+// -------------------------------------------------------------

+//

+// $Id$

+//

+// FILENAME : search.php

+// STARTED : Sat Feb 13, 2001

+// COPYRIGHT : © 2001, 2003 phpBB Group

+// WWW : http://www.phpbb.com/

+// LICENCE : GPL vs2.0 [ see /docs/COPYING ]

+//

+// -------------------------------------------------------------

+

+//TODO

+//Introduce phrase searching?

+//Stemmers?

+//Find similar?

+//Relevancy?

+$phpEx = substr(strrchr(__FILE__, '.'), 1);

+

+// Define initial vars

+$mode = (isset($_REQUEST['mode'])) ? $_REQUEST['mode'] : false;

+$search_id = (isset($_REQUEST['search_id'])) ? htmlspecialchars($_REQUEST['search_id']) : false;

+$start = (isset($_REQUEST['start'])) ? intval($_REQUEST['start']) : 0;

+

+$search_keywords = (!empty($_REQUEST['search_keywords'])) ? $_REQUEST['search_keywords'] : false;

+$search_author = (!empty($_REQUEST['search_author'])) ? htmlspecialchars($_REQUEST['search_author']) : false;

+$show_results = (isset($_REQUEST['show_results'])) ? htmlspecialchars($_REQUEST['show_results']) : 'topics';

+$search_terms = (isset($_REQUEST['search_terms'])) ? (($_REQUEST['search_terms'] == 'all') ? 1 : 0) : 1;

+$search_fields = (isset($_REQUEST['search_fields'])) ? $_REQUEST['search_fields'] : 'all';

+$search_child = (!empty($_REQUEST['search_child'])) ? true : false;

+

+$return_chars = (isset($_REQUEST['return_chars'])) ? intval($_REQUEST['return_chars']) : 200;

+$search_forum = (!empty($_GET['f'])) ? array(intval($_GET['f'])) : ((isset($_REQUEST['search_forum'])) ? array_map('intval', $_REQUEST['search_forum']) : array());

+$search_time = (isset($_REQUEST['search_time'])) ? (time() - intval($_REQUEST['search_time'])) * 86400 : 0;

+

+$sort_days = (!empty($_REQUEST['st'])) ? intval($_REQUEST['st']) : 0;

+$sort_key = (!empty($_REQUEST['sk'])) ? htmlspecialchars($_REQUEST['sk']) : 't';

+$sort_dir = (!empty($_REQUEST['sd'])) ? htmlspecialchars($_REQUEST['sd']) : 'd';

+$user->setup();

+if (!$auth->acl_get('u_search') || !$config['load_search'])

+ trigger_error($user->lang['NO_SEARCH']);

+$store_vars = array('sort_by', 'sort_dir', 'show_results', 'return_chars', 'total_match_count', 'current_time');

+$current_time = time();

+$limit_days = array(0 => $user->lang['ALL_RESULTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']);

+$sort_by_text = array('a' => $user->lang['SORT_AUTHOR'], 't' => $user->lang['SORT_TIME'], 'f' => $user->lang['SORT_FORUM'], 'i' => $user->lang['SORT_TOPIC_TITLE'], 's' => $user->lang['SORT_POST_SUBJECT']);

+$sort_by_sql = array('a' => (($show_results == 'posts') ? 'u.username' : 't.topic_poster'), 't' => (($show_results == 'posts') ? 'p.post_time' : 't.topic_last_post_time'), 'f' => 'f.forum_id', 'i' => 't.topic_title', 's' => (($show_results == 'posts') ? 'pt.post_subject' : 't.topic_title'));

+$s_limit_days = $s_sort_key = $s_sort_dir = '';

+gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir);

+if ($search_keywords || $search_author || $search_id)

+{

+ $post_id_ary = $split_words = $old_split_words = $common_words = array();

+

+ // Which forums can we view?

+ $sql_where = (sizeof($search_forum) && !$search_child) ? 'WHERE f.forum_id IN (' . implode(', ', $search_forum) . ')' : '';

+ $sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.right_id, f.forum_password, fa.user_id

+ FROM (' . FORUMS_TABLE . ' f

+ LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id

+ AND fa.session_id = '" . $db->sql_escape($user->data['session_id']) . "'))

+ $sql_where

+ ORDER BY f.left_id";

+ $result = $db->sql_query($sql);

+

+ $right_id = 0;

+ $sql_forums = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if ($search_child)

+ {

+ if (in_array($row['forum_id'], $search_forum) && $row['right_id'] > $right_id)

+ {

+ $right_id = $row['right_id'];

+ }

+ else if ($row['right_id'] > $right_id)

+ {

+ continue;

+ }

+ }

+ if ($auth->acl_get('f_read', $row['forum_id']) && (!$row['forum_password'] || $row['user_id'] == $user->data['user_id']))

+ {

+ $sql_forums[] = $row['forum_id'];

+ }

+ }

+ $db->sql_freeresult($result);

+ $sql_forums = (sizeof($search_forum)) ? ' AND p.forum_id IN (' . implode(', ', $sql_forums) . ')' : '';

+ unset($search_forum);

+ if ($search_id == 'egosearch')

+ {

+ $search_author = $user->data['username'];

+ }

+

+ // Are we looking for a user?

+ $sql_author = '';

+ if ($search_author)

+ $sql_where = (strstr($search_author, '*')) ? ' LIKE ' : ' = ';

+ $sql = 'SELECT user_id

+ FROM ' . USERS_TABLE . "

+ WHERE username $sql_where '" . $db->sql_escape(preg_replace('#\*+#', '%', $search_author)) . "'";

+ $result = $db->sql_query($sql);

+

+ if (!$row = $db->sql_fetchrow($result))

+ trigger_error($user->lang['NO_SEARCH_RESULTS']);

+ }

+ $db->sql_freeresult($result);

+

+ $sql_author = ' p.poster_id = ' . $row['user_id'];

+ }

+

+

+ if ($search_id)

+ {

+ switch ($search_id)

+ {

+ case 'egosearch':

+ break;

+

+ case 'unanswered':

+ if ($show_results == 'posts')

+ $sql = 'SELECT p.post_id

+ FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t

+ WHERE t.topic_replies = 0

+ AND p.post_id = t.topic_id';

+ $field = 'post_id';

+ $sql = 'SELECT topic_id

+ FROM ' . TOPICS_TABLE . ' t

+ WHERE topic_replies = 0';

+ $field = 'topic_id';

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $post_id_ary[] = $row[$field];

+ }

+ $db->sql_freeresult($result);

+

+ if (!sizeof($post_id_ary))

+ trigger_error($user->lang['NO_SEARCH_RESULTS']);

+ }

+ break;

+

+ case 'newposts':

+ if ($show_results == 'posts')

+ {

+ $sql = 'SELECT post_id

+ FROM ' . POSTS_TABLE . '

+ WHERE p.post_time > ' . $user->data['user_lastvisit'];

+ $field = 'post_id';

+ $sql = 'SELECT t.topic_id

+ FROM ' . TOPICS_TABLE . ' t, ' . POSTS_TABLE . ' p

+ WHERE p.post_time > ' . $user->data['user_lastvisit'] . '

+ AND t.topic_id = p.topic_id

+ GROUP by t.topic_id';

+ $field = 'topic_id';

+ }

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $post_id_ary[] = $row[$field];

+ $db->sql_freeresult($result);

+ if (!sizeof($post_id_ary))

+ {

+ trigger_error($user->lang['NO_SEARCH_RESULTS']);

+ }

+ break;

+ default:

+ $sql = 'SELECT search_array

+ FROM ' . SEARCH_TABLE . "

+ WHERE search_id = $search_id

+ AND session_id = '" . $db->sql_escape($user->data['session_id']) . "'";

+ if ($row = $db->sql_fetchrow($result))

+ $data = explode('#', $row['search_array']);

+

+ $split_words = unserialize(array_shift($data));

+ if ($search_keywords)

+ // If we're wanting to search on these results we store the existing split word array

+ $old_split_words = $split_words;

+ $stopped_words = unserialize(array_shift($data));

+ foreach ($store_vars as $var)

+ {

+ $$var = array_shift($data);

+ }

+

+ $sql_where = (($show_results == 'posts') ? 'p.post_id' : 't.topic_id') . ' IN (' . implode(', ', $data) . ')';

+ unset($data);

+ $db->sql_freeresult($result);

+ }

+ }

+ // Are we looking for words

+ if ($search_keywords)

+ {

+ $sql_author = ($sql_author) ? ' AND ' . $sql_author : '';

+ $split_words = $stopped_words = $smllrg_words = array();

+ $drop_char_match = array('^', '$', '&', '(', ')', '<', '>', '`', '\'', '"', ',', '@', '_', '?', '%', '~', '.', '[', ']', '{', '}', ':', '\\', '/', '=', '#', '\'', ';', '!');

+ $drop_char_replace = array(' ', ' ', ' ', ' ', ' ', ' ', ' ', '', '', ' ', ' ', ' ', '', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '' , ' ', ' ', ' ', ' ', ' ', ' ');

+ if ($fp = @fopen($user->lang_path . '/search_stopwords.txt', 'rb'))

+ {

+ $stopwords = explode("\n", str_replace("\r\n", "\n", trim(fread($fp, filesize($user->lang_path . '/search_stopwords.txt')))));

+ }

+ @fclose($fp);

+ if ($fp = @fopen($user->lang_path . '/search_synonyms.txt', 'rb'))

+ {

+ preg_match_all('#^(.*?) (.*?)$#ms', trim(fread($fp, filesize($user->lang_path . '/search_synonyms.txt'))), $match);

+ $replace_synonym = $match[1];

+ $match_synonym = $match[2];

+ @fclose($fp);

+

+ $match = array('#\sand\s#i', '#\sor\s#i', '#\snot\s#i', '#\+#', '#-#', '#\|#');

+ $replace = array(' + ', ' | ', ' - ', ' + ', ' - ', ' | ');

+ $search_keywords = preg_replace($match, $replace, $search_keywords);

+

+ $match = array();

+ // New lines, carriage returns

+ $match[] = "#[\n\r]+#";

+ // NCRs like &nbsp; etc.

+ $match[] = '#&[\#a-z0-9]+?;#i';

+ // URL's

+ $match[] = '#\b[\w]+:\/\/[a-z0-9\.\-]+(\/[a-z0-9\?\.%_\-\+=&\/]+)?#';

+ // BBcode

+ $match[] = '#\[img:[a-z0-9]{10,}\].*?\[\/img:[a-z0-9]{10,}\]#';

+ $match[] = '#\[\/?url(=.*?)?\]#';

+ $match[] = '#\[\/?[a-z\*=\+\-]+(\:?[0-9a-z]+)?:[a-z0-9]{10,}(\:[a-z0-9]+)?=?.*?\]#';

+

+ // Filter out as above

+ $search_keywords = preg_replace($match, ' ', strtolower($search_keywords));

+ $search_keywords = str_replace($drop_char_match, $drop_char_replace, $search_keywords);

+

+ // Split words

+ $split_words = explode(' ', preg_replace('#\s+#', ' ', $search_keywords));

+

+ if (!empty($stopwords))

+ $stopped_words = array_intersect($split_words, $stopwords);

+ $split_words = array_diff($split_words, $stopwords);

+ }

+ if (!empty($replace_synonym))

+ {

+ $split_words = str_replace($replace_synonym, $match_synonym, $split_words);

+ }

+ }

+ if ($search_keywords && sizeof($split_words) && array_diff($split_words, $old_split_words))

+ {

+ // This "entire" section may be switched out to allow for alternative search systems

+ // such as that built-in to MySQL, MSSQL, etc. or external solutions which provide

+ // an appropriate API

+ $bool = ($search_terms) ? 'AND' : 'OR';

+ $sql_words = '';

+ foreach ($split_words as $word)

+ {

+ switch ($word)

+ case '-':

+ $bool = 'NOT';

+ continue;

+ case '+':

+ $bool = 'AND';

+ continue;

+ case '|':

+ $bool = 'OR';

+ continue;

+ default:

+ $sql_words[$bool][] = "'" . preg_replace('#\*+#', '%', trim($word)) . "'";

+ $bool = ($search_terms) ? 'AND' : 'OR';

+ }

+ }

+ switch ($search_fields)

+ {

+ case 'titleonly':

+ $sql_match = ' AND m.title_match = 1';

+ break;

+ case 'msgonly':

+ $sql_match = ' AND m.title_match = 0';

+ break;

+ default:

+ $sql_match = '';

+ }

+ // Build some display specific variable strings

+ $sql_select = ($show_results == 'posts') ? 'm.post_id' : 'DISTINCT t.topic_id';

+ $sql_from = ($show_results == 'posts') ? '' : TOPICS_TABLE . ' t, ';

+ $sql_topic = ($show_results == 'posts') ? '' : 'AND t.topic_id = p.topic_id';

+ $sql_time = ($sort_days) ? 'AND p.post_time >= ' . ($current_time - ($sort_days * 86400)) : '';

+ $field = ($show_results == 'posts') ? 'm.post_id' : 't.topic_id';

+ // Are we searching within an existing search set? Yes, then include the old ids

+ $sql_find_in = ($sql_where) ? "AND $sql_where" : '';

+ $result_ary = array();

+ foreach (array('AND', 'OR', 'NOT') as $bool)

+ {

+ if (is_array($sql_words[$bool]))

+ {

+ switch ($bool)

+ {

+ case 'AND':

+ case 'NOT':

+ foreach ($sql_words[$bool] as $word)

+ if (strlen($word) < 4)

+ {

+ continue;

+ }

+ $sql_where = (strstr($word, '%')) ? "LIKE $word" : "= $word";

+

+ $sql_and = (sizeof($result_ary['AND'])) ? "AND $field IN (" . implode(', ', $result_ary['AND']) . ')' : '';

+

+ $sql = "SELECT $sql_select

+ FROM $sql_from" . POSTS_TABLE . ' p, ' . SEARCH_MATCH_TABLE . ' m, ' . SEARCH_WORD_TABLE . " w

+ WHERE w.word_text $sql_where

+ AND m.word_id = w.word_id

+ AND w.word_common <> 1

+ AND p.post_id = m.post_id

+ $sql_topic

+ $sql_forums

+ $sql_author

+ $sql_and

+ $sql_time

+ $sql_match

+ $sql_find_in";

+ $result = $db->sql_query($sql);

+

+ if (!($row = $db->sql_fetchrow($result)) && $bool == 'AND')

+ trigger_error($user->lang['NO_SEARCH_RESULTS']);

+

+ if ($bool == 'AND')

+ $result_ary['AND'] = array();

+

+ do

+ $result_ary[$bool][] = ($show_results == 'topics') ? $row['topic_id'] : $row['post_id'];

+ while ($row = $db->sql_fetchrow($result));

+ $db->sql_freeresult($result);

+ break;

+ case 'OR':

+ $sql_where = $sql_in = '';

+ foreach ($sql_words[$bool] as $word)

+ if (strlen($word) < 4)

+ continue;

+ if (strstr($word, '%'))

+ {

+ $sql_where .= (($sql_where) ? ' OR w.word_text ' : 'w.word_text ') . "LIKE $word";

+ }

+ else

+ {

+ $sql_in .= (($sql_in) ? ', ' : '') . $word;

+ }

+ }

+ $sql_where = ($sql_in) ? (($sql_where) ? ' OR ' : '') . 'w.word_text IN (' . $sql_in . ')' : $sql_where;

+

+ $sql_and = (sizeof($result_ary['AND'])) ? "AND $field IN (" . implode(', ', $result_ary['AND']) . ')' : '';

+ $sql = "SELECT $sql_select

+ FROM $sql_from" . POSTS_TABLE . ' p, ' . SEARCH_MATCH_TABLE . ' m, ' . SEARCH_WORD_TABLE . " w

+ WHERE ($sql_where)

+ AND m.word_id = w.word_id

+ AND w.word_common <> 1

+ AND p.post_id = m.post_id

+ $sql_topic

+ $sql_forums

+ $sql_author

+ $sql_and

+ $sql_time

+ $sql_match

+ $sql_find_in";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $result_ary[$bool][] = ($show_results == 'topics') ? $row['topic_id'] : $row['post_id'];

+ }

+ break;

+ if (sizeof($result_ary['OR']))

+ $post_id_ary = (sizeof($result_ary['AND'])) ? array_diff($result_ary['AND'], $result_ary['OR']) : $result_ary['OR'];

+ $post_id_ary = $result_ary['AND'];

+ if (sizeof($result_ary['NOT']))

+ $post_id_ary = array_diff($post_id_ary, $result_ary['NOT']);

+ unset($result_ary);

+ $post_id_ary = array_unique($post_id_ary);

+ if (!sizeof($post_id_ary))

+ {

+ trigger_error($user->lang['NO_SEARCH_RESULTS']);

+ }

+ $sql = 'SELECT word_text

+ FROM ' . SEARCH_WORD_TABLE . '

+ WHERE word_text IN (' . implode(', ', array_unique(array_merge($sql_words['AND'], $sql_words['OR'], $sql_words['NOT']))) . ')

+ AND word_common = 1';

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ $common_words[] = $row['word_text'];

+ $db->sql_freeresult($result);

+ }

+ else if ($search_author)

+ {

+ if ($show_results == 'posts')

+ $sql = 'SELECT p.post_id

+ FROM ' . POSTS_TABLE . " p

+ WHERE $sql_author

+ $sql_forums";

+ $field = 'post_id';

+ else

+ $sql = 'SELECT t.topic_id

+ FROM ' . TOPICS_TABLE . ' t, ' . POSTS_TABLE . " p

+ WHERE $sql_author

+ $sql_forums

+ AND t.topic_id = p.topic_id

+ GROUP BY t.topic_id";

+ $field = 'topic_id';

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ $post_id_ary[] = $row[$field];

+ $db->sql_freeresult($result);

+

+

+ if ($post_id_ary)

+ // Finish building query (for all combinations) and run it ...

+ $sql = 'SELECT session_id

+ FROM ' . SESSIONS_TABLE;

+ if ($result = $db->sql_query($sql))

+ $delete_search_ids = array();

+ while($row = $db->sql_fetchrow($result))

+ $delete_search_ids[] = "'" . $db->sql_escape($row['session_id']) . "'";

+ if (count($delete_search_ids))

+ $sql = 'DELETE FROM ' . SEARCH_TABLE . '

+ WHERE session_id NOT IN (' . implode(", ", $delete_search_ids) . ')';

+ $db->sql_query($sql);

+ $total_match_count = sizeof($post_id_ary);

+ $sql_where = (($show_results == 'posts') ? 'p.post_id' : 't.topic_id') . ' IN (' . implode(', ', $post_id_ary) . ')';

+

+ if (sizeof($old_split_words) && array_diff($split_words, $old_split_words))

+ $split_words = array_merge($split_words, $old_split_words);

+ $data = serialize(array_diff($split_words, $common_words));

+ $data .= '#' . serialize(array_merge($stopped_words, $common_words));

+ foreach ($store_vars as $var)

+ $data .= '#' . $$var;

+ $data .= '#' . implode('#', $post_id_ary);

+ unset($post_id_ary);

+ srand ((double) microtime() * 1000000);

+ $search_id = rand();

+ $sql = 'INSERT INTO ' . SEARCH_TABLE . " (search_id, session_id, search_array)

+ VALUES($search_id, '" . $db->sql_escape($user->data['session_id']) . "', '" . $db->sql_escape($data) . "')";

+ $db->sql_query($sql);

+ unset($data);

+ }

+ // Look up data ...

+ $per_page = ($show_results == 'posts') ? $config['posts_per_page'] : $config['topics_per_page'];

+ // Grab icons

+ $icons = $censors = array();

+ obtain_icons($icons);

+ obtain_word_list($censors);

+ // Output header

+ $l_search_matches = ($total_match_count == 1) ? sprintf($user->lang['FOUND_SEARCH_MATCH'], $total_match_count) : sprintf($user->lang['FOUND_SEARCH_MATCHES'], $total_match_count);

+ $hilit = htmlspecialchars(implode('|', str_replace(array('+', '-', '|'), '', $split_words)));

+ $split_words = htmlspecialchars(implode(' ', $split_words));

+ $ignored_words = htmlspecialchars(implode(' ', $stopped_words));

+ $template->assign_vars(array(

+ 'SEARCH_MATCHES' => $l_search_matches,

+ 'SEARCH_WORDS' => $split_words,

+ 'IGNORED_WORDS' => ($ignored_words) ? $ignored_words : 'No words',

+ 'PAGINATION' => generate_pagination("search.$phpEx$SID&amp;search_id=$search_id&amp;sk=$sort_key&amp;sd=$sort_dir&amp;st=$sort_days", $total_match_count, $per_page, $start),

+ 'PAGE_NUMBER' => on_page($total_match_count, $start),

+ 'S_SELECT_SORT_DIR' => $s_sort_dir,

+ 'S_SELECT_SORT_KEY' => $s_sort_key,

+ 'S_SEARCH_ACTION' => "search.$phpEx$SID&amp;search_id=$search_id",

+ 'U_SEARCH_WORDS' => "search.$phpEx$SID&amp;search_keywords=" . urlencode($split_words))

+ );

+ $u_hilit = urlencode($split_words);

+ if ($show_results == 'posts')

+ {

+ $sql = 'SELECT p.*, f.forum_id, f.forum_name, t.*, u.username, u.user_sig, u.user_sig_bbcode_uid

+ FROM ' . FORUMS_TABLE . ' f, ' . TOPICS_TABLE . ' t, ' . USERS_TABLE . ' u, ' . POSTS_TABLE . " p

+ WHERE $sql_where

+ AND f.forum_id = p.forum_id

+ AND p.topic_id = t.topic_id

+ AND p.poster_id = u.user_id";

+ }

+ else

+ {

+ $sql = 'SELECT t.*, f.forum_id, f.forum_name

+ FROM ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . " f

+ WHERE $sql_where

+ AND f.forum_id = t.forum_id";

+ }

+ $sql .= ' ORDER BY ' . $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ? 'DESC' : 'ASC') . " LIMIT $start, $per_page";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $forum_id = $row['forum_id'];

+ $topic_id = $row['topic_id'];

+ $view_topic_url = "viewtopic.$phpEx$SID&amp;f=$forum_id&amp;t=$topic_id&amp;hilit=$u_hilit";

+ if ($show_results == 'topics')

+ $last_post_img = "<a href=\"viewtopic.$phpEx$SID&amp;f=$forum_id&amp;p=" . $row['topic_last_post_id'] . '#' . $row['topic_last_post_id'] . '">' . $user->img('icon_post_latest', 'VIEW_LATEST_POST') . '</a>';

+ $topic_author = ($row['topic_poster'] != ANONYMOUS) ? "<a href=\"memberlist.$phpEx$SID&amp;mode=viewprofile&amp;u=" . $row['topic_poster'] . '">' : '';

+ $topic_author .= ($row['topic_poster'] != ANONYMOUS) ? $row['topic_first_poster_name'] : (($row['topic_first_poster_name'] != '') ? $row['topic_first_poster_name'] : $user->lang['GUEST']);

+ $topic_author .= ($row['topic_poster'] != ANONYMOUS) ? '</a>' : '';

+ $last_post_author = ($row['topic_last_poster_id'] == ANONYMOUS) ? (($row['topic_last_poster_name'] != '') ? $row['topic_last_poster_name'] . ' ' : $user->lang['GUEST'] . ' ') : "<a href=\"memberlist.$phpEx$SID&amp;mode=viewprofile&amp;u=" . $row['topic_last_poster_id'] . '">' . $row['topic_last_poster_name'] . '</a>';

+ // Topic type/folder

+ $topic_type = '';

+ if ($row['topic_status'] == ITEM_MOVED)

+ $topic_type = $user->lang['VIEW_TOPIC_MOVED'] . ' ';

+ $topic_id = $row['topic_moved_id'];

+ $folder_image = 'folder';

+ $folder_alt = 'Topic_Moved';

+ $newest_post_img = '';

+ switch ($row['topic_type'])

+ case POST_GLOBAL:

+ case POST_ANNOUNCE:

+ $topic_type = $user->lang['VIEW_TOPIC_ANNOUNCEMENT'];

+ break;

+

+ case POST_STICKY:

+ $topic_type = $user->lang['VIEW_TOPIC_STICKY'];

+ break;

+

+ default:

+ if ($replies >= $config['hot_threshold'])

+ $folder_new = 'folder_hot_new';

+ break;

+ }

+ $folder_img = ($unread_topic) ? $folder_new : $folder;

+ $folder_alt = ($unread_topic) ? 'NEW_POSTS' : (($row['topic_status'] == ITEM_LOCKED) ? 'TOPIC_LOCKED' : 'NO_NEW_POSTS');

+ }

+ else

+ {

+ if (!empty($censors))

+ {

+ $row['post_text'] = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace(\$censors['match'], \$censors['replace'], '\\0')", '>' . $row['post_text'] . '<'), 1, -1));

+ }

+ if ($row['bbcode_bitfield'])

+ {

+ $row['post_text'] = preg_replace('#\[\/?.*?:' . $row['bbcode_uid'] . '\]#s', '', $row['post_text']);

+ }

+ if ($return_chars)

+ {

+ $row['post_text'] = (strlen($row['post_text']) < $return_chars + 3) ? $row['post_text'] : substr($row['post_text'], 0, $return_chars) . '...';

+ }

+ // This was shamelessly 'borrowed' from volker at multiartstudio dot de

+ // via php.net's annotated manual

+ $row['post_text'] = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace('#\b(" . $hilit . ")\b#i', '<span class=\"posthilit\">\\\\1</span>', '\\0')", '>' . $row['post_text'] . '<'), 1, -1));

+ $row['post_text'] = (empty($config['allow_smilies']) || !$user->data['user_viewsmilies']) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $row['post_text']) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $row['post_text']);

+ }

+ $template->assign_block_vars('searchresults', array(

+ 'FORUM_ID' => $forum_id,

+ 'TOPIC_ID' => $topic_id,

+

+ 'TOPIC_AUTHOR' => $topic_author,

+ 'FIRST_POST_TIME' => $user->format_date($row['topic_time'], $config['board_timezone']),

+ 'LAST_POST_TIME' => $user->format_date($row['topic_last_post_time']),

+ 'LAST_VIEW_TIME' => $user->format_date($row['topic_last_view_time']),

+ 'LAST_POST_AUTHOR' => $last_post_author,

+ 'GOTO_PAGE' => $goto_page,

+ 'TOPIC_REPLIES' => ($auth->acl_get('m_approve')) ? $row['topic_replies_real'] : $row['topic_replies'],

+ 'TOPIC_VIEWS' => $row['topic_views'],

+ 'FORUM_TITLE' => $row['forum_name'],

+ 'TOPIC_TITLE' => (!empty($censors)) ? preg_replace($censors['match'], $censors['replace'], $row['topic_title']) : $row['topic_title'],

+ 'TOPIC_TYPE' => $topic_type,

+

+ 'POSTER_NAME' => ($row['poster_id'] == ANONYMOUS) ? ((!empty($row['post_username'])) ? $row['post_username'] : $user->lang['GUEST']) : $row['username'],

+ 'POST_SUBJECT' => (!empty($row['post_subject'])) ? ((!empty($censors)) ? preg_replace($censors['match'], $censors['replace'], $row['post_subject']) : $row['post_subject']) : '',

+ 'POST_DATE' => (!empty($row['post_time'])) ? $user->format_date($row['post_time']) : '',

+ 'MESSAGE' => (!empty($row['post_text'])) ? str_replace("\n", '<br />', $row['post_text']) : '',

+

+ 'LAST_POST_IMG' => $last_post_img,

+ 'NEWEST_POST_IMG' => $newest_post_img,

+ 'TOPIC_FOLDER_IMG' => $user->img($folder_img, $folder_alt),

+ 'TOPIC_ICON_IMG' => (!empty($icons[$row['icon_id']])) ? '<img src="' . $config['icons_path'] . '/' . $icons[$row['icon_id']]['img'] . '" width="' . $icons[$row['icon_id']]['width'] . '" height="' . $icons[$row['icon_id']]['height'] . '" alt="" title="" />' : '',

+ 'POST_ICON_IMG' => (!empty($icons[$row['icon_id']])) ? '<img src="' . $config['icons_path'] . '/' . $icons[$row['icon_id']]['img'] . '" width="' . $icons[$row['icon_id']]['width'] . '" height="' . $icons[$row['icon_id']]['height'] . '" alt="" title="" />' : '',

+ 'ATTACH_ICON_IMG' => ($auth->acl_get('f_download', $forum_id) && $row['topic_attachment']) ? $user->img('icon_attach', '') : '',

+ 'MINI_POST_IMG' => ($row['post_time'] > $user->data['user_lastvisit'] && $row['post_time'] > $topic_last_read && $user->data['user_id'] != ANONYMOUS) ? $user->img('icon_post_new', $user->lang['NEW_POST']) : $user->img('icon_post', $user->lang['POST']),

+

+ 'U_VIEW_TOPIC' => $view_topic_url,

+ 'U_VIEW_FORUM' => "viewforum.$phpEx$SID&amp;f=$forum_id",

+ 'U_VIEW_POST' => (!empty($row['post_id'])) ? "viewtopic.$phpEx$SID&amp;f=$forum_id&amp;t=" . $row['topic_id'] . '&amp;p=' . $row['post_id'] . '&amp;hilit=' . $u_hilit . '#' . $row['post_id'] : '', )

+ );

+ }

+ $db->sql_freeresult($result);

+ page_header($user->lang['SEARCH']);

+ $template->set_filenames(array(

+ 'body' => ($show_results == 'posts') ? 'search_results_posts.html' : 'search_results_topics.html')

+ );

+ make_jumpbox('viewforum.'.$phpEx);

+ page_footer();

+}

+// Search forum

+$s_forums = '';

+$sql = 'SELECT f.forum_id, f.forum_name, f.parent_id, f.forum_type, f.left_id, f.right_id, f.forum_password, fa.user_id

+ FROM (' . FORUMS_TABLE . ' f

+ LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa ON (fa.forum_id = f.forum_id

+ AND fa.session_id = '" . $db->sql_escape($user->data['session_id']) . "'))

+ ORDER BY f.left_id ASC";

+$result = $db->sql_query($sql);

+$right = $cat_right = $padding_inc = 0;

+$padding = $forum_list = $holding = '';

+$pad_store = array('0' => '');

+while ($row = $db->sql_fetchrow($result))

+{

+ if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id']))

+ {

+ // Non-postable forum with no subforums, don't display

+ continue;

+ }

+ if (!$auth->acl_get('f_list', $row['forum_id']) || $row['forum_type'] == FORUM_LINK || ($row['forum_password'] && !$row['user_id']))

+ {

+ // if the user does not have permissions to list this forum skip

+ continue;

+ }

+ if ($row['left_id'] < $right)

+ {

+ $padding .= '&nbsp; &nbsp;';

+ $pad_store[$row['parent_id']] = $padding;

+ else if ($row['left_id'] > $right + 1)

+ $padding = $pad_store[$row['parent_id']];

+ $right = $row['right_id'];

+ $selected = (!sizeof($search_forums) || in_array($row['forum_id'], $search_forums)) ? ' selected="selected"' : '';

+

+ if ($row['left_id'] > $cat_right)

+ $holding = '';

+ if ($row['right_id'] - $row['left_id'] > 1)

+ $cat_right = max($cat_right, $row['right_id']);

+

+ $holding .= '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';

+ }

+ else

+ {

+ $s_forums .= $holding . '<option value="' . $row['forum_id'] . '"' . $selected . '>' . $padding . $row['forum_name'] . '</option>';

+ $holding = '';

+$db->sql_freeresult($result);

+unset($pad_store);

+

+

+$s_characters = '<option value="-1">' . $user->lang['ALL_AVAILABLE'] . '</option>';

+for($i = 100; $i <= 1000 ; $i += 100)

+ $selected = ($i == 200) ? ' selected="selected"' : '';

+$template->assign_vars(array(

+ 'S_SEARCH_ACTION' => "search.$phpEx$SID&amp;mode=results",

+ 'S_CHARACTER_OPTIONS' => $s_characters,

+ 'S_FORUM_OPTIONS' => $s_forums,

+ 'S_SELECT_SORT_DIR' => $s_sort_dir,

+ 'S_SELECT_SORT_KEY' => $s_sort_key,

+ 'S_SELECT_SORT_DAYS' => $s_limit_days,

+ 'S_HIDDEN_FIELDS' => $s_hidden_fields)

+);

+$sql = 'SELECT search_id, search_array

+ FROM ' . SEARCH_TABLE;

+$result = $db->sql_query($sql);

+

+$i = 0;

+while ($row = $db->sql_fetchrow($result))

+ if ($i == 5)

+ {

+ break;

+ }

+ $data = explode('#', $row['search_array']);

+ $split_words = htmlspecialchars(implode(' ', unserialize(array_shift($data))));

+

+ if (!$split_words)

+ {

+ continue;

+ }

+

+ $stopped_words = htmlspecialchars(implode(' ', unserialize(array_shift($data))));

+ foreach ($store_vars as $var)

+ {

+ $$var = array_shift($data);

+ }

+ unset($data);

+

+ $template->assign_block_vars('recentsearch', array(

+ 'KEYWORDS' => $split_words,

+ 'TIME' => $user->format_date($current_time),

+

+ 'U_KEYWORDS' => "search.$phpEx$SID&amp;search_keywords=" . urlencode($split_words),

+

+ 'S_ROW_COUNT' => $i++)

+ );

+}

+$db->sql_freeresult($result);