aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/memberlist.php
diff options
context:
space:
mode:
authorSuhaib Khan <suhebjerk@gmail.com>2014-02-09 21:57:44 +0530
committerCesar G <prototech91@gmail.com>2014-04-23 09:11:39 -0700
commitb5ee81dae6f097e97049a756763d1b3119f61573 (patch)
tree300b043af564fae53f531d5c7c6d97ce63d74dbe /phpBB/memberlist.php
parentbc67377400ad11470fb1975af1e07b136f07a24d (diff)
downloadforums-b5ee81dae6f097e97049a756763d1b3119f61573.tar
forums-b5ee81dae6f097e97049a756763d1b3119f61573.tar.gz
forums-b5ee81dae6f097e97049a756763d1b3119f61573.tar.bz2
forums-b5ee81dae6f097e97049a756763d1b3119f61573.tar.xz
forums-b5ee81dae6f097e97049a756763d1b3119f61573.zip
[ticket/10737] Code fixes in AJAX search feature
PHPBB3-10737
Diffstat (limited to 'phpBB/memberlist.php')
-rw-r--r--phpBB/memberlist.php25
1 files changed, 14 insertions, 11 deletions
diff --git a/phpBB/memberlist.php b/phpBB/memberlist.php
index c2a995da4c..d2ba27559c 100644
--- a/phpBB/memberlist.php
+++ b/phpBB/memberlist.php
@@ -982,21 +982,24 @@ switch ($mode)
break;
case 'livesearch':
- $q=request_var('q', '', true);
- $hint="";
- $sql = "SELECT username, user_id
- FROM " . USERS_TABLE . " u
- WHERE username LIKE '".$q."%' AND u.user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ")";
- $result = $db->sql_query($sql);
- $i=1;
- while ($i<=10 && $row = $db->sql_fetchrow($result))
+ $username_chars = $request->variable('q', '', true);
+ $hint = "";
+
+ $sql = 'SELECT username, user_id
+ FROM ' . USERS_TABLE . '
+ WHERE ' . $db->sql_in_set('user_type', array(USER_NORMAL, USER_FOUNDER)) . '
+ AND username ' . $db->sql_like_expression($username_chars . $db->any_char);
+ $result = $db->sql_query_limit($sql, 10);
+
+ $i = 1;
+ while ($row = $db->sql_fetchrow($result))
{
- $j=($i%2)+1;
- $hint.="<tr class='bg".$j." row".$j."'><td><a href='" .
+ $j = ($i%2)+1;
+ $hint.= "<tr class='bg".$j." row".$j."'><td><a href='" .
$phpbb_root_path."memberlist.$phpEx". "?mode=viewprofile&u=" . $row['user_id'] .
"' target='_blank'>" .
$row['username'] . "</a></td></tr>";
- $i++;
+ $i++;
}
echo $hint;
exit();