Zeile 11 | Zeile 11 |
---|
/** * Build a select box list of forums the current user has permission to search *
|
/** * Build a select box list of forums the current user has permission to search *
|
* @param int The parent forum ID to start at * @param int The selected forum ID * @param int Add select boxes at this call or not * @param int The current depth
| * @param int $pid The parent forum ID to start at * @param int $selitem The selected forum ID * @param int $addselect Add select boxes at this call or not * @param string $depth The current depth
|
* @return string The forum select boxes */
|
* @return string The forum select boxes */
|
function make_searchable_forums($pid="0", $selitem='', $addselect="1", $depth='')
| function make_searchable_forums($pid=0, $selitem=0, $addselect=1, $depth='')
|
{ global $db, $pforumcache, $permissioncache, $mybb, $selecteddone, $forumlist, $forumlistbits, $theme, $templates, $lang, $forumpass; $pid = (int)$pid;
| { global $db, $pforumcache, $permissioncache, $mybb, $selecteddone, $forumlist, $forumlistbits, $theme, $templates, $lang, $forumpass; $pid = (int)$pid;
|
Zeile 56 | Zeile 56 |
---|
} if($forum['password'] != '') {
|
} if($forum['password'] != '') {
|
if($mybb->cookies['forumpass'][$forum['fid']] == md5($mybb->user['uid'].$forum['password']))
| if($mybb->cookies['forumpass'][$forum['fid']] === md5($mybb->user['uid'].$forum['password']))
|
{ $pwverified = 1; }
| { $pwverified = 1; }
|
Zeile 88 | Zeile 88 |
---|
/** * Build a comma separated list of the forums this user cannot search *
|
/** * Build a comma separated list of the forums this user cannot search *
|
* @param int The parent ID to build from * @param int First rotation or not (leave at default) * @return return a CSV list of forums the user cannot search
| * @param int $pid The parent ID to build from * @param int $first First rotation or not (leave at default) * @return string return a CSV list of forums the user cannot search
|
*/
|
*/
|
function get_unsearchable_forums($pid="0", $first=1)
| function get_unsearchable_forums($pid=0, $first=1)
|
{ global $db, $forum_cache, $permissioncache, $mybb, $unsearchableforums, $unsearchable, $templates, $forumpass;
| { global $db, $forum_cache, $permissioncache, $mybb, $unsearchableforums, $unsearchable, $templates, $forumpass;
|
Zeile 125 | Zeile 125 |
---|
$pwverified = 1; if($forum['password'] != '') {
|
$pwverified = 1; if($forum['password'] != '') {
|
if($mybb->cookies['forumpass'][$forum['fid']] != md5($mybb->user['uid'].$forum['password']))
| if($mybb->cookies['forumpass'][$forum['fid']] !== md5($mybb->user['uid'].$forum['password']))
|
{ $pwverified = 0; }
| { $pwverified = 0; }
|
Zeile 173 | Zeile 173 |
---|
/** * Build a array list of the forums this user cannot search due to password protection *
|
/** * Build a array list of the forums this user cannot search due to password protection *
|
* @param int the fids to check (leave null to check all forums) * @return return a array list of password protected forums the user cannot search
| * @param array $fids the fids to check (leave blank to check all forums) * @return array return a array list of password protected forums the user cannot search
|
*/ function get_password_protected_forums($fids=array()) {
| */ function get_password_protected_forums($fids=array()) {
|
Zeile 207 | Zeile 207 |
---|
continue; }
|
continue; }
|
if(md5($mybb->user['uid'].$forum_cache[$fid]['password']) != $mybb->cookies['forumpass'][$fid])
| if(md5($mybb->user['uid'].$forum_cache[$fid]['password']) !== $mybb->cookies['forumpass'][$fid])
|
{ $pass_fids[] = $fid; $child_list = get_child_list($fid);
| { $pass_fids[] = $fid; $child_list = get_child_list($fid);
|
Zeile 224 | Zeile 224 |
---|
/** * Clean search keywords and make them safe for querying *
|
/** * Clean search keywords and make them safe for querying *
|
* @param string The keywords to be cleaned
| * @param string $keywords The keywords to be cleaned
|
* @return string The cleaned keywords */ function clean_keywords($keywords) {
|
* @return string The cleaned keywords */ function clean_keywords($keywords) {
|
| global $db;
|
$keywords = my_strtolower($keywords);
|
$keywords = my_strtolower($keywords);
|
$keywords = str_replace("%", "\\%", $keywords);
| $keywords = $db->escape_string_like($keywords);
|
$keywords = preg_replace("#\*{2,}#s", "*", $keywords); $keywords = str_replace("*", "%", $keywords);
|
$keywords = preg_replace("#\*{2,}#s", "*", $keywords); $keywords = str_replace("*", "%", $keywords);
|
$keywords = preg_replace("#([\[\]\|\.\,:'])#s", " ", $keywords);
| |
$keywords = preg_replace("#\s+#s", " ", $keywords);
|
$keywords = preg_replace("#\s+#s", " ", $keywords);
|
| $keywords = str_replace('\\"', '"', $keywords);
|
// Search for "and" or "or" and remove if it's at the beginning $keywords = trim($keywords);
| // Search for "and" or "or" and remove if it's at the beginning $keywords = trim($keywords);
|
Zeile 254 | Zeile 256 |
---|
/** * Clean search keywords for fulltext searching, making them safe for querying *
|
/** * Clean search keywords for fulltext searching, making them safe for querying *
|
* @param string The keywords to be cleaned * @return string The cleaned keywords
| * @param string $keywords The keywords to be cleaned * @return string|bool The cleaned keywords or false on failure
|
*/ function clean_keywords_ft($keywords) {
| */ function clean_keywords_ft($keywords) {
|
Zeile 342 | Zeile 344 |
---|
{ // Ignore when no brace was opened if($depth > 0)
|
{ // Ignore when no brace was opened if($depth > 0)
|
{
| {
|
$words[$depth-1][] = $boolean[$depth-1].'('.implode(' ', $words[$depth]).')'; --$depth;
|
$words[$depth-1][] = $boolean[$depth-1].'('.implode(' ', $words[$depth]).')'; --$depth;
|
} }
| } }
|
// Valid operators for opening braces elseif($word == '+(' || $word == '-(' || $word == '<(' || $word == '>(' || $word == '~(' || $word == '(')
|
// Valid operators for opening braces elseif($word == '+(' || $word == '-(' || $word == '<(' || $word == '>(' || $word == '~(' || $word == '(')
|
{
| {
|
if(strlen($word) == 2)
|
if(strlen($word) == 2)
|
{
| {
|
$boolean[$depth] = substr($word, 0, 1); } $words[++$depth] = array();
| $boolean[$depth] = substr($word, 0, 1); } $words[++$depth] = array();
|
Zeile 361 | Zeile 363 |
---|
{ $operator = substr($word, 0, 1); switch($operator)
|
{ $operator = substr($word, 0, 1); switch($operator)
|
{
| {
|
// Allowed operators case '-': case '+':
| // Allowed operators case '-': case '+':
|
Zeile 380 | Zeile 382 |
---|
$word = preg_replace("#^\*#s", '', $word); $word = $operator.$word; if(strlen($word) <= 1)
|
$word = preg_replace("#^\*#s", '', $word); $word = $operator.$word; if(strlen($word) <= 1)
|
{
| {
|
continue; } $words[$depth][] = $word;
| continue; } $words[$depth][] = $word;
|
Zeile 408 | Zeile 410 |
---|
/** * Perform a thread and post search under MySQL or MySQLi *
|
/** * Perform a thread and post search under MySQL or MySQLi *
|
* @param array Array of search data
| * @param array $search Array of search data
|
* @return array Array of search data with results mixed in */ function privatemessage_perform_search_mysql($search)
| * @return array Array of search data with results mixed in */ function privatemessage_perform_search_mysql($search)
|
Zeile 419 | Zeile 421 |
---|
if(!$keywords && !$search['sender']) { error($lang->error_nosearchterms);
|
if(!$keywords && !$search['sender']) { error($lang->error_nosearchterms);
|
}
| }
|
if($mybb->settings['minsearchword'] < 1) { $mybb->settings['minsearchword'] = 3; }
|
if($mybb->settings['minsearchword'] < 1) { $mybb->settings['minsearchword'] = 3; }
|
|
|
$subject_lookin = ""; $message_lookin = ""; $searchsql = "uid='{$mybb->user['uid']}'";
| $subject_lookin = ""; $message_lookin = ""; $searchsql = "uid='{$mybb->user['uid']}'";
|
Zeile 434 | Zeile 436 |
---|
{ // Complex search $keywords = " {$keywords} ";
|
{ // Complex search $keywords = " {$keywords} ";
|
| switch($db->type) { case 'mysql': case 'mysqli': $sfield = 'subject'; $mfield = 'message'; break; default: $sfield = 'LOWER(subject)'; $mfield = 'LOWER(message)'; break; }
|
if(preg_match("#\s(and|or)\s#", $keywords)) { $string = "AND";
| if(preg_match("#\s(and|or)\s#", $keywords)) { $string = "AND";
|
Zeile 475 | Zeile 491 |
---|
if($i <= 1) { if($search['subject'] && $search['message'] && $subject_lookin == " AND (")
|
if($i <= 1) { if($search['subject'] && $search['message'] && $subject_lookin == " AND (")
|
{
| {
|
// We're looking for anything, check for a subject lookin continue; }
| // We're looking for anything, check for a subject lookin continue; }
|
Zeile 503 | Zeile 519 |
---|
$lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
$lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
|
|
// Add terms to search query if($search['subject'] == 1)
|
// Add terms to search query if($search['subject'] == 1)
|
{ $subject_lookin .= " $boolean LOWER(subject) LIKE '%{$word}%'"; }
| { $subject_lookin .= " $boolean {$sfield} LIKE '%{$word}%'"; }
|
if($search['message'] == 1) {
|
if($search['message'] == 1) {
|
$message_lookin .= " $boolean LOWER(message) LIKE '%{$word}%'";
| $message_lookin .= " $boolean {$mfield} LIKE '%{$word}%'";
|
} $boolean = 'AND'; }
|
} $boolean = 'AND'; }
|
} }
| } }
|
// In the middle of a quote (phrase) else {
| // In the middle of a quote (phrase) else {
|
Zeile 526 | Zeile 543 |
---|
error($lang->error_minsearchlength); } // Add phrase to search query
|
error($lang->error_minsearchlength); } // Add phrase to search query
|
$subject_lookin .= " $boolean LOWER(subject) LIKE '%{$phrase}%'";
| $subject_lookin .= " $boolean {$sfield} LIKE '%{$phrase}%'";
|
if($search['message'] == 1)
|
if($search['message'] == 1)
|
{ $message_lookin .= " $boolean LOWER(message) LIKE '%{$phrase}%'"; } $boolean = 'AND'; }
// Check to see if we have any search terms and not a malformed SQL string
| { $message_lookin .= " $boolean {$mfield} LIKE '%{$phrase}%'"; } $boolean = 'AND'; }
// Check to see if we have any search terms and not a malformed SQL string
|
$error = false; if($search['subject'] && $search['message'] && $subject_lookin == " AND (") {
| $error = false; if($search['subject'] && $search['message'] && $subject_lookin == " AND (") {
|
Zeile 560 | Zeile 577 |
---|
}
$inquote = !$inquote;
|
}
$inquote = !$inquote;
|
}
| }
|
if($search['subject'] == 1) { $subject_lookin .= ")";
| if($search['subject'] == 1) { $subject_lookin .= ")";
|
Zeile 578 | Zeile 595 |
---|
{ $keywords = str_replace("\"", '', trim($keywords)); if(my_strlen($keywords) < $mybb->settings['minsearchword'])
|
{ $keywords = str_replace("\"", '', trim($keywords)); if(my_strlen($keywords) < $mybb->settings['minsearchword'])
|
{
| {
|
$lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
| $lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
Zeile 586 | Zeile 603 |
---|
// If we're looking in both, then find matches in either the subject or the message if($search['subject'] == 1 && $search['message'] == 1) {
|
// If we're looking in both, then find matches in either the subject or the message if($search['subject'] == 1 && $search['message'] == 1) {
|
$searchsql .= " AND (LOWER(subject) LIKE '%{$keywords}%' OR LOWER(message) LIKE '%{$keywords}%')";
| $searchsql .= " AND ({$sfield} LIKE '%{$keywords}%' OR {$mfield} LIKE '%{$keywords}%')";
|
} else { if($search['subject'] == 1) {
|
} else { if($search['subject'] == 1) {
|
$searchsql .= " AND LOWER(subject) LIKE '%{$keywords}%'";
| $searchsql .= " AND {$sfield} LIKE '%{$keywords}%'";
|
}
if($search['message'] == 1) {
|
}
if($search['message'] == 1) {
|
$searchsql .= " AND LOWER(message) LIKE '%{$keywords}%'";
| $searchsql .= " AND {$mfield} LIKE '%{$keywords}%'";
|
} } }
| } } }
|
Zeile 608 | Zeile 625 |
---|
$userids = array(); $search['sender'] = my_strtolower($search['sender']);
|
$userids = array(); $search['sender'] = my_strtolower($search['sender']);
|
$query = $db->simple_select("users", "uid", "LOWER(username) LIKE '%".$db->escape_string_like($search['sender'])."%'");
| switch($db->type) { case 'mysql': case 'mysqli': $field = 'username'; break; default: $field = 'LOWER(username)'; break; } $query = $db->simple_select("users", "uid", "{$field} LIKE '%".$db->escape_string_like($search['sender'])."%'");
|
while($user = $db->fetch_array($query)) { $userids[] = $user['uid'];
| while($user = $db->fetch_array($query)) { $userids[] = $user['uid'];
|
Zeile 694 | Zeile 721 |
---|
/** * Perform a help document search under MySQL or MySQLi *
|
/** * Perform a help document search under MySQL or MySQLi *
|
* @param array Array of search data
| * @param array $search Array of search data
|
* @return array Array of search data with results mixed in */ function helpdocument_perform_search_mysql($search)
| * @return array Array of search data with results mixed in */ function helpdocument_perform_search_mysql($search)
|
Zeile 718 | Zeile 745 |
---|
if($keywords) {
|
if($keywords) {
|
| switch($db->type) { case 'mysql': case 'mysqli': $nfield = 'name'; $dfield = 'document'; break; default: $nfield = 'LOWER(name)'; $dfield = 'LOWER(document)'; break; }
|
// Complex search $keywords = " {$keywords} "; if(preg_match("#\s(and|or)\s#", $keywords))
| // Complex search $keywords = " {$keywords} "; if(preg_match("#\s(and|or)\s#", $keywords))
|
Zeile 791 | Zeile 831 |
---|
// Add terms to search query if($search['name'] == 1) {
|
// Add terms to search query if($search['name'] == 1) {
|
$name_lookin .= " $boolean LOWER(name) LIKE '%{$word}%'";
| $name_lookin .= " $boolean {$nfield} LIKE '%{$word}%'";
|
} if($search['document'] == 1) {
|
} if($search['document'] == 1) {
|
$document_lookin .= " $boolean LOWER(document) LIKE '%{$word}%'";
| $document_lookin .= " $boolean {$dfield} LIKE '%{$word}%'";
|
} } } } // In the middle of a quote (phrase) else
|
} } } } // In the middle of a quote (phrase) else
|
{
| {
|
$phrase = str_replace(array("+", "-", "*"), '', trim($phrase)); if(my_strlen($phrase) < $mybb->settings['minsearchword']) {
| $phrase = str_replace(array("+", "-", "*"), '', trim($phrase)); if(my_strlen($phrase) < $mybb->settings['minsearchword']) {
|
Zeile 810 | Zeile 850 |
---|
error($lang->error_minsearchlength); } // Add phrase to search query
|
error($lang->error_minsearchlength); } // Add phrase to search query
|
$name_lookin .= " $boolean LOWER(name) LIKE '%{$phrase}%'";
| $name_lookin .= " $boolean {$nfield} LIKE '%{$phrase}%'";
|
if($search['document'] == 1) {
|
if($search['document'] == 1) {
|
$document_lookin .= " $boolean LOWER(document) LIKE '%{$phrase}%'";
| $document_lookin .= " $boolean {$dfield} LIKE '%{$phrase}%'";
|
} }
| } }
|
Zeile 833 | Zeile 873 |
---|
{ // Just in a document? $error = true;
|
{ // Just in a document? $error = true;
|
}
if($error == true) { // There are no search keywords to look for $lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
| }
if($error == true) { // There are no search keywords to look for $lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
$inquote = !$inquote; }
| $inquote = !$inquote; }
|
Zeile 869 | Zeile 909 |
---|
// If we're looking in both, then find matches in either the name or the document if($search['name'] == 1 && $search['document'] == 1) {
|
// If we're looking in both, then find matches in either the name or the document if($search['name'] == 1 && $search['document'] == 1) {
|
$searchsql .= " AND (LOWER(name) LIKE '%{$keywords}%' OR LOWER(document) LIKE '%{$keywords}%')";
| $searchsql .= " AND ({$nfield} LIKE '%{$keywords}%' OR {$dfield} LIKE '%{$keywords}%')";
|
} else { if($search['name'] == 1)
|
} else { if($search['name'] == 1)
|
{ $searchsql .= " AND LOWER(name) LIKE '%{$keywords}%'";
| { $searchsql .= " AND {$nfield} LIKE '%{$keywords}%'";
|
}
if($search['document'] == 1) {
|
}
if($search['document'] == 1) {
|
$searchsql .= " AND LOWER(document) LIKE '%{$keywords}%'";
| $searchsql .= " AND {$dfield} LIKE '%{$keywords}%'";
|
} } }
| } } }
|
Zeile 908 | Zeile 948 |
---|
/** * Perform a thread and post search under MySQL or MySQLi *
|
/** * Perform a thread and post search under MySQL or MySQLi *
|
* @param array Array of search data
| * @param array $search Array of search data
|
* @return array Array of search data with results mixed in */ function perform_search_mysql($search)
| * @return array Array of search data with results mixed in */ function perform_search_mysql($search)
|
Zeile 929 | Zeile 969 |
---|
$subject_lookin = $message_lookin = ''; if($keywords) {
|
$subject_lookin = $message_lookin = ''; if($keywords) {
|
| switch($db->type) { case 'mysql': case 'mysqli': $tfield = 't.subject'; $pfield = 'p.message'; break; default: $tfield = 'LOWER(t.subject)'; $pfield = 'LOWER(p.message)'; break; }
|
// Complex search $keywords = " {$keywords} "; if(preg_match("#\s(and|or)\s#", $keywords))
| // Complex search $keywords = " {$keywords} "; if(preg_match("#\s(and|or)\s#", $keywords))
|
Zeile 978 | Zeile 1031 |
---|
error($lang->error_minsearchlength); } // Add terms to search query
|
error($lang->error_minsearchlength); } // Add terms to search query
|
$subject_lookin .= " $boolean LOWER(t.subject) LIKE '%{$word}%'";
| $subject_lookin .= " $boolean {$tfield} LIKE '%{$word}%'";
|
if($search['postthread'] == 1) {
|
if($search['postthread'] == 1) {
|
$message_lookin .= " $boolean LOWER(p.message) LIKE '%{$word}%'";
| $message_lookin .= " $boolean {$pfield} LIKE '%{$word}%'";
|
} $boolean = 'AND'; }
| } $boolean = 'AND'; }
|
Zeile 997 | Zeile 1050 |
---|
error($lang->error_minsearchlength); } // Add phrase to search query
|
error($lang->error_minsearchlength); } // Add phrase to search query
|
$subject_lookin .= " $boolean LOWER(t.subject) LIKE '%{$phrase}%'";
| $subject_lookin .= " $boolean {$tfield} LIKE '%{$phrase}%'";
|
if($search['postthread'] == 1) {
|
if($search['postthread'] == 1) {
|
$message_lookin .= " $boolean LOWER(p.message) LIKE '%{$phrase}%'";
| $message_lookin .= " $boolean {$pfield} LIKE '%{$phrase}%'";
|
} $boolean = 'AND'; }
| } $boolean = 'AND'; }
|
Zeile 1025 | Zeile 1078 |
---|
$lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
$lang->error_minsearchlength = $lang->sprintf($lang->error_minsearchlength, $mybb->settings['minsearchword']); error($lang->error_minsearchlength); }
|
$subject_lookin = " AND LOWER(t.subject) LIKE '%{$keywords}%'";
| $subject_lookin = " AND {$tfield} LIKE '%{$keywords}%'";
|
if($search['postthread'] == 1) {
|
if($search['postthread'] == 1) {
|
$message_lookin = " AND LOWER(p.message) LIKE '%{$keywords}%'";
| $message_lookin = " AND {$pfield} LIKE '%{$keywords}%'";
|
} } }
| } } }
|
Zeile 1040 | Zeile 1093 |
---|
$search['author'] = my_strtolower($search['author']); if($search['matchusername']) {
|
$search['author'] = my_strtolower($search['author']); if($search['matchusername']) {
|
$query = $db->simple_select("users", "uid", "LOWER(username)='".$db->escape_string($search['author'])."'");
| $user = get_user_by_username($search['author']); if($user) { $userids[] = $user['uid']; }
|
} else {
|
} else {
|
$query = $db->simple_select("users", "uid", "LOWER(username) LIKE '%".$db->escape_string_like($search['author'])."%'");
| switch($db->type) { case 'mysql': case 'mysqli': $field = 'username'; break; default: $field = 'LOWER(username)'; break; } $query = $db->simple_select("users", "uid", "{$field} LIKE '%".$db->escape_string_like($search['author'])."%'"); while($user = $db->fetch_array($query)) { $userids[] = $user['uid']; }
|
}
|
}
|
while($user = $db->fetch_array($query)) { $userids[] = $user['uid']; }
| |
if(count($userids) < 1) { error($lang->error_nosearchresults);
| if(count($userids) < 1) { error($lang->error_nosearchresults);
|
Zeile 1358 | Zeile 1425 |
---|
/** * Perform a thread and post search under MySQL or MySQLi using boolean fulltext capabilities *
|
/** * Perform a thread and post search under MySQL or MySQLi using boolean fulltext capabilities *
|
* @param array Array of search data
| * @param array $search Array of search data
|
* @return array Array of search data with results mixed in */ function perform_search_mysql_ft($search)
| * @return array Array of search data with results mixed in */ function perform_search_mysql_ft($search)
|
Zeile 1443 | Zeile 1510 |
---|
$search['author'] = my_strtolower($search['author']); if($search['matchusername']) {
|
$search['author'] = my_strtolower($search['author']); if($search['matchusername']) {
|
$query = $db->simple_select("users", "uid", "LOWER(username)='".$db->escape_string($search['author'])."'");
| $user = get_user_by_username($search['author']); if($user) { $userids[] = $user['uid']; }
|
} else {
|
} else {
|
$query = $db->simple_select("users", "uid", "LOWER(username) LIKE '%".$db->escape_string_like($search['author'])."%'"); }
| switch($db->type) { case 'mysql': case 'mysqli': $field = 'username'; break; default: $field = 'LOWER(username)'; break; } $query = $db->simple_select("users", "uid", "{$field} LIKE '%".$db->escape_string_like($search['author'])."%'");
|
|
|
while($user = $db->fetch_array($query)) { $userids[] = $user['uid'];
| while($user = $db->fetch_array($query)) { $userids[] = $user['uid']; }
|
}
if(count($userids) < 1)
| }
if(count($userids) < 1)
|