<?php

/***********************************************************************

  Copyright (C) 2002-2005  Rickard Andersson (rickard@punbb.org)

  This file is part of PunBB.

  PunBB is free software; you can redistribute it and/or modify it

  under the terms of the GNU General Public License as published

  by the Free Software Foundation; either version 2 of the License,

  or (at your option) any later version.

  PunBB is distributed in the hope that it will be useful, but

  WITHOUT ANY WARRANTY; without even the implied warranty of

  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License

  along with this program; if not, write to the Free Software

  Foundation, Inc., 59 Temple Place, Suite 330, Boston,

  MA  02111-1307  USA

************************************************************************/

// The contents of this file are very much inspired by the file search.php

// from the phpBB Group forum software phpBB2 (http://www.phpbb.com).

// Load the search.php language file

require PUN_ROOT.'lang/'.$pun_user['language'].'/search.php';

if ($pun_user['g_read_board'] == '0')

	message($lang_common['No view']);

else if ($pun_user['g_search'] == '0')

	message($lang_search['No search permission']);

// Detect two byte character sets

$multibyte = (isset($lang_common['lang_multibyte']) && $lang_common['lang_multibyte']) ? true : false;

// Figure out what to do :-)

if (isset($_GET['action']) || isset($_GET['search_id']))

{

	$action = (isset($_GET['action'])) ? $_GET['action'] : null;

	$forum = (isset($_GET['forum'])) ? intval($_GET['forum']) : -1;

	$sort_dir = (isset($_GET['sort_dir'])) ? (($_GET['sort_dir'] == 'DESC') ? 'DESC' : 'ASC') : 'DESC';

	if (isset($search_id)) unset($search_id);

	// If a search_id was supplied

	if (isset($_GET['search_id']))

	{

		$search_id = intval($_GET['search_id']);

		if ($search_id < 1)

			message($lang_common['Bad request']);

	}

	// If it's a regular search (keywords and/or author)

	else if ($action == 'search')

	{

		$keywords = (isset($_GET['keywords'])) ? strtolower(trim($_GET['keywords'])) : null;

		$author = (isset($_GET['author'])) ? strtolower(trim($_GET['author'])) : null;

		if (preg_match('#^[\*%]+$#', $keywords) || strlen(str_replace(array('*', '%'), '', $keywords)) < 3)

			$keywords = '';

		if (preg_match('#^[\*%]+$#', $author) || strlen(str_replace(array('*', '%'), '', $author)) < 3)

			$author = '';

		if (!$keywords && !$author)

			message($lang_search['No terms']);

		if ($author)

			$author = str_replace('*', '%', $author);

		$show_as = (isset($_GET['show_as'])) ? $_GET['show_as'] : 'posts';

		$sort_by = (isset($_GET['sort_by'])) ? intval($_GET['sort_by']) : null;

		$search_in = (!isset($_GET['search_in']) || $_GET['search_in'] == 'all') ? 0 : (($_GET['search_in'] == 'message') ? 1 : -1);

	}

	// If it's a user search (by id)

	else if ($action == 'show_user')

	{

		$user_id = intval($_GET['user_id']);

		if ($user_id < 2)

			message($lang_common['Bad request']);

	}

	else

	{

		if ($action != 'show_new' && $action != 'show_24h' && $action != 'show_unanswered' && $action != 'show_subscriptions')

			message($lang_common['Bad request']);

	}

	// If a valid search_id was supplied we attempt to fetch the search results from the db

	if (isset($search_id))

	{

		$ident = ($pun_user['is_guest']) ? get_remote_address() : $pun_user['username'];

		{

			$temp = unserialize($row['search_data']);

			$search_results = $temp['search_results'];

			$num_hits = $temp['num_hits'];

			$sort_by = $temp['sort_by'];

			$sort_dir = $temp['sort_dir'];

			$show_as = $temp['show_as'];

			unset($temp);

		}

		else

			message($lang_search['No hits']);

	}

	else

	{

		$keyword_results = $author_results = array();

		// Search a specific forum?

		$forum_sql = ($forum != -1 || ($forum == -1 && $pun_config['o_search_all_forums'] == '0')) ? ' AND t.forum_id = '.$forum : '';

		if (!empty($author) || !empty($keywords))

		{

			// If it's a search for keywords

			if ($keywords)

			{

				$stopwords = (array)@file(PUN_ROOT.'lang/'.$pun_user['language'].'/stopwords.txt');

				$stopwords = array_map('trim', $stopwords);

				// Are we searching for multibyte charset text?

				if ($multibyte)

				{

					// Strip out excessive whitespace

					$keywords = trim(preg_replace('#\s+#', ' ', $keywords));

					$keywords_array = explode(' ', $keywords);

				}

				else

				{

					// Filter out non-alphabetical chars

					$noise_replace = array(' ', ' ', ' ', ' ', ' ', ' ', ' ', '',  '',   ' ', ' ', ' ', ' ', '',  ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '' ,  ' ', ' ', ' ', ' ',  ' ', ' ', ' ');

					$keywords = str_replace($noise_match, $noise_replace, $keywords);

					// Strip out excessive whitespace

					$keywords = trim(preg_replace('#\s+#', ' ', $keywords));

					// Fill an array with all the words

					$keywords_array = explode(' ', $keywords);

					if (empty($keywords_array))

						message($lang_search['No hits']);

					while (list($i, $word) = @each($keywords_array))

					{

						$num_chars = pun_strlen($word);

						if ($num_chars < 3 || $num_chars > 20 || in_array($word, $stopwords))

							unset($keywords_array[$i]);

					}

					// Should we search in message body or topic subject specifically?

					$search_in_cond = ($search_in) ? (($search_in > 0) ? ' AND m.subject_match = 0' : ' AND m.subject_match = 1') : '';

				}

				$word_count = 0;

				$match_type = 'and';

				$result_list = array();

				@reset($keywords_array);

				while (list(, $cur_word) = @each($keywords_array))

				{

					switch ($cur_word)

					{

						case 'and':

						case 'or':

						case 'not':

							$match_type = $cur_word;

							break;

						default:

						{

							// Are we searching for multibyte charset text?

							if ($multibyte)

							{

								$cur_word_like = ($db_type == 'pgsql') ? 'ILIKE \''.$cur_word.'\'' : 'LIKE \''.$cur_word.'\'';

								if ($search_in > 0)

								else if ($search_in < 0)

								else

							}

							else

							{

								$cur_word = str_replace('*', '%', $cur_word);

							}

							$row = array();

							{

								$row[$temp[0]] = 1;

								if (!$word_count)

									$result_list[$temp[0]] = 1;

								else if ($match_type == 'or')

									$result_list[$temp[0]] = 1;

								else if ($match_type == 'not')

									$result_list[$temp[0]] = 0;

							}

							if ($match_type == 'and' && $word_count)

							{

								@reset($result_list);

								while (list($post_id,) = @each($result_list))

								{

									if (!isset($row[$post_id]))

										$result_list[$post_id] = 0;

								}

							}

							++$word_count;

							break;

						}

					}

				}

				@reset($result_list);

				while (list($post_id, $matches) = @each($result_list))

				{

					if ($matches)

						$keyword_results[] = $post_id;

				}

				unset($result_list);

			}

			// If it's a search for author name (and that author name isn't Guest)

			if ($author && strcasecmp($author, 'Guest') && strcasecmp($author, $lang_common['Guest']))

			{

				switch ($db_type)

				{

					case 'pgsql':

						break;

					default:

						break;

				}

				{

					$user_ids = '';

						$user_ids .= (($user_ids != '') ? ',' : '').$row[0];

					$search_ids = array();

						$author_results[] = $row[0];

				}

			}

			if ($author && $keywords)

			{

				// If we searched for both keywords and author name we want the intersection between the results

				$search_ids = array_intersect($keyword_results, $author_results);

				unset($keyword_results, $author_results);

			}

			else if ($keywords)

				$search_ids = $keyword_results;

			else

				$search_ids = $author_results;

			$num_hits = count($search_ids);

			if (!$num_hits)

				message($lang_search['No hits']);

			if ($show_as == 'topics')

			{

				$search_ids = array();

					$search_ids[] = $row[0];

				$num_hits = count($search_ids);

			}

			else

			{

				$search_ids = array();

					$search_ids[] = $row[0];

				$num_hits = count($search_ids);

			}

		}

		else if ($action == 'show_new' || $action == 'show_24h' || $action == 'show_user' || $action == 'show_subscriptions' || $action == 'show_unanswered')

		{

			// If it's a search for new posts

			if ($action == 'show_new')

			{

				if ($pun_user['is_guest'])

					message($lang_common['No permission']);

				if (!$num_hits)

					message($lang_search['No new posts']);

			}

			// If it's a search for todays posts

			else if ($action == 'show_24h')

			{

				if (!$num_hits)

					message($lang_search['No recent posts']);

			}

			// If it's a search for posts by a specific user ID

			else if ($action == 'show_user')

			{

				if (!$num_hits)

					message($lang_search['No user posts']);

			}

			// If it's a search for subscribed topics

			else if ($action == 'show_subscriptions')

			{

				if ($pun_user['is_guest'])

					message($lang_common['Bad request']);

				if (!$num_hits)

					message($lang_search['No subscriptions']);

			}

			// If it's a search for unanswered posts

			else

			{

				if (!$num_hits)

					message($lang_search['No unanswered']);

			}

			// We want to sort things after last post

			$sort_by = 4;

			$search_ids = array();

				$search_ids[] = $row[0];

			$show_as = 'topics';

		}

		else

			message($lang_common['Bad request']);

		// Prune "old" search results

		$old_searches = array();

		{

		}

		// Final search results

		$search_results = implode(',', $search_ids);

		// Fill an array with our results and search properties

		$temp['search_results'] = $search_results;

		$temp['num_hits'] = $num_hits;

		$temp['sort_by'] = $sort_by;

		$temp['sort_dir'] = $sort_dir;

		$temp['show_as'] = $show_as;

		$temp = serialize($temp);

		$search_id = mt_rand(1, 2147483647);

		$ident = ($pun_user['is_guest']) ? get_remote_address() : $pun_user['username'];

		if ($action != 'show_new' && $action != 'show_24h')

		{

			// Redirect the user to the cached result page

			header('Location: search.php?search_id='.$search_id);

			exit;

		}

	}

	// Fetch results to display

	if ($search_results != '')

	{

		switch ($sort_by)

		{

			case 1:

				$sort_by_sql = ($show_as == 'topics') ? 't.poster' : 'p.poster';

				break;

			case 2:

				$sort_by_sql = 't.subject';

				break;

			case 3:

				$sort_by_sql = 't.forum_id';

				break;

			case 4:

				$sort_by_sql = 't.last_post';

				break;

			default:

				$sort_by_sql = ($show_as == 'topics') ? 't.posted' : 'p.posted';

				break;

		}

		if ($show_as == 'posts')

		{

			$substr_sql = ($db_type != 'sqlite') ? 'SUBSTRING' : 'SUBSTR';

		}

		else

		// Determine the topic or post offset (based on $_GET['p'])

		$per_page = ($show_as == 'posts') ? $pun_user['disp_posts'] : $pun_user['disp_topics'];

		$num_pages = ceil($num_hits / $per_page);

		$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : $_GET['p'];

		$start_from = $per_page * ($p - 1);

		// Generate paging links

		$sql .= ' '.$sort_dir.' LIMIT '.$start_from.', '.$per_page;

		$search_set = array();

			$search_set[] = $row;

		$page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$lang_search['Search results'];

		require PUN_ROOT.'header.php';

?>

<div class="linkst">

	<div class="inbox">

		<p class="pagelink"><?php echo $paging_links ?></p>

	</div>

</div>

<?php

		//Set background switching on for show as posts

		$bg_switch = true;

		if ($show_as == 'topics')

		{

?>

<div id="vf" class="blocktable">

	<h2><span><?php echo $lang_search['Search results']; ?></span></h2>

	<div class="box">

		<div class="inbox">

			<table cellspacing="0">

			<thead>

				<tr>

					<th class="tcl" scope="col"><?php echo $lang_common['Topic']; ?></th>

					<th class="tc2" scope="col"><?php echo $lang_common['Forum'] ?></th>

					<th class="tc3" scope="col"><?php echo $lang_common['Replies'] ?></th>

					<th class="tcr" scope="col"><?php echo $lang_common['Last post'] ?></th>