1
|
<?php
|
2
|
/**
|
3
|
*
|
4
|
* @category frontend
|
5
|
* @package search
|
6
|
* @author WebsiteBaker Project
|
7
|
* @copyright 2004-2009, Ryan Djurovich
|
8
|
* @copyright 2009-2011, Website Baker Org. e.V.
|
9
|
* @link http://www.websitebaker2.org/
|
10
|
* @license http://www.gnu.org/licenses/gpl.html
|
11
|
* @platform WebsiteBaker 2.8.x
|
12
|
* @requirements PHP 5.2.2 and higher
|
13
|
* @version $Id: search.php 2 2017-07-02 15:14:29Z Manuela $
|
14
|
* @filesource $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/trunk/search/search.php $
|
15
|
* @lastmodified $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $
|
16
|
*
|
17
|
*/
|
18
|
|
19
|
// Must include code to stop this file being access directly
|
20
|
if(defined('WB_PATH') == false) { die("Cannot access this file directly"); }
|
21
|
|
22
|
// Check if search is enabled
|
23
|
if(SHOW_SEARCH != true) {
|
24
|
echo $TEXT['SEARCH'].' '.$TEXT['DISABLED'];
|
25
|
return;
|
26
|
}
|
27
|
|
28
|
// Include the WB functions file
|
29
|
require_once(WB_PATH.'/framework/functions.php');
|
30
|
|
31
|
// Get search settings
|
32
|
$table=TABLE_PREFIX.'search';
|
33
|
$query = $database->query("SELECT value FROM $table WHERE name = 'header' LIMIT 1");
|
34
|
$fetch_header = $query->fetchRow();
|
35
|
$query = $database->query("SELECT value FROM $table WHERE name = 'footer' LIMIT 1");
|
36
|
$fetch_footer = $query->fetchRow();
|
37
|
$query = $database->query("SELECT value FROM $table WHERE name = 'results_header' LIMIT 1");
|
38
|
$fetch_results_header = $query->fetchRow();
|
39
|
$query = $database->query("SELECT value FROM $table WHERE name = 'results_footer' LIMIT 1");
|
40
|
$fetch_results_footer = $query->fetchRow();
|
41
|
$query = $database->query("SELECT value FROM $table WHERE name = 'results_loop' LIMIT 1");
|
42
|
$fetch_results_loop = $query->fetchRow();
|
43
|
$query = $database->query("SELECT value FROM $table WHERE name = 'no_results' LIMIT 1");
|
44
|
$fetch_no_results = $query->fetchRow();
|
45
|
$query = $database->query("SELECT value FROM $table WHERE name = 'module_order' LIMIT 1");
|
46
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value']='faqbaker,manual,wysiwyg'; }
|
47
|
$search_module_order = $res['value'];
|
48
|
$query = $database->query("SELECT value FROM $table WHERE name = 'max_excerpt' LIMIT 1");
|
49
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = '15'; }
|
50
|
$search_max_excerpt = (int)($res['value']);
|
51
|
if(!is_numeric($search_max_excerpt)) { $search_max_excerpt = 15; }
|
52
|
$query = $database->query("SELECT value FROM $table WHERE name = 'cfg_show_description' LIMIT 1");
|
53
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = 'true'; }
|
54
|
if($res['value'] == 'false') { $cfg_show_description = false; } else { $cfg_show_description = true; }
|
55
|
$query = $database->query("SELECT value FROM $table WHERE name = 'cfg_search_description' LIMIT 1");
|
56
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = 'true'; }
|
57
|
if($res['value'] == 'false') { $cfg_search_description = false; } else { $cfg_search_description = true; }
|
58
|
$query = $database->query("SELECT value FROM $table WHERE name = 'cfg_search_keywords' LIMIT 1");
|
59
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = 'true'; }
|
60
|
if($res['value'] == 'false') { $cfg_search_keywords = false; } else { $cfg_search_keywords = true; }
|
61
|
$query = $database->query("SELECT value FROM $table WHERE name = 'cfg_enable_old_search' LIMIT 1");
|
62
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = 'true'; }
|
63
|
if($res['value'] == 'false') { $cfg_enable_old_search = false; } else { $cfg_enable_old_search = true; }
|
64
|
$query = $database->query("SELECT value FROM $table WHERE name = 'cfg_enable_flush' LIMIT 1");
|
65
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = 'false'; }
|
66
|
if($res['value'] == 'false') { $cfg_enable_flush = false; } else { $cfg_enable_flush = true; }
|
67
|
$query = $database->query("SELECT value FROM $table WHERE name = 'time_limit' LIMIT 1"); // time-limit per module
|
68
|
if($query->numRows() > 0) { $res = $query->fetchRow(); } else { $res['value'] = '0'; }
|
69
|
$search_time_limit = (int)($res['value']);
|
70
|
if($search_time_limit < 1) $search_time_limit = 0;
|
71
|
|
72
|
// search-module-extension: get helper-functions
|
73
|
require_once(WB_PATH.'/search/search_modext.php');
|
74
|
// search-module-extension: Get "search.php" for each module, if present
|
75
|
// looks in modules/module/ and modules/module_searchext/
|
76
|
$search_funcs = array();$search_funcs['__before'] = array();$search_funcs['__after'] = array();
|
77
|
$query = $database->query("SELECT DISTINCT directory FROM ".TABLE_PREFIX."addons WHERE type = 'module' AND directory NOT LIKE '%_searchext'");
|
78
|
if($query->numRows() > 0) {
|
79
|
while($module = $query->fetchRow()) {
|
80
|
$file = WB_PATH.'/modules/'.$module['directory'].'/search.php';
|
81
|
if(!file_exists($file)) {
|
82
|
$file = WB_PATH.'/modules/'.$module['directory'].'_searchext/search.php';
|
83
|
if(!file_exists($file)) {
|
84
|
$file='';
|
85
|
}
|
86
|
}
|
87
|
if($file!='') {
|
88
|
include_once($file);
|
89
|
if(function_exists($module['directory']."_search")) {
|
90
|
$search_funcs[$module['directory']] = $module['directory']."_search";
|
91
|
}
|
92
|
if(function_exists($module['directory']."_search_before")) {
|
93
|
$search_funcs['__before'][] = $module['directory']."_search_before";
|
94
|
}
|
95
|
if(function_exists($module['directory']."_search_after")) {
|
96
|
$search_funcs['__after'][] = $module['directory']."_search_after";
|
97
|
}
|
98
|
}
|
99
|
}
|
100
|
}
|
101
|
|
102
|
// Get list of usernames and display names
|
103
|
$query = $database->query("SELECT user_id,username,display_name FROM ".TABLE_PREFIX."users");
|
104
|
$users = array('0' => array('display_name' => $TEXT['UNKNOWN'], 'username' => strtolower($TEXT['UNKNOWN'])));
|
105
|
if($query->numRows() > 0) {
|
106
|
while($user = $query->fetchRow()) {
|
107
|
$users[$user['user_id']] = array('display_name' => $user['display_name'], 'username' => $user['username']);
|
108
|
}
|
109
|
}
|
110
|
|
111
|
// Get search language, used for special umlaut handling (DE: ß=ss, ...)
|
112
|
$search_lang = '';
|
113
|
if(isset($_REQUEST['search_lang'])) {
|
114
|
$search_lang = $_REQUEST['search_lang'];
|
115
|
if(!preg_match('~^[A-Z]{2}$~', $search_lang))
|
116
|
$search_lang = LANGUAGE;
|
117
|
} else {
|
118
|
$search_lang = LANGUAGE;
|
119
|
}
|
120
|
|
121
|
// Get the path to search into. Normally left blank
|
122
|
// ATTN: since wb2.7.1 the path is evaluated as SQL: LIKE "/path%" - which will find "/path.php", "/path/info.php", ...; But not "/de/path.php"
|
123
|
// Add a '%' in front of each path to get SQL: LIKE "%/path%"
|
124
|
/* possible values:
|
125
|
* - a single path: "/en/" - search only pages whose link contains 'path' ("/en/machinery/bender-x09")
|
126
|
* - a single path not to search into: "-/help" - search all, exclude /help...
|
127
|
* - a bunch of alternative pathes: "/en/,%/machinery/,/docs/" - alternatives paths, seperated by comma
|
128
|
* - a bunch of paths to exclude: "-/about,%/info,/jp/,/light" - search all, exclude these.
|
129
|
* These different styles can't be mixed.
|
130
|
*/
|
131
|
// ATTN: in wb2.7.0 "/en/" matched all links with "/en/" somewhere in the link: "/info/en/intro.php", "/en/info.php", ...
|
132
|
// since wb2.7.1 "/en/" matches only links _starting_ with "/en/": "/en/intro/info.php"
|
133
|
// use "%/en/" (or "%/en/, %/info", ...) to get the old behavior
|
134
|
$search_path_SQL = '';
|
135
|
$search_path = '';
|
136
|
if(isset($_REQUEST['search_path'])) {
|
137
|
$search_path = addslashes(htmlspecialchars(strip_tags($wb->strip_slashes ($_REQUEST['search_path'])), ENT_QUOTES));
|
138
|
if(!preg_match('~^%?[-a-zA-Z0-9_,/ ]+$~', $search_path))
|
139
|
$search_path = '';
|
140
|
if($search_path != '') {
|
141
|
$search_path_SQL = 'AND ( ';
|
142
|
$not = '';
|
143
|
$op = 'OR';
|
144
|
if($search_path[0] == '-') {
|
145
|
$not = 'NOT';
|
146
|
$op = 'AND';
|
147
|
$paths = explode(',', substr($search_path, 1) );
|
148
|
} else {
|
149
|
$paths = explode(',',$search_path);
|
150
|
}
|
151
|
$i=0;
|
152
|
foreach($paths as $p) {
|
153
|
if($i++ > 0) {
|
154
|
$search_path_SQL .= ' $op';
|
155
|
}
|
156
|
$search_path_SQL .= " link $not LIKE '".$p."%'";
|
157
|
}
|
158
|
$search_path_SQL .= ' )';
|
159
|
}
|
160
|
}
|
161
|
|
162
|
// use page_languages?
|
163
|
if(PAGE_LANGUAGES) {
|
164
|
$table = TABLE_PREFIX."pages";
|
165
|
$search_language_SQL_t = "AND $table.`language` = '".LANGUAGE."'";
|
166
|
$search_language_SQL = "AND `language` = '".LANGUAGE."'";
|
167
|
} else {
|
168
|
$search_language_SQL_t = '';
|
169
|
$search_language_SQL = '';
|
170
|
}
|
171
|
|
172
|
// Get the search type
|
173
|
$match = '';
|
174
|
if(isset($_REQUEST['match'])) {
|
175
|
if($_REQUEST['match']=='any') $match = 'any';
|
176
|
elseif($_REQUEST['match']=='all') $match = 'all';
|
177
|
elseif($_REQUEST['match']=='exact') $match = 'exact';
|
178
|
else $match = 'all';
|
179
|
} else {
|
180
|
$match = 'all';
|
181
|
}
|
182
|
|
183
|
// Get search string
|
184
|
$search_normal_string = '';
|
185
|
$search_entities_string = ''; // for SQL's LIKE
|
186
|
$search_display_string = ''; // for displaying
|
187
|
$search_url_string = ''; // for $_GET -- ATTN: unquoted! Will become urldecoded later
|
188
|
$string = '';
|
189
|
if(isset($_REQUEST['string'])) {
|
190
|
if($match!='exact') { // $string will be cleaned below
|
191
|
$string=str_replace(',', '', $_REQUEST['string']);
|
192
|
} else {
|
193
|
$string=$_REQUEST['string'];
|
194
|
}
|
195
|
// redo possible magic quotes
|
196
|
$string = $wb->strip_slashes($string);
|
197
|
$string = preg_replace('/\s+/', ' ', $string);
|
198
|
$string = trim($string);
|
199
|
// remove some bad chars
|
200
|
$string = str_replace ( array('[[',']]'),'', $string);
|
201
|
$string = preg_replace('/(^|\s+)[|.]+(?=\s+|$)/', '', $string);
|
202
|
$search_display_string = htmlspecialchars($string);
|
203
|
// convert string to utf-8
|
204
|
$string = entities_to_umlauts($string, 'UTF-8');
|
205
|
$search_url_string = $string;
|
206
|
$search_entities_string = addslashes(htmlentities($string, ENT_COMPAT, 'UTF-8'));
|
207
|
// mySQL needs four backslashes to match one in LIKE comparisons)
|
208
|
$search_entities_string = str_replace('\\\\', '\\\\\\\\', $search_entities_string);
|
209
|
$string = preg_quote($string);
|
210
|
// quote ' " and / -we need quoted / for regex
|
211
|
$search_normal_string = str_replace(array('\'','"','/'), array('\\\'','\"','\/'), $string);
|
212
|
}
|
213
|
// make arrays from the search_..._strings above
|
214
|
if($match == 'exact')
|
215
|
$search_url_array[] = $search_url_string;
|
216
|
else
|
217
|
$search_url_array = explode(' ', $search_url_string);
|
218
|
$search_normal_array = array();
|
219
|
$search_entities_array = array();
|
220
|
if($match == 'exact') {
|
221
|
$search_normal_array[]=$search_normal_string;
|
222
|
$search_entities_array[]=$search_entities_string;
|
223
|
} else {
|
224
|
$exploded_string = explode(' ', $search_normal_string);
|
225
|
// Make sure there is no blank values in the array
|
226
|
foreach($exploded_string AS $each_exploded_string) {
|
227
|
if($each_exploded_string != '') {
|
228
|
$search_normal_array[] = $each_exploded_string;
|
229
|
}
|
230
|
}
|
231
|
$exploded_string = explode(' ', $search_entities_string);
|
232
|
// Make sure there is no blank values in the array
|
233
|
foreach($exploded_string AS $each_exploded_string) {
|
234
|
if($each_exploded_string != '') {
|
235
|
$search_entities_array[] = $each_exploded_string;
|
236
|
}
|
237
|
}
|
238
|
}
|
239
|
// make an extra copy of search_normal_array for use in regex
|
240
|
$search_words = array();
|
241
|
require_once(WB_PATH.'/search/search_convert.php');
|
242
|
global $search_table_umlauts_local;
|
243
|
require_once(WB_PATH.'/search/search_convert_ul.php');
|
244
|
global $search_table_ul_umlauts;
|
245
|
foreach($search_normal_array AS $str) {
|
246
|
$str = strtr($str, $search_table_umlauts_local);
|
247
|
$str = strtr($str, $search_table_ul_umlauts);
|
248
|
$search_words[] = $str;
|
249
|
}
|
250
|
|
251
|
// Work-out what to do (match all words, any words, or do exact match), and do relevant with query settings
|
252
|
$all_checked = '';
|
253
|
$any_checked = '';
|
254
|
$exact_checked = '';
|
255
|
if ($match == 'any') {
|
256
|
$any_checked = ' checked="checked"';
|
257
|
$logical_operator = ' OR';
|
258
|
} elseif($match == 'all') {
|
259
|
$all_checked = ' checked="checked"';
|
260
|
$logical_operator = ' AND';
|
261
|
} else {
|
262
|
$exact_checked = ' checked="checked"';
|
263
|
}
|
264
|
|
265
|
// Replace vars in search settings with values
|
266
|
$vars = array('[SEARCH_STRING]', '[WB_URL]', '[PAGE_EXTENSION]', '[TEXT_RESULTS_FOR]');
|
267
|
$values = array($search_display_string, WB_URL, PAGE_EXTENSION, $TEXT['RESULTS_FOR']);
|
268
|
$search_footer = str_replace($vars, $values, ($fetch_footer['value']));
|
269
|
$search_results_header = str_replace($vars, $values, ($fetch_results_header['value']));
|
270
|
$search_results_footer = str_replace($vars, $values, ($fetch_results_footer['value']));
|
271
|
|
272
|
// Do extra vars/values replacement
|
273
|
$vars = array('[SEARCH_STRING]', '[WB_URL]', '[PAGE_EXTENSION]', '[TEXT_SEARCH]', '[TEXT_ALL_WORDS]', '[TEXT_ANY_WORDS]', '[TEXT_EXACT_MATCH]', '[TEXT_MATCH]', '[TEXT_MATCHING]', '[ALL_CHECKED]', '[ANY_CHECKED]', '[EXACT_CHECKED]', '[REFERRER_ID]', '[SEARCH_PATH]');
|
274
|
$values = array($search_display_string, WB_URL, PAGE_EXTENSION, $TEXT['SEARCH'], $TEXT['ALL_WORDS'], $TEXT['ANY_WORDS'], $TEXT['EXACT_MATCH'], $TEXT['MATCH'], $TEXT['MATCHING'], $all_checked, $any_checked, $exact_checked, REFERRER_ID, $search_path);
|
275
|
$search_header = str_replace($vars, $values, ($fetch_header['value']));
|
276
|
$vars = array('[TEXT_NO_RESULTS]');
|
277
|
$values = array($TEXT['NO_RESULTS']);
|
278
|
$search_no_results = str_replace($vars, $values, ($fetch_no_results['value']));
|
279
|
|
280
|
/*
|
281
|
* Start of output
|
282
|
*/
|
283
|
|
284
|
// Show search header
|
285
|
echo $search_header;
|
286
|
// Show search results_header
|
287
|
echo $search_results_header;
|
288
|
|
289
|
// Work-out if the user has already entered their details or not
|
290
|
if($search_normal_string != '') {
|
291
|
|
292
|
// Get modules
|
293
|
$table = TABLE_PREFIX."sections";
|
294
|
$get_modules = $database->query("SELECT DISTINCT module FROM $table WHERE module != '' ");
|
295
|
$modules = array();
|
296
|
if($get_modules->numRows() > 0) {
|
297
|
while($module = $get_modules->fetchRow()) {
|
298
|
$modules[] = $module['module'];
|
299
|
}
|
300
|
}
|
301
|
// sort module search-order
|
302
|
// get the modules from $search_module_order first ...
|
303
|
$sorted_modules = array();
|
304
|
$m = count($modules);
|
305
|
$search_modules = explode(',', $search_module_order);
|
306
|
foreach($search_modules AS $item) {
|
307
|
$item = trim($item);
|
308
|
for($i=0; $i < $m; $i++) {
|
309
|
if(isset($modules[$i]) && $modules[$i] == $item) {
|
310
|
$sorted_modules[] = $modules[$i];
|
311
|
unset($modules[$i]);
|
312
|
break;
|
313
|
}
|
314
|
}
|
315
|
}
|
316
|
// ... then add the rest
|
317
|
foreach($modules AS $item) {
|
318
|
$sorted_modules[] = $item;
|
319
|
}
|
320
|
|
321
|
|
322
|
// Use the module's search-extensions.
|
323
|
// This is somewhat slower than the orginial method.
|
324
|
// call $search_funcs['__before'] first
|
325
|
$search_func_vars = array(
|
326
|
'database' => $database, // database-handle
|
327
|
'page_id' => 0,
|
328
|
'section_id' => 0,
|
329
|
'page_title' => '',
|
330
|
'page_menu_title' => '',
|
331
|
'page_description' => '',
|
332
|
'page_keywords' => '',
|
333
|
'page_link' => '',
|
334
|
'page_modified_when' => 0,
|
335
|
'page_modified_by' => 0,
|
336
|
'users' => $users, // array of known user-id/user-name
|
337
|
'search_words' => $search_words, // array of strings, prepared for regex
|
338
|
'search_match' => $match, // match-type
|
339
|
'search_url_array' => $search_url_array, // array of strings from the original search-string. ATTN: strings are not quoted!
|
340
|
'search_entities_array' => $search_entities_array, // entities
|
341
|
'results_loop_string' => $fetch_results_loop['value'],
|
342
|
'default_max_excerpt' => $search_max_excerpt,
|
343
|
'time_limit' => $search_time_limit, // time-limit in secs
|
344
|
'search_path' => $search_path // see docu
|
345
|
);
|
346
|
foreach($search_funcs['__before'] as $func) {
|
347
|
$uf_res = call_user_func($func, $search_func_vars);
|
348
|
}
|
349
|
// now call module-based $search_funcs[]
|
350
|
$seen_pages = array(); // seen pages per module.
|
351
|
$pages_listed = array(); // seen pages.
|
352
|
if($search_max_excerpt!=0) { // skip this search if $search_max_excerpt==0
|
353
|
foreach($sorted_modules AS $module_name) {
|
354
|
$start_time = time(); // get start-time to check time-limit; not very accurate, but ok
|
355
|
$seen_pages[$module_name] = array();
|
356
|
if(!isset($search_funcs[$module_name])) {
|
357
|
continue; // there is no search_func for this module
|
358
|
}
|
359
|
// get each section for $module_name
|
360
|
$table_s = TABLE_PREFIX."sections";
|
361
|
$table_p = TABLE_PREFIX."pages";
|
362
|
$sections_query = $database->query("
|
363
|
SELECT s.section_id, s.page_id, s.module, s.publ_start, s.publ_end,
|
364
|
p.page_title, p.menu_title, p.link, p.description, p.keywords, p.modified_when, p.modified_by,
|
365
|
p.visibility, p.viewing_groups, p.viewing_users
|
366
|
FROM $table_s AS s INNER JOIN $table_p AS p ON s.page_id = p.page_id
|
367
|
WHERE s.module = '$module_name' AND p.visibility NOT IN ('none','deleted') AND p.searching = '1' $search_path_SQL $search_language_SQL
|
368
|
ORDER BY s.page_id, s.position ASC
|
369
|
");
|
370
|
if($sections_query->numRows() > 0) {
|
371
|
while($res = $sections_query->fetchRow()) {
|
372
|
// check if time-limit is exceeded for this module
|
373
|
if($search_time_limit > 0 && (time()-$start_time > $search_time_limit)) {
|
374
|
break;
|
375
|
}
|
376
|
// Only show this section if it is not "out of publication-date"
|
377
|
$now = time();
|
378
|
if( !( $now<$res['publ_end'] && ($now>$res['publ_start'] || $res['publ_start']==0) ||
|
379
|
$now>$res['publ_start'] && $res['publ_end']==0) ) {
|
380
|
continue;
|
381
|
}
|
382
|
$search_func_vars = array(
|
383
|
'database' => $database,
|
384
|
'page_id' => $res['page_id'],
|
385
|
'section_id' => $res['section_id'],
|
386
|
'page_title' => $res['page_title'],
|
387
|
'page_menu_title' => $res['menu_title'],
|
388
|
'page_description' => ($cfg_show_description?$res['description']:""),
|
389
|
'page_keywords' => $res['keywords'],
|
390
|
'page_link' => $res['link'],
|
391
|
'page_modified_when' => $res['modified_when'],
|
392
|
'page_modified_by' => $res['modified_by'],
|
393
|
'users' => $users,
|
394
|
'search_words' => $search_words, // needed for preg_match
|
395
|
'search_match' => $match,
|
396
|
'search_url_array' => $search_url_array, // needed for url-string only
|
397
|
'search_entities_array' => $search_entities_array, // entities
|
398
|
'results_loop_string' => $fetch_results_loop['value'],
|
399
|
'default_max_excerpt' => $search_max_excerpt,
|
400
|
'enable_flush' => $cfg_enable_flush,
|
401
|
'time_limit' => $search_time_limit // time-limit in secs
|
402
|
);
|
403
|
// Only show this page if we are allowed to see it
|
404
|
if($admin->page_is_visible($res) == false) {
|
405
|
if($res['visibility'] == 'registered') { // don't show excerpt
|
406
|
$search_func_vars['default_max_excerpt'] = 0;
|
407
|
$search_func_vars['page_description'] = $TEXT['REGISTERED'];
|
408
|
} else { // private
|
409
|
continue;
|
410
|
}
|
411
|
}
|
412
|
$uf_res = call_user_func($search_funcs[$module_name], $search_func_vars);
|
413
|
if($uf_res) {
|
414
|
$pages_listed[$res['page_id']] = true;
|
415
|
$seen_pages[$module_name][$res['page_id']] = true;
|
416
|
} else {
|
417
|
$seen_pages[$module_name][$res['page_id']] = true;
|
418
|
}
|
419
|
}
|
420
|
}
|
421
|
}
|
422
|
}
|
423
|
// now call $search_funcs['__after']
|
424
|
$search_func_vars = array(
|
425
|
'database' => $database, // database-handle
|
426
|
'page_id' => 0,
|
427
|
'section_id' => 0,
|
428
|
'page_title' => '',
|
429
|
'page_menu_title' => '',
|
430
|
'page_description' => '',
|
431
|
'page_keywords' => '',
|
432
|
'page_link' => '',
|
433
|
'page_modified_when' => 0,
|
434
|
'page_modified_by' => 0,
|
435
|
'users' => $users, // array of known user-id/user-name
|
436
|
'search_words' => $search_words, // array of strings, prepared for regex
|
437
|
'search_match' => $match, // match-type
|
438
|
'search_url_array' => $search_url_array, // array of strings from the original search-string. ATTN: strings are not quoted!
|
439
|
'search_entities_array' => $search_entities_array, // entities
|
440
|
'results_loop_string' => $fetch_results_loop['value'],
|
441
|
'default_max_excerpt' => $search_max_excerpt,
|
442
|
'time_limit' => $search_time_limit, // time-limit in secs
|
443
|
'search_path' => $search_path // see docu
|
444
|
);
|
445
|
foreach($search_funcs['__after'] as $func) {
|
446
|
$uf_res = call_user_func($func, $search_func_vars);
|
447
|
}
|
448
|
|
449
|
|
450
|
// Search page details only, such as description, keywords, etc, but only of unseen pages.
|
451
|
$max_excerpt_num = 0; // we don't want excerpt here
|
452
|
$divider = ".";
|
453
|
$table = TABLE_PREFIX."pages";
|
454
|
$query_pages = $database->query("
|
455
|
SELECT page_id, page_title, menu_title, link, description, keywords, modified_when, modified_by,
|
456
|
visibility, viewing_groups, viewing_users
|
457
|
FROM $table
|
458
|
WHERE visibility NOT IN ('none','deleted') AND searching = '1' $search_path_SQL $search_language_SQL
|
459
|
");
|
460
|
if($query_pages->numRows() > 0) {
|
461
|
while($page = $query_pages->fetchRow()) {
|
462
|
if (isset($pages_listed[$page['page_id']])) {
|
463
|
continue;
|
464
|
}
|
465
|
$func_vars = array(
|
466
|
'database' => $database,
|
467
|
'page_id' => $page['page_id'],
|
468
|
'page_title' => $page['page_title'],
|
469
|
'page_menu_title' => $page['menu_title'],
|
470
|
'page_description' => ($cfg_show_description?$page['description']:""),
|
471
|
'page_keywords' => $page['keywords'],
|
472
|
'page_link' => $page['link'],
|
473
|
'page_modified_when' => $page['modified_when'],
|
474
|
'page_modified_by' => $page['modified_by'],
|
475
|
'users' => $users,
|
476
|
'search_words' => $search_words, // needed for preg_match_all
|
477
|
'search_match' => $match,
|
478
|
'search_url_array' => $search_url_array, // needed for url-string only
|
479
|
'search_entities_array' => $search_entities_array, // entities
|
480
|
'results_loop_string' => $fetch_results_loop['value'],
|
481
|
'default_max_excerpt' => $max_excerpt_num,
|
482
|
'enable_flush' => $cfg_enable_flush
|
483
|
);
|
484
|
// Only show this page if we are allowed to see it
|
485
|
if($admin->page_is_visible($page) == false) {
|
486
|
if($page['visibility'] != 'registered') {
|
487
|
continue;
|
488
|
} else { // page: registered, user: access denied
|
489
|
$func_vars['page_description'] = $TEXT['REGISTERED'];
|
490
|
}
|
491
|
}
|
492
|
if($admin->page_is_active($page) == false) {
|
493
|
continue;
|
494
|
}
|
495
|
$text = $func_vars['page_title'].$divider
|
496
|
.$func_vars['page_menu_title'].$divider
|
497
|
.($cfg_search_description?$func_vars['page_description']:"").$divider
|
498
|
.($cfg_search_keywords?$func_vars['page_keywords']:"").$divider;
|
499
|
$mod_vars = array(
|
500
|
'page_link' => $func_vars['page_link'],
|
501
|
'page_link_target' => "",
|
502
|
'page_title' => $func_vars['page_title'],
|
503
|
'page_description' => $func_vars['page_description'],
|
504
|
'page_modified_when' => $func_vars['page_modified_when'],
|
505
|
'page_modified_by' => $func_vars['page_modified_by'],
|
506
|
'text' => $text,
|
507
|
'max_excerpt_num' => $func_vars['default_max_excerpt']
|
508
|
);
|
509
|
if(print_excerpt2($mod_vars, $func_vars)) {
|
510
|
$pages_listed[$page['page_id']] = true;
|
511
|
}
|
512
|
}
|
513
|
}
|
514
|
|
515
|
// Now use the old method for pages not displayed by the new method above
|
516
|
// in case someone has old modules without search.php.
|
517
|
|
518
|
// Get modules
|
519
|
$table_search = TABLE_PREFIX."search";
|
520
|
$table_sections = TABLE_PREFIX."sections";
|
521
|
$get_modules = $database->query("
|
522
|
SELECT DISTINCT s.value, s.extra
|
523
|
FROM $table_search AS s INNER JOIN $table_sections AS sec
|
524
|
ON s.value = sec.module
|
525
|
WHERE s.name = 'module'
|
526
|
");
|
527
|
$modules = array();
|
528
|
if($get_modules->numRows() > 0) {
|
529
|
while($module = $get_modules->fetchRow()) {
|
530
|
$modules[] = $module; // $modules in an array of arrays
|
531
|
}
|
532
|
}
|
533
|
// sort module search-order
|
534
|
// get the modules from $search_module_order first ...
|
535
|
$sorted_modules = array();
|
536
|
$m = count($modules);
|
537
|
$search_modules = explode(',', $search_module_order);
|
538
|
foreach($search_modules AS $item) {
|
539
|
$item = trim($item);
|
540
|
for($i=0; $i < $m; $i++) {
|
541
|
if(isset($modules[$i]) && $modules[$i]['value'] == $item) {
|
542
|
$sorted_modules[] = $modules[$i];
|
543
|
unset($modules[$i]);
|
544
|
break;
|
545
|
}
|
546
|
}
|
547
|
}
|
548
|
// ... then add the rest
|
549
|
foreach($modules AS $item) {
|
550
|
$sorted_modules[] = $item;
|
551
|
}
|
552
|
|
553
|
if($cfg_enable_old_search) { // this is the old (wb <= 2.6.7) search-function
|
554
|
$search_path_SQL = str_replace(' link ', ' '.TABLE_PREFIX.'pages.link ', $search_path_SQL);
|
555
|
foreach($sorted_modules AS $module) {
|
556
|
if(isset($seen_pages[$module['value']]) && count($seen_pages[$module['value']])>0) // skip modules handled by new search-func
|
557
|
continue;
|
558
|
$query_start = '';
|
559
|
$query_body = '';
|
560
|
$query_end = '';
|
561
|
$prepared_query = '';
|
562
|
// Get module name
|
563
|
$module_name = $module['value'];
|
564
|
if(!isset($seen_pages[$module_name])) {
|
565
|
$seen_pages[$module_name]=array();
|
566
|
}
|
567
|
// skip module 'code' - it doesn't make sense to search in a code section
|
568
|
if($module_name=="code")
|
569
|
continue;
|
570
|
// Get fields to use for title, link, etc.
|
571
|
$fields = unserialize($module['extra']);
|
572
|
// Get query start
|
573
|
$get_query_start = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'query_start' AND extra = '$module_name' LIMIT 1");
|
574
|
if($get_query_start->numRows() > 0) {
|
575
|
// Fetch query start
|
576
|
$fetch_query_start = $get_query_start->fetchRow();
|
577
|
// Prepare query start for execution by replacing {TP} with the TABLE_PREFIX
|
578
|
$query_start = str_replace('[TP]', TABLE_PREFIX, ($fetch_query_start['value']));
|
579
|
}
|
580
|
// Get query end
|
581
|
$get_query_end = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'query_end' AND extra = '$module_name' LIMIT 1");
|
582
|
if($get_query_end->numRows() > 0) {
|
583
|
// Fetch query end
|
584
|
$fetch_query_end = $get_query_end->fetchRow();
|
585
|
// Set query end
|
586
|
$query_end = ($fetch_query_end['value']);
|
587
|
}
|
588
|
// Get query body
|
589
|
$get_query_body = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'query_body' AND extra = '$module_name' LIMIT 1");
|
590
|
if($get_query_body->numRows() > 0) {
|
591
|
// Fetch query body
|
592
|
$fetch_query_body = $get_query_body->fetchRow();
|
593
|
// Prepare query body for execution by replacing {STRING} with the correct one
|
594
|
$query_body = str_replace(array('[TP]','[O]','[W]'), array(TABLE_PREFIX,'LIKE','%'), ($fetch_query_body['value']));
|
595
|
// Loop through query body for each string, then combine with start and end
|
596
|
$prepared_query = $query_start." ( ( ( ";
|
597
|
$count = 0;
|
598
|
foreach($search_normal_array AS $string) {
|
599
|
if($count != 0) {
|
600
|
$prepared_query .= " ) ".$logical_operator." ( ";
|
601
|
}
|
602
|
$prepared_query .= str_replace('[STRING]', $string, $query_body);
|
603
|
$count = $count+1;
|
604
|
}
|
605
|
$count=0;
|
606
|
$prepared_query .= ' ) ) OR ( ( ';
|
607
|
foreach($search_entities_array AS $string) {
|
608
|
if($count != 0) {
|
609
|
$prepared_query .= " ) ".$logical_operator." ( ";
|
610
|
}
|
611
|
$prepared_query .= str_replace('[STRING]', $string, $query_body);
|
612
|
$count = $count+1;
|
613
|
}
|
614
|
$prepared_query .= " ) ) ) ".$query_end;
|
615
|
// Execute query
|
616
|
$page_query = $database->query($prepared_query." ".$search_path_SQL." ".$search_language_SQL_t);
|
617
|
if(!$page_query) continue; // on error, skip the rest of the current loop iteration
|
618
|
// Loop through queried items
|
619
|
if($page_query->numRows() > 0) {
|
620
|
while($page = $page_query->fetchRow()) {
|
621
|
// Only show this page if it hasn't already been listed
|
622
|
if(isset($seen_pages[$module_name][$page['page_id']]) || isset($pages_listed[$page['page_id']])) {
|
623
|
continue;
|
624
|
}
|
625
|
|
626
|
// don't list pages with visibility == none|deleted and check if user is allowed to see the page
|
627
|
$p_table = TABLE_PREFIX."pages";
|
628
|
$viewquery = $database->query("
|
629
|
SELECT visibility, viewing_groups, viewing_users
|
630
|
FROM $p_table
|
631
|
WHERE page_id='{$page['page_id']}'
|
632
|
");
|
633
|
$visibility = 'none'; $viewing_groups="" ; $viewing_users="";
|
634
|
if($viewquery->numRows() > 0) {
|
635
|
if($res = $viewquery->fetchRow()) {
|
636
|
$visibility = $res['visibility'];
|
637
|
$viewing_groups = $res['viewing_groups'];
|
638
|
$viewing_users = $res['viewing_users'];
|
639
|
if($visibility == 'deleted' || $visibility == 'none') {
|
640
|
continue;
|
641
|
}
|
642
|
if($visibility == 'private') {
|
643
|
if($admin->page_is_visible(array(
|
644
|
'page_id'=>$page[$fields['page_id']],
|
645
|
'visibility' =>$visibility,
|
646
|
'viewing_groups'=>$viewing_groups,
|
647
|
'viewing_users'=>$viewing_users
|
648
|
)) == false) {
|
649
|
continue;
|
650
|
}
|
651
|
}
|
652
|
if($admin->page_is_active(array('page_id'=>$page[$fields['page_id']]))==false) {
|
653
|
continue;
|
654
|
}
|
655
|
}
|
656
|
}
|
657
|
|
658
|
// Get page link
|
659
|
$link = page_link($page['link']);
|
660
|
// Add search string for highlighting
|
661
|
if ($match!='exact') {
|
662
|
$sstring = implode(" ", $search_normal_array);
|
663
|
$link = $link."?searchresult=1&sstring=".urlencode($sstring);
|
664
|
} else {
|
665
|
$sstring = str_replace(" ", "_",$search_normal_array[0]);
|
666
|
$link = $link."?searchresult=2&sstring=".urlencode($sstring);
|
667
|
}
|
668
|
// Set vars to be replaced by values
|
669
|
if(!isset($page['description'])) { $page['description'] = ""; }
|
670
|
if(!isset($page['modified_when'])) { $page['modified_when'] = 0; }
|
671
|
if(!isset($page['modified_by'])) { $page['modified_by'] = 0; }
|
672
|
$vars = array('[LINK]', '[TITLE]', '[DESCRIPTION]', '[USERNAME]','[DISPLAY_NAME]','[DATE]','[TIME]','[TEXT_LAST_UPDATED_BY]','[TEXT_ON]','[EXCERPT]');
|
673
|
if($page['modified_when'] > 0) {
|
674
|
$date = gmdate(DATE_FORMAT, $page['modified_when']+TIMEZONE);
|
675
|
$time = gmdate(TIME_FORMAT, $page['modified_when']+TIMEZONE);
|
676
|
} else {
|
677
|
$date = $TEXT['UNKNOWN'].' '.$TEXT['DATE'];
|
678
|
$time = $TEXT['UNKNOWN'].' '.$TEXT['TIME'];
|
679
|
}
|
680
|
$excerpt="";
|
681
|
if($cfg_show_description == 0) {
|
682
|
$page['description'] = "";
|
683
|
}
|
684
|
$values = array($link, $page['page_title'], $page['description'], $users[$page['modified_by']]['username'], $users[$page['modified_by']]['display_name'], $date, $time, $TEXT['LAST_UPDATED_BY'], strtolower($TEXT['ON']), $excerpt);
|
685
|
// Show loop code with vars replaced by values
|
686
|
echo str_replace($vars, $values, ($fetch_results_loop['value']));
|
687
|
// Say that this page has been listed
|
688
|
$seen_pages[$module_name][$page['page_id']] = true;
|
689
|
$pages_listed[$page['page_id']] = true;
|
690
|
}
|
691
|
}
|
692
|
}
|
693
|
}
|
694
|
}
|
695
|
|
696
|
// Say no items found if we should
|
697
|
if(count($pages_listed) == 0) {
|
698
|
echo $search_no_results;
|
699
|
}
|
700
|
} else {
|
701
|
echo $search_no_results;
|
702
|
}
|
703
|
|
704
|
// Show search results_footer
|
705
|
echo $search_results_footer;
|
706
|
// Show search footer
|
707
|
echo $search_footer;
|
708
|
|
709
|
?>
|