Viewing file:  search.inc.php (3.54 KB) -rw-rw-rw-
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
/*************************
Coppermine Photo Gallery
************************
Copyright (c) 2003-2008 Dev Team
v1.1 originally written by Gregory DEMAR
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3
as published by the Free Software Foundation.
********************************************
Coppermine version: 1.4.18
$HeadURL: https://coppermine.svn.sourceforge.net/svnroot/coppermine/trunk/cpg1.4.x/include/search.inc.php $
$Revision: 4380 $
$Author: gaugau $
$Date: 2008-04-12 12:00:19 +0200 (Sa, 12 Apr 2008) $
**********************************************/
if (!defined('IN_COPPERMINE')) { die('Not in Coppermine...');}
// encoding match for workaround
$multibyte_charset = 'utf-8, big5, shift_jis, euc-kr, gb2312';
$charset = $CONFIG['charset'] == 'language file' ? $GLOBALS['lang_charset'] : $CONFIG['charset'];
$sort_array = array('na' => 'filename ASC', 'nd' => 'filename DESC', 'ta'=>'title ASC', 'td'=>'title DESC', 'da' => 'pid ASC', 'dd' => 'pid DESC', 'pa' => 'position ASC', 'pd' => 'position DESC');
$sort_code = isset($USER['sort'])? $USER['sort'] : $CONFIG['default_sort_order'];
$sort_order = isset($sort_array[$sort_code]) ? $sort_array[$sort_code] : $sort_array[$CONFIG['default_sort_order']];
$allowed = array('title', 'caption', 'keywords', 'owner_name', 'filename', 'pic_raw_ip', 'pic_hrd_ip', 'user1', 'user2', 'user3', 'user4');
$mb_charset = stristr($multibyte_charset, $charset);
$search_string = preg_replace('/&.*;/i', '', $search_string);
if (!$mb_charset)
$search_string = preg_replace('/[^0-9a-z %]/i', '', $search_string);
if (!isset($USER['search']['params'])){
$USER['search']['params']['title'] = $USER['search']['params']['caption'] = $USER['search']['params']['keywords'] = $USER['search']['params']['filename'] = 1;
}
if (isset($_GET['album']) && $_GET['album'] == 'search')
$_POST = $USER['search'];
$type = $_POST['type'] == 'AND' ? " AND " : " OR ";
if (isset($_POST['params']['pic_raw_ip'])) $_POST['params']['pic_hdr_ip'] = $_POST['params']['pic_raw_ip'];
if ($search_string && isset($_POST['params'])) {
$sql = "SELECT * FROM {$CONFIG['TABLE_PICTURES']} WHERE ";
$search_string = strtr($search_string, array('_' => '\_', '%' => '\%', '*' => '%'));
$split_search = explode(' ', $search_string);
$sections = array();
foreach($split_search as $word) {
$word = addslashes($word);
$fields = array();
foreach ($_POST['params'] as $param => $value){
if (in_array($param, $allowed))$fields[] = "$param LIKE '%$word%'";
}
$sections[] = '(' . implode(' OR ', $fields) . ')';
}
$sql .= '(' . implode($type, $sections) . ')';
$sql .= $_POST['newer_than'] ? ' AND ctime > UNIX_TIMESTAMP() - '.( (int) $_POST['newer_than'] * 60*60*24) : '';
$sql .= $_POST['older_than'] ? ' AND ctime < UNIX_TIMESTAMP() - '.( (int) $_POST['older_than'] * 60*60*24) : '';
$sql .= " $ALBUM_SET AND approved = 'YES'";
$temp = str_replace('SELECT *', 'SELECT COUNT(*)', $sql);
$result = cpg_db_query($temp);
$row = mysql_fetch_row($result);
$count = $row[0];
$sql .= " ORDER BY $sort_order $limit";
$result = cpg_db_query($sql);
$rowset = cpg_db_fetch_rowset($result);
mysql_free_result($result);
if ($set_caption) build_caption($rowset);
}
?>
|