+function clean_words_search($entry)

+ $char_match = array("^", "$", "&", "(", ")", "<", ">", "`", "'", "|", ",", "@", "_", "?", "%", "~", ".", "[", "]", "{", "}", ":", "\\", "/", "=", "#", "\"", ";", "!");

+ $char_replace = array(" ", " ", " ", " ", " ", " ", " ", " ", "", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ", " ");

+ $entry = " " . strip_tags(strtolower($entry)) . " ";

+ $entry = str_replace("+", " and ", $entry);

+ $entry = str_replace("-", " not ", $entry);

+ $entry = str_replace($char_match, $char_replace, $entry);

+ $entry = preg_replace("/\b[0-9]+\b/", " ", $entry);

+ return $entry;

+}

+function remove_stop_words($entry, &$stopword_list)

+{

+ if( !empty($stopword_list) )

+ {

+ for ($j = 0; $j < count($stopword_list); $j++)

+ {

+ $filter_word = trim(strtolower($stopword_list[$j]));

+ if( $filter_word != "and" && $filter_word != "or" && $filter_word != "not" )

+ $entry = preg_replace("/\b" . preg_quote($filter_word, "/") . "\b/is", " ", $entry);

+ }

+ }

+ return $entry;

+}

+function replace_synonyms($entry, &$synonym_list)

+{

+ if( !empty($synonym_list) )

+ for ($j = 0; $j < count($synonym_list); $j++)

+ {

+ list($replace_synonym, $match_synonym) = split(" ", trim(strtolower($synonym_list[$j])));

+ if( $match_synonym != "and" && $match_synonym != "or" && $match_synonym != "not" &&

+ $replace_synonym != "and" && $replace_synonym != "or" && $replace_synonym != "not" )

+ $entry = preg_replace("/\b" . preg_quote(trim($match_synonym), "/") . "\b/is", " " . trim($replace_synonym) . " ", $entry);

+ }

+ return $entry;

+}

+function split_words(&$entry)

+{

+ preg_match_all("/(\*?[a-z0-9]+\*?)|\b([a-z0-9]+)\b/is", $entry, $split_entries);

+ return $split_entries[1];

+ $sortby = ( isset($HTTP_POST_VARS['sortby']) ) ? intval($HTTP_POST_VARS['sortby']) : intval($HTTP_GET_VARS['sortby']);

+ $sortby_dir = ( isset($HTTP_POST_VARS['sortdir']) ) ? $HTTP_POST_VARS['sortdir'] : $HTTP_GET_VARS['sortdir'];

+ $show_results = ( isset($HTTP_POST_VARS['showresults']) ) ? $HTTP_POST_VARS['showresults'] : $HTTP_GET_VARS['showresults'];

+ $synonym_array = @file($phpbb_root_path . "language/lang_" . $board_config['default_lang'] . "/search_synonyms.txt");

+ $stopword_array = @file($phpbb_root_path . "language/lang_" . $board_config['default_lang'] . "/search_stopwords.txt");

+

+ $cleaned_search = clean_words_search($query_keywords);

+ $cleaned_search = remove_stop_words($cleaned_search, $stopword_array);

+ $cleaned_search = replace_synonyms($cleaned_search, $synonym_array);

+ $split_search = array();

+ $split_search = split_words($cleaned_search);

+ $word_match = array();

+ $current_match_type = "and";

+ for($i = 0; $i < count($split_search); $i++)

+ if( $split_search[$i] == "and" )

+ $current_match_type = "and";

+ else if( $split_search[$i] == "or" )

+ $current_match_type = "or";

+ }

+ else if( $split_search[$i] == "not" )

+ {

+ $current_match_type = "not";

+ }

+ else

+ {

+ if( !empty($search_all_terms) )

+ $current_match_type = "and";

+

+ $word_match[$current_match_type][] = $split_search[$i];

+ }

+

+ @reset($word_match);

+

+ $word_count = 0;

+ $result_list = array();

+ while( list($match_type, $match_word_list) = each($word_match) )

+ {

+ for($i = 0; $i < count($match_word_list); $i++ )

+ $match_word = str_replace("*", "%", $match_word_list[$i]);

+

+ $sql = "SELECT m.post_id, m.word_count

+ FROM phpbb_search_wordlist w, phpbb_search_wordmatch m

+ WHERE w.word_text LIKE '$match_word'

+ AND m.word_id = w.word_id

+ ORDER BY m.post_id, m.word_count DESC";

+ $result = $db->sql_query($sql);

+ if( !$result )

+ {

+ message_die(GENERAL_ERROR, "Couldn't matched posts", "", __LINE__, __FILE__, $sql);

+ }

+ $row = array();

+ while( $temp_row = $db->sql_fetchrow($result) )

+ $row['' . $temp_row['post_id'] . ''] = $temp_row['word_count'];

+ }

+ @reset($row);

+

+ while( list($post_id, $match_count) = each($row) )

+ {

+ if( !$word_count )

+ $result_list['' . $post_id . ''] = $match_count;

+ else if( $match_type == "and" )

+ $result_list['' . $post_id . ''] = ( $result_list['' . $post_id . ''] ) ? $result_list['' . $post_id . ''] + intval($match_count) : 0;

+ else if( $match_type == "or" )

+ if( $result_list['' . $post_id . ''] )

+ $result_list['' . $post_id . ''] += intval($match_count);

+ else

+ {

+ $result_list['' . $post_id . ''] = 0;

+ $result_list['' . $post_id . ''] += intval($match_count);

+ }

+ }

+ else if( $match_type == "not" )

+ {

+ $result_list['' . $post_id . ''] = 0;

+ }

+ if( $match_type == "and" && $word_count )

+ {

+ @reset($row);

+ @reset($result_list);

+

+ while( list($post_id, $match_count) = each($result_list) )

+ if( !$row['' . $post_id . ''] )

+ {

+ $result_list['' . $post_id . ''] = 0;

+ }

+ $word_count++;

+ }

+ }

+

+ @reset($result_list);

+ $total_posts = 0;

+ $sql_post_id_in = "";

+ while( list($post_id, $matches) = each($result_list) )

+ {

+ if( $matches )

+ {

+ if( $sql_post_id_in != "" )

+ $sql_post_id_in .= ", ";

+ $sql_post_id_in .= $post_id;

+

+ $total_posts++;

+ }

+ }

+

+ //

+ // Start building appropriate SQL query

+ //

+/* switch(SQL_LAYER)

+ {

+ case 'mysql':

+ case 'postgresql':

+ $post_text_substring = "SUBSTRING(pt.post_text, 1, $return_chars) AS post_text";

+ break;

+

+ case 'mssql':

+ case 'odbc':

+ $post_text_substring = "SUBSTR(pt.post_text, 1, $return_chars) AS post_text";

+ break;

+ }

+*/

+ $sql_fields = ( $show_results == "posts") ? "pt.post_text, pt.post_subject, p.post_id, p.post_time, p.post_username, f.forum_name, t.topic_id, t.topic_title, t.topic_poster, t.topic_time, u.username, u.user_id, u.user_sig, u.user_sig_bbcode_uid" : "f.forum_id, f.forum_name, t.topic_id, t.topic_title, t.topic_poster, t.topic_time, t.topic_views, t.topic_replies, u.username, u.user_id, u2.username as user2, u2.user_id as id2, p.post_time, p.post_username" ;

+

+ $sql_from = ( $show_results == "posts") ? FORUMS_TABLE . " f, " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TEXT_TABLE . " pt" : FORUMS_TABLE . " f, " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TABLE . " p2, " . USERS_TABLE . " u2";

+

+ $sql_where = ( $show_results == "posts") ? "pt.post_id = p.post_id AND f.forum_id = p.forum_id AND p.topic_id = t.topic_id AND p.poster_id = u.user_id" : "f.forum_id = p.forum_id AND t.topic_id = p.topic_id AND u.user_id = t.topic_poster AND p2.post_id = t.topic_last_post_id AND u2.user_id = p2.poster_id";

+

+ $search_sql = "";

+

+ //

+ // Keyword search

+ //

+ if( $sql_post_id_in != "" )

+ {

+ $search_sql .= "p.post_id IN ($sql_post_id_in) ";

+ }

+

+ //

+ // Author name search

+ //

+ if( $query_author != "" )

+ {

+ $search_sql = preg_replace("/\(\)/", "", $search_sql);

+ $query_author = preg_replace("/\*/", "%", $query_author);

+

+ if( $show_results == "posts" )

+ {

+ $search_sql .= ( $search_sql == "" ) ? "u.username LIKE '$query_author' " : " AND u.username LIKE '$query_author' ";

+ }

+ else

+ {

+ $search_sql .= ( $search_sql == "" ) ? "us.username LIKE '$query_author' AND us.user_id = p.poster_id " : " AND us.username LIKE '$query_author' AND us.user_id = p.poster_id ";

+ $sql_from .= ", " . USERS_TABLE . " us ";

+ }

+ }

+ //

+ // If user is logged in then we'll

+ // check to see which (if any) private

+ // forums they are allowed to view and

+ // include them in the search.

+ //

+ // If not logged in we explicitly prevent

+ // searching of private forums

+ //

+ if( $search_sql != "" || $search_id == "newposts" )

+ {

+ $sql = "SELECT $sql_fields

+ FROM $sql_from ";

+

+ $sql .= ( $search_id == "newposts" ) ? "WHERE $sql_where" : "WHERE $search_sql AND $sql_where";

+

+ if( $search_forum != "all" )

+ {

+ $is_auth = auth(AUTH_READ, $search_forum, $userdata);

+

+ if( !$is_auth['auth_read'] )

+ {

+ message_die(GENERAL_MESSAGE, $lang['No_search_match']);

+ }

+ else

+ $sql .= " AND f.forum_id = $search_forum";

+ }

+ else

+ {

+ $is_auth_ary = auth(AUTH_READ, AUTH_LIST_ALL, $userdata);

+ if( $search_cat != "all" )

+ $sql .= " AND f.cat_id = $search_cat";

+ $ignore_forum_sql = "";

+ while( list($key, $value) = each($is_auth_ary) )

+ if( !$value['auth_read'] )

+ if( $ignore_forum_sql != "" )

+ $ignore_forum_sql .= ", ";

+ $ignore_forum_sql .= $key;

+ }

+

+ if( $ignore_forum_sql != "" )

+ {

+ $sql .= " AND f.forum_id NOT IN ($ignore_forum_sql) ";

+ }

+ }

+

+ if( $search_time )

+ {

+ $sql .= " AND p.post_time >= $search_time ";

+ }

+

+ if( $show_results != "posts")

+ {

+ $sql .= " GROUP BY t.topic_id";

+ }

+

+ $sql .= " ORDER BY " . $sortby_sql[$sortby] . " $sortby_dir";

+

+ if( !$result = $db->sql_query($sql) )

+ {

+ message_die(GENERAL_ERROR, "Couldn't obtain search results", "", __LINE__, __FILE__, $sql);

+ }

+

+ if( ( $total_match_count = $db->sql_numrows($result) ) > 500 )

+ {

+ message_die(GENERAL_MESSAGE, "Your search returned too many matches, refine your search criteria and try again");

+ }

+

+ $searchset = $db->sql_fetchrowset($result);

+ //

+ // Clean up search results table

+ //

+ $sql = "SELECT session_id

+ FROM " . SESSIONS_TABLE;

+ if( $result = $db->sql_query($sql) )

+ {

+ $delete_search_id_sql = "";

+ while( $row = $db->sql_fetchrow($result) )

+ {

+ $delete_search_id_sql .= ", ";

+ $delete_search_id_sql .= "'" . $row['session_id'] . "'";

+ if( $delete_search_id_sql != "" )

+ $sql = "DELETE FROM " . SEARCH_TABLE . "

+ WHERE session_id NOT IN ($delete_search_id_sql)";

+ if( !$result = $db->sql_query($sql) )

+ message_die(GENERAL_ERROR, "Couldn't delete old search id sessions", "", __LINE__, __FILE__, $sql);

+ }

+ }

+ //

+ // Store new result data

+ //

+ if( $total_match_count )

+ {

+ $search_results = "";

+ for($i = 0; $i < count($searchset); $i++)

+ {

+ if( $show_results == "posts")

+ $search_results .= ($search_results != "") ? ", " . $searchset[$i]['post_id'] : $searchset[$i]['post_id'];

+ }

+ else

+ {

+ $search_results .= ($search_results != "") ? ", " . $searchset[$i]['topic_id'] : $searchset[$i]['topic_id'];

+

+ $per_page = ( $show_results == "posts" ) ? $board_config['posts_per_page'] : $board_config['topics_per_page'];

+

+ //

+ // Combine both results and search data (apart from original query)

+ // so we can serialize it and place it in the DB

+ //

+ $store_search_data = array();

+ $store_search_data['results'] = $search_results;

+ $store_search_data['word_array'] = $split_search;

+ $store_search_data['match_count'] = $total_match_count;

+

+ $result_array = serialize($store_search_data);

+ unset($store_search_data);

+ unset($search_results);

+

+ mt_srand ((double) microtime() * 1000000);

+ $search_id = mt_rand();

+

+ $sql = "UPDATE " . SEARCH_TABLE . "

+ SET search_id = $search_id, search_array = '$result_array'

+ WHERE session_id = '" . $userdata['session_id'] . "'";

+ $result = $db->sql_query($sql);

+ if( !$result || !$db->sql_affectedrows() )

+ $sql = "INSERT INTO " . SEARCH_TABLE . " (search_id, session_id, search_array)

+ VALUES($search_id, '" . $userdata['session_id'] . "', '$result_array')";

+ if( !$result = $db->sql_query($sql) )

+ {

+ message_die(GENERAL_ERROR, "Couldn't insert search results", "", __LINE__, __FILE__, $sql);

+ }

+ else

+ {

+ message_die(GENERAL_MESSAGE, $lang['No_search_match']);

+ }

+ }

+ else

+ {

+ message_die(GENERAL_MESSAGE, $lang['No_search_match']);

+ $search_data = unserialize($row['search_array']);

+ unset($row);

+ $search_results = $search_data['results'];

+ $total_match_count = $search_data['match_count'];

+ $split_search = $search_data['word_array'];

+

+ if( $show_results == "posts" )

+ $sql = "SELECT pt.post_text, pt.post_subject, p.*, f.forum_name, t.*, u.username, u.user_id, u.user_sig, u.user_sig_bbcode_uid

+ WHERE p.post_id IN ($search_results)

+ AND pt.post_id = p.post_id

+ AND p.poster_id = u.user_id";

+

+ $per_page = ( $show_results == "posts" ) ? $board_config['posts_per_page'] : $board_config['topics_per_page'];

+ $sql .= " ORDER BY " . $sortby_sql[$sortby] . " $sortby_dir LIMIT $start, " . $per_page;

+ "SEARCH_MATCHES" => $total_match_count,

+ $highlight_matches = "";

+ for($j = 0; $j < count($split_search); $j++ )

+ $split_word = $split_search[$j];

+

+ if( $split_word != "and" && $split_word != "or" && $split_word != "not" )

+ {

+ $highlight_matches .= " " . $split_word;

+

+ $search_string[] = "#\b(" . preg_quote(str_replace("*", ".*?", $split_word), "#") . ")\b#i";

+ $replace_string[] = "<font color=\"#" . $theme['fontcolor3'] . "\"><b>\\1</b></font>";

+

+ for ($k = 0; $k < count($synonym_array); $k++)

+ {

+ list($replace_synonym, $match_synonym) = split(" ", trim(strtolower($synonym_array[$k])));

+

+ if( $replace_synonym == $split_word )

+ {

+ $search_string[] = "#\b(" . preg_quote($match_synonym, "#") . ")\b#i";

+ $replace_string[] = "<font color=\"#" . $theme['fontcolor3'] . "\"><b>\\1</b></font>";

+

+ $highlight_matches .= " " . $match_synonym;

+ }

+ }

+ }

+ $highlight_matches = urlencode(trim($highlight_matches));

+

+ for($i = 0; $i < min($per_page, count($searchset)); $i++)

+ $topic_url = append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=" . $searchset[$i]['topic_id'] . "&amp;highlight=$highlight_matches");

+ $post_url = append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=" . $searchset[$i]['post_id'] . "&amp;highlight=$highlight_matches#" . $searchset[$i]['post_id']);

+ $message = preg_replace("#<([\/]?.*?)>#is", "&lt;\\1&gt;", $message);

+ $message = preg_replace("/[img\:[0-9a-z\:]+\].*?\[\/img\:[0-9a-z\:]+\]/si", "", $message);

+ $message = preg_replace("/[\/[a-z\*]+\:[0-9a-z\:]+\]/si", "", $message);

+

+ $user_sig_bbcode_uid = $searchset[$i]['user_sig_bbcode_uid'];

+ if( $user_sig != "" && $searchset[$i]['enable_sig'] && $userdata['user_allowhtml'] )

+ if( $postrow[$i]['enable_html'] )

+ if( $user_sig != "" && $searchset[$i]['enable_sig'] && $user_sig_bbcode_uid != "" )

+ $user_sig = ( $board_config['allow_bbcode'] ) ? bbencode_second_pass($user_sig, $user_sig_bbcode_uid) : preg_replace("/\:[0-9a-z\:]+\]/si", "]", $user_sig);

+

+ if( $bbcode_uid != "" )

+ $message = ( $board_config['allow_bbcode'] ) ? bbencode_second_pass($message, $bbcode_uid) : preg_replace("/\:[0-9a-z\:]+\]/si", "]", $message);

+ if( count($search_string) )

+ if( $replies > $board_config['topics_per_page'] )

+ $goto_page = "[ <img src=\"" . $images['icon_minipost'] . "\" alt=\"" . $lang['Goto_page'] . "\" />" . $lang['Goto_page'] . ": ";

+ for($j = 0; $j < $replies + 1; $j += $board_config['topics_per_page'])

+ $base_url = append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=" . $topic_id . "&amp;start=$j&amp;highlight=$highlight_matches");

+

+ if( $times > 4 )

+ if( $j + $board_config['topics_per_page'] >= $replies + 1 )

+ $goto_page .= " ... <a href=\"$base_url\">$times</a>";

+ if( $times != 1 )

+

+ $goto_page .= "<a href=\"$base_url\">$times</a>";

+

+ $goto_page .= " ]";

+ if( $searchset[$i]['topic_status'] == TOPIC_MOVED )

+ if( $searchset[$i]['topic_status'] == TOPIC_LOCKED )

+ {

+ $folder = $images['folder_locked'];

+ $folder_new = $images['folder_locked_new'];

+ }

+ else if( $searchset[$i]['topic_type'] == POST_ANNOUNCE )

+ $folder_new = $images['folder_hot_new'];

+ $folder_alt = ( $topic_rowset[$i]['topic_status'] == TOPIC_LOCKED ) ? $lang['Topic_locked'] : $lang['No_new_posts'];

+ $folder_image = "<img src=\"$folder\" alt=\"$folder_alt\" />";

+ if( $searchset[$i]['post_time'] >= $userdata['session_last_visit'] )

+ if( $searchset[$i]['id2'] == ANONYMOUS && $searchset[$i]['post_username'] != '' )

+ "PAGINATION" => generate_pagination($base_url, $total_match_count, $per_page, $start),

+ "ON_PAGE" => floor( $start / $per_page ) + 1,

+ "TOTAL_PAGES" => ceil( $total_match_count / $per_page ),

+$previous_days_text = array($lang['All_Posts'], $lang['1_Day'], $lang['7_Days'], $lang['2_Weeks'], $lang['1_Month'], $lang['3_Months'], $lang['6_Months'], $lang['1_Year']);