PC World 2005 April/PCWorld_2005-04_cd.bin/akce/web/phpnuke/PHP-Nuke-7.5.exe/html/modules/Encyclopedia/search.php

PHP Script | 2004-08-21 | 5.5 KB | 120 lines

<?php

######################################################################
# PHP-NUKE: Web Portal System
# ===========================
#
# Copyright (c) 2002 by Francisco Burzi ([e-mail])
# http://phpnuke.org
#
# This program is free software. You can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License.
######################################################################
#
# Additional security checking code 2003 by chatserv
# http://www.nukefixes.com -- http://www.nukeresources.com
######################################################################

if (!eregi("modules.php", $_SERVER['PHP_SELF'])) {
    die ("You can't access this file directly...");
}

require_once("mainfile.php");
$module_name = basename(dirname(__FILE__));
get_lang($module_name);
include("header.php");
    global $db, $prefix;
if ((isset($query) AND !isset($eid)) AND ($query != "")) {
    $query = stripslashes(check_html($query, nohtml));
    $result = $db->sql_query("SELECT tid, title FROM ".$prefix."_encyclopedia_text WHERE title LIKE '%$query%'");
    $row = $db->sql_fetchrow($result);
    $ency_title = stripslashes(check_html($row['title'], "nohtml"));
    title("$ency_title: "._SEARCHRESULTS."");
    OpenTable();
    echo "<center><b>"._SEARCHRESULTSFOR." <i>$query</i></b></center><br><br><br>"
    ."<i><b>"._RESULTSINTERMTITLE."</b></i><br><br>";
    if ($numrows = $db->sql_numrows($result) == 0) {
        echo _NORESULTSTITLE;
    } else {
    while ($row = $db->sql_fetchrow($result)) {
        $tid = intval($row['tid']);
        $title = stripslashes(check_html($row['title'], "nohtml"));
        echo "<strong><big>·</big></strong>  <a href=\"modules.php?name=$module_name&op=content&tid=$tid\">$title</a><br>";
    }
    }
    $result2 = $db->sql_query("SELECT tid, title FROM ".$prefix."_encyclopedia_text WHERE text LIKE '%$query%'");
    $numrows = $db->sql_numrows($result2);
    echo "<br><br><i><b>"._RESULTSINTERMTEXT."</b></i><br><br>";
    if ($numrows == 0) {
        echo _NORESULTSTEXT;
    } else {
    while ($row2 = $db->sql_fetchrow($result2)) {
        $tid = intval($row2['tid']);
        $title = stripslashes(check_html($row2['title'], "nohtml"));
        echo "<strong><big>·</big></strong>  <a href=\"modules.php?name=$module_name&op=content&tid=$tid&query=$query\">$title</a><br>";
    }
    }
    echo "<br><br>"
    ."<center><form action=\"modules.php?name=$module_name&file=search\" method=\"post\">"
    ."<input type=\"text\" size=\"20\" name=\"query\">  "
    ."<input type=\"hidden\" name=\"eid\" value=\"$eid\">"
    ."<input type=\"submit\" value=\""._SEARCH."\">"
    ."</form><br><br>"
    ."[ <a href=\"modules.php?name=$module_name\">"._RETURNTO." $module_name</a> ]<br><br>"
    .""._GOBACK."</center>";
    CloseTable();
} elseif ((isset($query) AND isset($eid)) AND ($query != "")) {
    $query = stripslashes(check_html($query, nohtml));
    $result3 = $db->sql_query("SELECT tid, title FROM ".$prefix."_encyclopedia_text WHERE eid='$eid' AND title LIKE '%$query%'");
    $row4 = $db->sql_fetchrow($db->sql_query("SELECT title FROM ".$prefix."_encyclopedia WHERE eid='$eid'"));
    $ency_title = stripslashes(check_html($row4['title'], "nohtml"));
    title("$ency_title: "._SEARCHRESULTS."");
    OpenTable();
    echo "<center><b>"._SEARCHRESULTSFOR." <i>$query</i></b></center><br><br><br>"
    ."<i><b>"._RESULTSINTERMTITLE."</b></i><br><br>";
    if ($numrows = $db->sql_numrows($result3) == 0) {
        echo _NORESULTSTITLE;
    } else {
    while ($row3 = $db->sql_fetchrow($result3)) {
        $tid = intval($row3['tid']);
        $title = stripslashes(check_html($row3['title'], "nohtml"));
        echo "<strong><big>·</big></strong>  <a href=\"modules.php?name=$module_name&op=content&tid=$tid\">$title</a><br>";
    }
    }
    $result5 = $db->sql_query("SELECT tid, title FROM ".$prefix."_encyclopedia_text WHERE eid='$eid' AND text LIKE '%$query%'");
    $numrows = $db->sql_numrows($result5);
    echo "<br><br><i><b>"._RESULTSINTERMTEXT."</b></i><br><br>";
    if ($numrows == 0) {
        echo _NORESULTSTEXT;
    } else {
    while ($row5 = $db->sql_fetchrow($result5)) {
        $tid = intval($row5['tid']);
        $title = stripslashes(check_html($row5['title'], "nohtml"));
        echo "<strong><big>·</big></strong>  <a href=\"modules.php?name=$module_name&op=content&tid=$tid&query=$query\">$title</a><br>";
    }
    }
    echo "<br><br>"
    ."<center><form action=\"modules.php?name=$module_name&file=search\" method=\"post\">"
    ."<input type=\"text\" size=\"20\" name=\"query\">  "
    ."<input type=\"hidden\" name=\"eid\" value=\"$eid\">"
    ."<input type=\"submit\" value=\""._SEARCH."\">"
    ."</form><br><br>"
    ."[ <a href=\"modules.php?name=$module_name&op=list_content&eid=$eid\">"._RETURNTO." $ency_title</a> ]<br><br>"
    .""._GOBACK."</center>";
    CloseTable();
} else {
    OpenTable();
    echo "<center>"._SEARCHNOTCOMPLETE."<br><br><br>"
    ."<center><form action=\"modules.php?name=$module_name&file=search\" method=\"post\">"
    ."<input type=\"text\" size=\"20\" name=\"query\">  "
    ."<input type=\"hidden\" name=\"eid\" value=\"$eid\">"
    ."<input type=\"submit\" value=\""._SEARCH."\">"
    ."</form><br><br>"
    .""._GOBACK."</center>";
    CloseTable();
}

include("footer.php");

?>