAfterDate) && !is_valid_date($PostAfterDate)) || (!empty($PostBeforeDate) && !is_valid_date($PostBeforeDate))) {
	error("Incorrect post created date");
}

// Searching for posts by a specific user
if (!empty($_GET['user'])) {
	$User = trim($_GET['user']);
	$DB->query("
		SELECT ID
		FROM users_main
		WHERE Username = '".db_string($User)."'");
	list($AuthorID) = $DB->next_record();
	if ($AuthorID === null) {
		$AuthorID = 0;
		//this will cause the search to return 0 results.
		//workaround in line 276 to display that the username was wrong.
	}
} else {
	$User = '';
}

// Are we looking in individual forums?
if (isset($_GET['forums']) && is_array($_GET['forums'])) {
	$ForumArray = array();
	foreach ($_GET['forums'] as $Forum) {
		if (is_number($Forum)) {
			$ForumArray[] = $Forum;
		}
	}
	if (count($ForumArray) > 0) {
		$SearchForums = implode(', ', $ForumArray);
	}
}

// Searching for posts in a specific thread
if (!empty($_GET['threadid']) && is_number($_GET['threadid'])) {
	$ThreadID = $_GET['threadid'];
	$Type = 'body';
	$SQL = "
		SELECT
			Title
		FROM forums_topics AS t
			JOIN forums AS f ON f.ID = t.ForumID
		WHERE t.ID = $ThreadID
			AND " . Forums::user_forums_sql();
	$DB->query($SQL);
	if (list($Title) = $DB->next_record()) {
		$Title = " &gt; <a href=\"forums.php?action=viewthread&amp;threadid=$ThreadID\">$Title</a>";
	} else {
		error(404);
	}
} else {
	$ThreadID = '';
}

// Let's hope we got some results - start printing out the content.
View::show_header('Forums &gt; Search', 'bbcode,forum_search,datetime_picker', 'datetime_picker');
?>
<div class="thin">
	<div class="header">
		<h2><a href="forums.php">Forums</a> &gt; Search<?=$Title?></h2>
	</div>
	<form class="search_form" name="forums" action="" method="get">
		<input type="hidden" name="action" value="search" />
		<table cellpadding="6" cellspacing="1" border="0" class="layout border" width="100%">
			<tr>
				<td><strong>Search for:</strong></td>
				<td>
					<input type="search" name="search" size="70" value="<?=display_str($Search)?>" />
				</td>
			</tr>
			<tr>
				<td><strong>Posted by:</strong></td>
				<td>
					<input type="search" name="user" placeholder="Username" size="70" value="<?=display_str($User)?>" />
				</td>
			</tr>
			<tr>
				<td><strong>Topic created:</strong></td>
				<td>
					After:
					<input type="text" class="date_picker" name="thread_created_after" id="thread_created_after" value="<?=$ThreadAfterDate?>" />
					Before:
					<input type="text" class="date_picker" name="thread_created_before" id="thread_created_before" value="<?=$ThreadBeforeDate?>" />
				</td>
			</tr>
<?
if (empty($ThreadID)) {
?>
			<tr>
				<td><strong>Search in:</strong></td>
				<td>
					<input type="radio" name="type" id="type_title" value="title"<? if ($Type == 'title') { echo ' checked="checked"'; } ?> />
					<label for="type_title">Titles</label>
					<input type="radio" name="type" id="type_body" value="body"<? if ($Type == 'body') { echo ' checked="checked"'; } ?> />
					<label for="type_body">Post bodies</label>
				</td>
			</tr>
			<tr id="post_created_row" <? if ($Type == 'title') { echo "class='hidden'"; } ?>>
				<td><strong>Post created:</strong></td>
				<td>
					After:
					<input type="text" class="date_picker" name="post_created_after" id="post_created_after" value="<?=$PostAfterDate?>" />
					Before:
					<input type="text" class="date_picker" name="post_created_before" id="post_created_before" value="<?=$PostBeforeDate?>" />
				</td>
			</tr>
			<tr>
				<td><strong>Forums:</strong></td>
				<td>
		<table id="forum_search_cat_list" class="cat_list layout">


<?
	// List of forums
	$Open = false;
	$LastCategoryID = -1;
	$Columns = 0;
	$i = 0;
	foreach ($Forums as $Forum) {
		if (!Forums::check_forumperm($Forum['ID'])) {
			continue;
		}

		$Columns++;

		if ($Forum['CategoryID'] != $LastCategoryID) {
			$LastCategoryID = $Forum['CategoryID'];
			if ($Open) {
				if ($Columns % 5) { ?>
				<td colspan="<?=(5 - ($Columns % 5))?>"></td>
<?
				}

?>
			</tr>
<?
			}
			$Columns = 0;
			$Open = true;
			$i++;
?>
			<tr>
				<td colspan="5" class="forum_cat">
					<strong><?=$ForumCats[$Forum['CategoryID']]?></strong>
					<a href="#" class="brackets forum_category" id="forum_category_<?=$i?>">Check all</a>
				</td>
			</tr>
			<tr>
<?		} elseif ($Columns % 5 == 0) { ?>
			</tr>
			<tr>
<?		} ?>
				<td>
					<input type="checkbox" name="forums[]" value="<?=$Forum['ID']?>" data-category="forum_category_<?=$i?>" id="forum_<?=$Forum['ID']?>"<? if (isset($_GET['forums']) && in_array($Forum['ID'], $_GET['forums'])) { echo ' checked="checked"';} ?> />
					<label for="forum_<?=$Forum['ID']?>"><?=htmlspecialchars($Forum['Name'])?></label>
				</td>
<? 	}
	if ($Columns % 5) { ?>
				<td colspan="<?=(5 - ($Columns % 5))?>"></td>
<?	} ?>
			</tr>
		</table>
<? } else { ?>
						<input type="hidden" name="threadid" value="<?=$ThreadID?>" />
<? } ?>
					</td>
				</tr>
				<tr>
					<td colspan="2" class="center">
						<input type="submit" value="Search" />
					</td>
				</tr>
			</table>
		</form>
	<div class="linkbox">
<?

// Break search string down into individual words
$Words = explode(' ', db_string($Search));

if ($Type == 'body') {

	$SQL = "
		SELECT
			SQL_CALC_FOUND_ROWS
			t.ID,
			".(!empty($ThreadID) ? "SUBSTRING_INDEX(p.Body, ' ', 40)" : 't.Title').",
			t.ForumID,
			f.Name,
			p.AddedTime,
			p.ID,
			p.Body,
			t.CreatedTime
		FROM forums_posts AS p
			JOIN forums_topics AS t ON t.ID = p.TopicID
			JOIN forums AS f ON f.ID = t.ForumID
		WHERE " . Forums::user_forums_sql() . ' AND ';

	//In tests, this is significantly faster than LOCATE
	$SQL .= "p.Body LIKE '%";
	$SQL .= implode("%' AND p.Body LIKE '%", $Words);
	$SQL .= "%' ";

	//$SQL .= "LOCATE('";
	//$SQL .= implode("', p.Body) AND LOCATE('", $Words);
	//$SQL .= "', p.Body) ";

	if (isset($SearchForums)) {
		$SQL .= " AND f.ID IN ($SearchForums)";
	}
	if (isset($AuthorID)) {
		$SQL .= " AND p.AuthorID = '$AuthorID' ";
	}
	if (!empty($ThreadID)) {
		$SQL .= " AND t.ID = '$ThreadID' ";
	}
	if (!empty($ThreadAfterDate)) {
		$SQL .= " AND t.CreatedTime >= '$ThreadAfterDate'";
	}
	if (!empty($ThreadBeforeDate)) {
		$SQL .= " AND t.CreatedTime <= '$ThreadBeforeDate'";
	}
	if (!empty($PostAfterDate)) {
		$SQL .= " AND p.AddedTime >= '$PostAfterDate'";
	}
	if (!empty($PostBeforeDate)) {
		$SQL .= " AND p.AddedTime <= '$PostBeforeDate'";
	}

	$SQL .= "
		ORDER BY p.AddedTime DESC
		LIMIT $Limit";

} else {
	$SQL = "
		SELECT
			SQL_CALC_FOUND_ROWS
			t.ID,
			t.Title,
			t.ForumID,
			f.Name,
			t.LastPostTime,
			'',
			'',
			t.CreatedTime
		FROM forums_topics AS t
			JOIN forums AS f ON f.ID = t.ForumID
		WHERE " . Forums::user_forums_sql() . ' AND ';
	$SQL .= "t.Title LIKE '%";
	$SQL .= implode("%' AND t.Title LIKE '%", $Words);
	$SQL .= "%' ";
	if (isset($SearchForums)) {
		$SQL .= " AND f.ID IN ($SearchForums)";
	}
	if (isset($AuthorID)) {
		$SQL .= " AND t.AuthorID = '$AuthorID' ";
	}
	if (!empty($ThreadAfterDate)) {
		$SQL .= " AND t.CreatedTime >= '$ThreadAfterDate'";
	}
	if (!empty($ThreadBeforeDate)) {
		$SQL .= " AND t.CreatedTime <= '$ThreadBeforeDate'";
	}
	$SQL .= "
		ORDER BY t.LastPostTime DESC
		LIMIT $Limit";
}

// Perform the query
$Records = $DB->query($SQL);
$DB->query('SELECT FOUND_ROWS()');
list($Results) = $DB->next_record();
$DB->set_query_id($Records);

$Pages = Format::get_pages($Page, $Results, POSTS_PER_PAGE, 9);
echo $Pages;
?>
	</div>
	<table cellpadding="6" cellspacing="1" border="0" class="forum_list border" width="100%">
	<tr class="colhead">
		<td>Forum</td>
		<td><?=((!empty($ThreadID)) ? 'Post begins' : 'Topic')?></td>
		<td>Topic creation time</td>
		<td>Last post time</td>
	</tr>
<? if (!$DB->has_results()) { ?>
		<tr><td colspan="4">Nothing found<?=((isset($AuthorID) && $AuthorID == 0) ? ' (unknown username)' : '')?>!</td></tr>
<? }

$Row = 'a'; // For the pretty colours
while (list($ID, $Title, $ForumID, $ForumName, $LastTime, $PostID, $Body, $ThreadCreatedTime) = $DB->next_record()) {
	$Row = $Row === 'a' ? 'b' : 'a';
	// Print results
?>
		<tr class="row<?=$Row?>">
			<td>
				<a href="forums.php?action=viewforum&amp;forumid=<?=$ForumID?>"><?=$ForumName?></a>
			</td>
			<td>
<?	if (empty($ThreadID)) { ?>
				<a href="forums.php?action=viewthread&amp;threadid=<?=$ID?>"><?=Format::cut_string($Title, 80); ?></a>
<?	} else { ?>
				<?=Format::cut_string($Title, 80); ?>
<?
	}
	if ($Type == 'body') { ?>
				<a href="#" onclick="$('#post_<?=$PostID?>_text').gtoggle(); return false;">(Show)</a> <span style="float: right;" class="tooltip last_read" title="Jump to post"><a href="forums.php?action=viewthread&amp;threadid=<?=$ID?><? if (!empty($PostID)) { echo "&amp;postid=$PostID#post$PostID"; } ?>"></a></span>
<?	} ?>
			</td>
			<td>
				<?=time_diff($ThreadCreatedTime)?>
			</td>
			<td>
				<?=time_diff($LastTime)?>
			</td>
		</tr>
<?	if ($Type == 'body') { ?>
		<tr class="row<?=$Row?> hidden" id="post_<?=$PostID?>_text">
			<td colspan="4"><?=Text::full_format($Body)?></td>
		</tr>
<?	}
}
?>
	</table>

	<div class="linkbox">
		<?=$Pages?>
	</div>
</div>
<? View::show_footer(); ?>