WB 2.11.0

<?php

/**

 *

 * @category        frontend

 * @package         search

 * @author          WebsiteBaker Project

 * @copyright       2004-2009, Ryan Djurovich

 * @copyright       2009-2010, Website Baker Org. e.V.

 * @link            http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 4.3.4 and higher

 * @version         $Id: search_modext.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource        $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/branches/main/search/search_modext.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

// make the url-string for highlighting

function make_url_searchstring($search_match, $search_url_array) {

    $link = "";

    if ($search_match != 'exact') {

        $str = implode(" ", $search_url_array);

        $link = "?searchresult=1&sstring=".urlencode($str);

    } else {

        $str = str_replace(' ', '_', $search_url_array[0]);

        $link = "?searchresult=2&sstring=".urlencode($str);

    }

    return $link;

}

// make date and time for "last modified by... on ..."-string

function get_page_modified($page_modified_when) {

    global $TEXT;

    if($page_modified_when > 0) {

        $date = gmdate(DATE_FORMAT, $page_modified_when+TIMEZONE);

        $time = gmdate(TIME_FORMAT, $page_modified_when+TIMEZONE);

    } else {

        $date = $TEXT['UNKNOWN'].' '.$TEXT['DATE'];

        $time = $TEXT['UNKNOWN'].' '.$TEXT['TIME'];

    }

    return array($date, $time);

}

// make username and displayname for "last modified by... on ..."-string

function get_page_modified_by($page_modified_by, $users) {

    global $TEXT;

    if($page_modified_by>0) {

        $username = $users[$page_modified_by]['username'];

        $displayname = $users[$page_modified_by]['display_name'];

    } else {

        $username = "";

        $displayname = $TEXT['UNKNOWN'];

    }

    return array($username, $displayname);

}

// checks if _all_ searchwords matches

function is_all_matched($text, $search_words) {

    $all_matched = true;

    foreach ($search_words AS $word) {

        if(!preg_match('/'.$word.'/i', $text)) {

            $all_matched = false;

            break;

        }

    }

    return $all_matched;

}

// checks if _any_ of the searchwords matches

function is_any_matched($text, $search_words) {

    $any_matched = false;

    $word = '('.implode('|', $search_words).')';

    if(preg_match('/'.$word.'/i', $text)) {

        $any_matched = true;

    }

    return $any_matched;

}

// collects the matches from text in excerpt_array

function get_excerpts($text, $search_words, $max_excerpt_num) {

    $excerpt_array = FALSE;

    $word = '('.implode('|', $search_words).')';

    // start-sign: .!?; + INVERTED EXCLAMATION MARK - INVERTED QUESTION MARK - DOUBLE EXCLAMATION MARK - INTERROBANG - EXCLAMATION QUESTION MARK - QUESTION EXCLAMATION MARK - DOUBLE QUESTION MARK - HALFWIDTH IDEOGRAPHIC FULL STOP - IDEOGRAPHIC FULL STOP - IDEOGRAPHIC COMMA

    $p_start=".!?;"."\xC2\xA1"."\xC2\xBF"."\xE2\x80\xBC"."\xE2\x80\xBD"."\xE2\x81\x89"."\xE2\x81\x88"."\xE2\x81\x87"."\xEF\xBD\xA1"."\xE3\x80\x82"."\xE3\x80\x81";

    // stop-sign: .!?; + DOUBLE EXCLAMATION MARK - INTERROBANG - EXCLAMATION QUESTION MARK - QUESTION EXCLAMATION MARK - DOUBLE QUESTION MARK - HALFWIDTH IDEOGRAPHIC FULL STOP - IDEOGRAPHIC FULL STOP - IDEOGRAPHIC COMMA

    $p_stop=".!?;"."\xE2\x80\xBC"."\xE2\x80\xBD"."\xE2\x81\x89"."\xE2\x81\x88"."\xE2\x81\x87"."\xEF\xBD\xA1"."\xE3\x80\x82"."\xE3\x80\x81";

    // jump from match to match, get excerpt, stop if $max_excerpt_num is reached

    $match_array = $matches = array();

    $startpos = $wordpos = $endpos = 0; // although preg_match with u-switch handles unicode correctly, the ...pos-variables will count bytes (not chars) 

    while(preg_match("/$word/i", $text, $match_array, PREG_OFFSET_CAPTURE, $startpos)) {

        $wordpos = $match_array[0][1];

        $startpos = ($wordpos-200 < $endpos)?$endpos:$wordpos-200;

        $endpos = $wordpos+200;

        // look for better start position

        if(preg_match_all("/[$p_start]/u", substr($text, $startpos, $wordpos-$startpos), $matches, PREG_OFFSET_CAPTURE))

            $startpos += $matches[0][count($matches[0])-1][1]; // set startpos at last punctuation before word

        // look for better end position

        if(preg_match_all("/[$p_stop]/u", substr($text, $wordpos, $endpos-$wordpos), $matches, PREG_OFFSET_CAPTURE))

            $endpos = $wordpos+$matches[0][0][1]; // set endpos at first punctuation after word

        $match = substr($text, $startpos+1, $endpos-$startpos);

        if(!preg_match('/\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\./', $match)) // skip excerpts with email-addresses

            $excerpt_array[] = trim($match);

        if(count($excerpt_array)>=$max_excerpt_num) {

            $excerpt_array = array_unique($excerpt_array);

            if(count($excerpt_array) >= $max_excerpt_num)

                break;

        }

        // restart at last endpos

        $startpos = $endpos;

    }

    return $excerpt_array;

}

// makes excerpt_array a string ready to print out

function prepare_excerpts($excerpt_array, $search_words, $max_excerpt_num) {

    // excerpts: text before and after a single excerpt, html-tag for markup

    $EXCERPT_BEFORE =       '... ';

    $EXCERPT_AFTER =        '&nbsp;...<br />';

    $EXCERPT_MARKUP_START = '<b>';

    $EXCERPT_MARKUP_END =   '</b>';

    // remove duplicate matches from $excerpt_array, if any.

    $excerpt_array = array_unique($excerpt_array);

    // use the first $max_excerpt_num excerpts only

    if(count($excerpt_array) > $max_excerpt_num) {

        $excerpt_array = array_slice($excerpt_array, 0, $max_excerpt_num);

    }

    // prepare search-string

    $string = "(".implode("|", $search_words).")";

    // we want markup on search-results page,

    // but we need some 'magic' to prevent <br />, <b>... from being highlighted

    $excerpt = '';

    foreach($excerpt_array as $str) {

        $excerpt .= '#,,#'.preg_replace("/($string)/i","#,,,,#$1#,,,,,#",$str).'#,,,#';

    }

    $excerpt = str_replace(array('&','<','>','"','\'',"\xC2\xA0"), array('&amp;','&lt;','&gt;','&quot;','&#039;',' '), $excerpt);

    $excerpt = str_replace(array('#,,,,#','#,,,,,#'), array($EXCERPT_MARKUP_START,$EXCERPT_MARKUP_END), $excerpt);

    $excerpt = str_replace(array('#,,#','#,,,#'), array($EXCERPT_BEFORE,$EXCERPT_AFTER), $excerpt);

    // prepare to write out

    if(DEFAULT_CHARSET != 'utf-8') {

        $excerpt = umlauts_to_entities($excerpt, 'UTF-8');

    }

    return $excerpt;

}

// work out what the link-anchor should be

function make_url_target($page_link_target, $text, $search_words) {

    // 1. e.g. $page_link_target=="&monthno=5&year=2007" - module-dependent target. Do nothing.

    // 2. $page_link_target=="#!wb_section_..." - the user wants the section-target, so do nothing.

    // 3. $page_link_target=="#wb_section_..." - try to find a better target, use the section-target as fallback.

    // 4. $page_link_target=="" - do nothing

    if(version_compare(PHP_VERSION, '4.3.3', ">=") && substr($page_link_target,0,12)=='#wb_section_') {

        $word = '('.implode('|', $search_words).')';

        preg_match('/'.$word.'/i', $text, $match, PREG_OFFSET_CAPTURE);

        if($match && is_array($match[0])) {

            $x=$match[0][1]; // position of first match

            // is there an anchor nearby?

            if(preg_match_all('/<\s*(?:a[^>]+?name|[^>]+?id)\s*=\s*"([^"]+)"/i', substr($text,0,$x), $match)) {

                $page_link_target = '#'.$match[1][count($match[1])-1];

            }

        }

    }

    elseif(substr($page_link_target,0,13)=='#!wb_section_') {

        $page_link_target = '#'.substr($page_link_target, 2);

    }

    // since wb 2.7.1 the section-anchor is configurable - SEC_ANCHOR holds the anchor name

    if(substr($page_link_target,0,12)=='#wb_section_') {

        if(defined('SEC_ANCHOR') && SEC_ANCHOR!='') {

            $sec_id = substr($page_link_target, 12);

            $page_link_target = '#'.SEC_ANCHOR.$sec_id;

        } else { // section-anchors are disabled

            $page_link_target = '';

        }

    }

    return $page_link_target;

}

// wrapper for compatibility with old print_excerpt()

function print_excerpt($page_link, $page_link_target, $page_title, $page_description, $page_modified_when, $page_modified_by, $text, $max_excerpt_num, $func_vars, $pic_link="") {

    $mod_vars = array(

        'page_link' => $page_link,

        'page_link_target' => $page_link_target,

        'page_title' => $page_title,

        'page_description' => $page_description,

        'page_modified_when' => $page_modified_when,

        'page_modified_by' => $page_modified_by,

        'text' => $text,

        'max_excerpt_num' => $max_excerpt_num,

        'pic_link' => $pic_link

    );

    print_excerpt2($mod_vars, $func_vars);

}

/* These functions can be used in module-supplied search_funcs

 * -----------------------------------------------------------

 * print_excerpt2() - the main-function to use in all search_funcs

 * print_excerpt() - wrapper for compatibility-reason. Use print_excerpt2() instead.

 * list_files_dirs() - lists all files and dirs below a given directory

 * clear_filelist() - keeps only wanted or removes unwanted entries in file-list.

 */

// prints the excerpts for one section

function print_excerpt2($mod_vars, $func_vars) {

    extract($func_vars, EXTR_PREFIX_ALL, 'func');

    extract($mod_vars, EXTR_PREFIX_ALL, 'mod');

    global $TEXT;

    // check $mod_...vars

    if(!isset($mod_page_link))          $mod_page_link = $func_page_link;

    if(!isset($mod_page_link_target))   $mod_page_link_target = "";

    if(!isset($mod_page_title))         $mod_page_title = $func_page_title;

    if(!isset($mod_page_description))   $mod_page_description = $func_page_description;

    if(!isset($mod_page_modified_when)) $mod_page_modified_when = $func_page_modified_when;

    if(!isset($mod_page_modified_by))   $mod_page_modified_by = $func_page_modified_by;

    if(!isset($mod_text))               $mod_text = "";

    if(!isset($mod_max_excerpt_num))    $mod_max_excerpt_num = $func_default_max_excerpt;

    if(!isset($mod_pic_link))           $mod_pic_link = "";

    if(!isset($mod_no_highlight))       $mod_no_highlight = false;

    if(!isset($func_enable_flush))      $func_enable_flush = false; // set this in db: wb_search.cfg_enable_flush [READ THE DOC BEFORE]

    if(isset($mod_ext_charset)) $mod_ext_charset = strtolower($mod_ext_charset);

    else $mod_ext_charset = '';

    if($mod_text == "") // nothing to do

        { return false; }

    if($mod_no_highlight) // no highlighting

        { $mod_page_link_target = "&nohighlight=1".$mod_page_link_target; }

    // clean the text:

    $mod_text = preg_replace('#<(br|dt|/dd|/?(?:h[1-6]|tr|table|p|li|ul|pre|code|div|hr))[^>]*>#i', '.', $mod_text);

    $mod_text = preg_replace('#<(!--.*--|style.*</style|script.*</script)>#iU', ' ', $mod_text);

    $mod_text = preg_replace('#\[\[.*?\]\]#', '', $mod_text); //Filter droplets from the page data

    // strip_tags() is called below

    if($mod_ext_charset!='') { // data from external database may have a different charset

        require_once(WB_PATH.'/framework/functions-utf8.php');

        switch($mod_ext_charset) {

        case 'latin1':

        case 'cp1252':

            $mod_text = charset_to_utf8($mod_text, 'CP1252');

            break;

        case 'cp1251':

            $mod_text = charset_to_utf8($mod_text, 'CP1251');

            break;

        case 'latin2':

            $mod_text = charset_to_utf8($mod_text, 'ISO-8859-2');

            break;

        case 'hebrew':

            $mod_text = charset_to_utf8($mod_text, 'ISO-8859-8');

            break;

        case 'greek':

            $mod_text = charset_to_utf8($mod_text, 'ISO-8859-7');

            break;

        case 'latin5':

            $mod_text = charset_to_utf8($mod_text, 'ISO-8859-9');

            break;

        case 'latin7':

            $mod_text = charset_to_utf8($mod_text, 'ISO-8859-13');

            break;

        case 'utf8':

        default:

            $mod_text = charset_to_utf8($mod_text, 'UTF-8');

        }

    } else {

        $mod_text = entities_to_umlauts($mod_text, 'UTF-8');

    }

    $anchor_text = $mod_text; // make an copy containing html-tags

    $mod_text = strip_tags($mod_text);

    $mod_text = str_replace(array('&gt;','&lt;','&amp;','&quot;','&#039;','&apos;','&nbsp;'), array('>','<','&','"','\'','\'',' '), $mod_text);

    $mod_text = '.'.trim($mod_text).'.';

    // Do a fast scan over $mod_text first. This may speedup things a lot.

    if($func_search_match == 'all') {

        if(!is_all_matched($mod_text, $func_search_words))

            return false;

    }

    elseif(!is_any_matched($mod_text, $func_search_words)) {

        return false;

    }

    // search for an better anchor - this have to be done before strip_tags() (may fail if search-string contains <, &, amp, gt, lt, ...)

    $anchor =  make_url_target($mod_page_link_target, $anchor_text, $func_search_words);

    // make the link from $mod_page_link, add anchor

    $link = "";

    $link = page_link($mod_page_link);

    if(strpos($mod_page_link, 'http:')===FALSE)

        $link .= make_url_searchstring($func_search_match, $func_search_url_array);

    $link .= $anchor;

    // now get the excerpt

    $excerpt = "";

    $excerpt_array = array();

    if($mod_max_excerpt_num > 0) {

        if(!$excerpt_array = get_excerpts($mod_text, $func_search_words, $mod_max_excerpt_num)) {

            return false;

        }

        $excerpt = prepare_excerpts($excerpt_array, $func_search_words, $mod_max_excerpt_num);

    }

    // handle thumbs - to deactivate this look in the module's search.php: $show_thumb (or maybe in the module's settings-page)

    if($mod_pic_link != "") {

        if(isset($mod_special) && $mod_special=='lightbox2_plus')

            $excerpt = '<table class="excerpt_thumb" width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="110" valign="top">'.$mod_special_piclink.'<img src="'.WB_URL.'/'.MEDIA_DIRECTORY.$mod_pic_link.'" alt="" /></a></td><td>'.$excerpt.'</td></tr></tbody></table>';

        else

            $excerpt = '<table class="excerpt_thumb" width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="110" valign="top"><a href="'.$link.'"><img src="'.WB_URL.'/'.MEDIA_DIRECTORY.$mod_pic_link.'" alt="" /></a></td><td>'.$excerpt.'</td></tr></tbody></table>';

    }

    // print-out the excerpt

    $vars = array();

    $values = array();

    list($date, $time) = get_page_modified($mod_page_modified_when);

    list($username, $displayname) = get_page_modified_by($mod_page_modified_by, $func_users);

    $vars = array('[LINK]', '[TITLE]','[PAGE_TITLE]' ,'[MENU_TITLE]' , '[DESCRIPTION]', '[USERNAME]','[DISPLAY_NAME]','[DATE]','[TIME]','[TEXT_LAST_UPDATED_BY]','[TEXT_ON]','[EXCERPT]');

    $values = array(

        $link,

        $mod_page_title,

        $func_page_title,

        $func_page_menu_title,

        $mod_page_description,

        $username,

        $displayname,

        $date,

        $time,

        $TEXT['LAST_UPDATED_BY'],

        $TEXT['ON'],

        $excerpt

    );

    echo str_replace($vars, $values, $func_results_loop_string);

    if($func_enable_flush) { // ATTN: this will bypass output-filters and may break template-layout or -filters

        ob_flush();flush();

    }

    return true;

}

// list all files and dirs in $dir (recursive), omits '.', '..', and hidden files/dirs

// returns an array of two arrays ($files[] and $dirs[]).

// usage: list($files,$dirs) = list_files_dirs($directory);

//        $depth: get subdirs (true/false)

function list_files_dirs($dir, $depth=true, $files=array(), $dirs=array()) {

    $dh=opendir($dir);

    while(($file = readdir($dh)) !== false) {

        if($file{0} == '.' || $file == '..') {

            continue;

        }

        if(is_dir($dir.'/'.$file)) {

            if($depth) {

                $dirs[] = $dir.'/'.$file;

                list($files, $dirs) = list_files_dirs($dir.'/'.$file, $depth, $files, $dirs);

            }

        } else {

            $files[] = $dir.'/'.$file;

        }

    }

    closedir($dh);

    natcasesort($files);

    natcasesort($dirs);

    return(array($files, $dirs));

}

// keeps only wanted entries in array $files. $str have to be an eregi()-compatible regex

function clear_filelist($files, $str, $keep=true) {

    // options: $keep = true  : remove all non-matching entries

    //          $keep = false : remove all matching entries

    $c_filelist = array();

    if($str == '')

        return $files;

    foreach($files as $file) {

        if($keep) {

            if(preg_match("~$str~i", $file)) {

                $c_filelist[] = $file;

            }

        } else {

            if(!preg_match("~$str~i", $file)) {

                $c_filelist[] = $file;

            }

        }

    }

    return($c_filelist);

}

function search_make_sql_part($words, $match, $columns) {

    // $words are utf-8 encoded, will be converted to DEFAULT_CHARSET below

    if(empty($words) || empty($columns)) return('(1=1)');

    global $database;

    // check if we can use SQL'S "LIKE"

    // work-around for WB'S missing-SET-NAMES-problem

    static $checked = FALSE;

    if($checked===FALSE) {

        $checked = TRUE;

        $lowers = array('utf8'=>"\xc3\xa1", 'iso'=>"\xe1");

        $uppers = array('utf8'=>"\xc3\x81", 'iso'=>"\xc1");

        switch(DEFAULT_CHARSET) {

            case 'utf-8':

                $lo = $lowers['utf8'];

                $up = $uppers['utf8'];

                break;

            case 'iso-8859-1':

            case 'iso-8859-2':

            case 'iso-8859-3':

            case 'iso-8859-4':

            case 'iso-8859-5':

            case 'iso-8859-7':

            case 'iso-8859-9':

            case 'iso-8859-10':

                $lo = $lowers['iso'];

                $up = $uppers['iso'];

                break;

            default:

                $checked = 'check failed'; // we can't handle arabic,hebrew,thai

        }

        if($checked===TRUE && $query = $database->query("SELECT UPPER('$lo')='$up'")) {

            $res = $query->fetchRow();

            if($res[0]==0) {

                $checked = 'check failed';

            }

        } else

            $checked = 'check failed';

    }

    require_once(WB_PATH.'/framework/functions-utf8.php');

    global $search_table_sql_local;

    $altnum = count($search_table_sql_local);

    if($match=='all') $op = 'AND';

    else $op = ' OR'; // keep the leading space!

    // create sql-template

    $sql = '';

    $i = 0;

    foreach($words as $w) {

        if(empty($w)) continue;

        $w_alts = $e_alts = array();

        if($altnum) {

            for($x=0;$x<$altnum;$x++)

                $w_alts[$x] = strtr($w, $search_table_sql_local[$x]);

        } else {

            $w_alts[0] = $w;

        }

        $w_alts = array_unique($w_alts);

        foreach($w_alts as $a) {

            $tmp = htmlentities($a, ENT_COMPAT, 'UTF-8');

            // if the missing-SET-NAMES-issue appears and $tmp contains non-ascii characters: exit and use the normal (slow) search-function instead

            if($checked!==TRUE && preg_match('/[\x80-\xFF]/', $tmp)) return('(1=1)'); // missing-SET-NAMES-issue

            $e_alts[] = $tmp;

        }

        $sql .= "";

        foreach($w_alts as $a)

            $sql .= "{{COL}} LIKE '%".addslashes(utf8_to_charset($a))."%' OR ";

        if(isset($e_alts[$i]) && $e_alts[$i]!=$w)

            $sql .= " {{COL}} LIKE '%".addslashes($e_alts[$i])."%'";

        else {

            $sql = substr($sql, 0, strlen($sql)-4);

            $sql .= '';

        }

        $sql .= " $op ";

        $i++;

    }

    $sql = substr($sql, 0, strlen($sql)-5);

    $sql_template = $sql;

    // create SQL-string from template

    $sql = '(';

    foreach($columns as $c) {

        $sql .= '(';

        $sql .= str_replace('{{COL}}', $c, $sql_template);

        $sql .= ")  OR ";

    }

    $sql = substr($sql, 0, strlen($sql)-4);

    $sql .= ')';

    return($sql);

}