<?php

/*

##########################################################################

#                                                                        #

#           Version 4       /                        /   /               #

#          -----------__---/__---__------__----__---/---/-               #

#           | /| /  /___) /   ) (_ `   /   ) /___) /   /                 #

#          _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___               #

#                       Free Content / Management System                 #

#                                   /                                    #

#                                                                        #

#                                                                        #

#   Copyright 2005-2010 by webspell.org                                  #

#                                                                        #

#   visit webSPELL.org, webspell.info to get webSPELL for free           #

#   - Script runs under the GNU GENERAL PUBLIC LICENSE                   #

#   - It's NOT allowed to remove this copyright-tag                      #

#   -- http://www.fsf.org/licensing/licenses/gpl.html                    #

#                                                                        #

#   Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at),   #

#   Far Development by Development Team - webspell.org                   #

#                                                                        #

#   visit webspell.org                                                   #

#                                                                        #

##########################################################################

*/

include("_mysql.php");

include("_settings.php");

include("_functions.php");

$_language->read_module('asearch');

//allowed tables for search

$allowed_tables=array("user");

$allowed_columns=array("nickname");

$allowed_identifiers=array("userID");

$allowed_searchtemps=array("search_user","search_user_shoutbox");

$table=$_GET['table'];

if(!in_array($table, $allowed_tables)) die($_language->module['invalid_request']);

$column=$_GET['column'];

if(!in_array($column, $allowed_columns)) die($_language->module['invalid_request']);

$identifier=$_GET['identifier'];

if(!in_array($identifier, $allowed_identifiers)) die($_language->module['invalid_request']);

$searchtemp=$_GET['searchtemp'];

if(!in_array($searchtemp, $allowed_searchtemps)) die($_language->module['invalid_request']);

$search=$_GET['search'];

$searchtype=$_GET['searchtype'];

if(get_magic_quotes_gpc()){

     $search=stripslashes($search);

}

if($searchtype=='ac_usersearch'){

     $search = mysql_real_escape_string(htmlspecialchars(rawurldecode($search)));

}

else{

     $search = mysql_real_escape_string(rawurldecode($search));

}

$div=$_GET['div'];

if(isset($_GET['exact'])){

     if($_GET['exact']=='true'){

          $exact=true;

     }

     else{

          $exact=false;

     }

}

else{

     $exact=false;

}

if($searchtype=='ac_usersearch'){

     if($exact){

          $db_results = safe_query("SELECT * FROM ".PREFIX.$table." WHERE ".$column."='".$search."'");

     }

     else{

          $db_results = safe_query("SELECT * FROM ".PREFIX.$table." WHERE ".$column." LIKE '%".$search."%'");

     }

}

else{

  if($exact){

          $db_results = safe_query("SELECT * FROM ".PREFIX.$table." WHERE ".$column."='".$search."'");

     }

     else{

          $db_results = safe_query("SELECT * FROM ".PREFIX.$table." WHERE ".$column." LIKE '%".$search."%'");

     }

}

$any=mysql_num_rows($db_results);

if ($any==0) {

     echo $_language->module['no_result'];

}

elseif ($any <= 100) {

     while ($row = mysql_fetch_array($db_results)) {

          $searchresult=stripslashes($row[$column]);

          $resultidentifier=$row[$identifier];

          eval ("\$resultemp = \"".gettemplate($searchtemp)."\";");

          echo $resultemp;

     }

}

else {

     echo $_language->module['to_much_results'];

}

?>

<script language="JavaScript" type="text/javascript">

function chkFormularShoutBox() {

     if(document.getElementById('shoutbox_name').value == ""){

          alert('%enter_name%');

          document.getElementById('shoutbox_name').focus();

          return false;

     }

     if(document.getElementById('shoutbox_message').value == "" || document.getElementById('shoutbox_message').value == "Message"){

          alert('%enter_message%');

          document.getElementById('shoutbox_message').focus();

          return false;

     }

     return true;

}

-->

</script>

<script type="text/javascript">

// onkeydown von input Shoutbox

function keyli(key) {

var up = 38;

var down = 40;

var enter = 13;

var esc = 27;

var input = document.getElementById('shoutbox_message'); //Input Shoutbox ID

var list = document.getElementById('searchresult').getElementsByTagName('li'); //liste mit ID vom <ul> tag austauschen oder vergeben

if(document.getElementById('selected')) {

var selected = document.getElementById('selected');

} else {

var selected = false;

}

var arrayKey = 0;

switch(key) {

case up:

if(selected && key == up) {

while(list.length > arrayKey) {

if(list[arrayKey] == selected){

if(arrayKey == 0) {

selected.removeAttribute('id', 0);

input.value = "";

} else {

selected.removeAttribute('id', 0);

list[arrayKey-1].setAttribute('id', 'selected', 0);

}

break;

}

arrayKey++;

}

} else {

list[list.length-1].setAttribute('id', 'selected', 0);

}

case down:

if(selected && key == down) {

while(list.length > arrayKey) {

if(list[arrayKey] == selected){

selected.removeAttribute('id', 0);

if(list[arrayKey+1]) {

list[arrayKey+1].setAttribute('id', 'selected', 0);

}

break;

}

arrayKey++;

}

} else if(key == down && selected == false) {

list[arrayKey].setAttribute('id', 'selected', 0);

}

case enter:

if(selected && key == enter) {

input.value = "@"+selected.innerHTML+": ";

document.getElementById('searchresult').style.display='none';

}

case esc:

if(selected && key == esc) {

selected.removeAttribute('id', 0);

}

}

}

</script>

<style type="text/css">

#autocomplete {

border: 1px solid #aaa;

background-color: #aaa;

width: 180px;

padding: 0;

}

ul {

padding: 0;

margin: 0;

}

li {

list-style: none;

background-color: #444;

border-top: 1px solid #666;

border-bottom: 1px solid #222;

color: #fff;

padding: 5px;

}

li:hover {

background-color: #666;

}

#selected {

background-color: #666;

}

</style>

<form name="shout" method="post" action="index.php?site=shoutbox_content&amp;action=save" onsubmit="return chkFormularShoutBox()">

<script language="JavaScript" type="text/javascript">

<!--

fetch('shoutbox_content.php', 'shoutbox', 'replace', 'time', $refresh);

-->

</script>

<div id="shoutbox" style="width: 100%;overflow: hidden; text-align: left;"></div>

<input type="text" id="shoutbox_name" name="name" size="24" maxlength="255" style="margin: 2px;" $name_settings /><br />

<input id="exact" type="hidden" name="exact" value="0" />

<input id="shoutbox_message" name="message" type="text" value="Message" onkeydown="keyli(event.keyCode)" onfocus='if(this.value == "Message"){this.value=""}' onkeyup='if(event.keyCode != 9 && event.keyCode != 38 && event.keyCode != 40 && event.keyCode != 13) {if(this.value.charAt(0)=="@" &amp; this.value.length &lt; "7") { overlay(this, "searchresult");search("user","nickname","userID",encodeURIComponent(this.value.substring(1)),"search_user_shoutbox","searchresult","replace", document.getElementById("exact").checked, "ac_usersearch")} else document.getElementById("searchresult").style.display="none";}' size="24" /><br />

<ul id="searchresult" style="position:absolute;display:none;border:1px solid black;background-color:#DDDDDD; padding:2px; text-align:left"></ul>

$captcha_form

&#8226; <a href="javascript:if(chkFormularShoutBox())+document.shout.submit();">%shout%</a>&nbsp;&nbsp;&nbsp;&#8226; <a href="index.php?site=shoutbox_content&amp;action=showall">%all_messages%</a>

</form>

<li onclick="document.getElementById('shoutbox_message').value='@$searchresult: '; document.getElementById('shoutbox_message').focus(); document.getElementById('searchresult').style.display='none';">$searchresult</li>

<input id="exact" type="hidden" name="exact" value="0" />

<input type="text" id="shoutbox_message" name="sbmessage" onkeyup=\'if(this.value.charAt(0)=="@") { overlay(this, "searchresult");search("user","nickname","userID",encodeURIComponent(this.value.substring(1)),"search_user_shoutbox","searchresult","replace", document.getElementById("exact").checked, "ac_usersearch")} else document.getElementById("searchresult").style.display="none";\' /><input type="submit" name="shout" value="SENDEN">

<br><div id="searchresult" style="position:absolute;display:none;border:1px solid black;background-color:#DDDDDD; padding:2px;"></div>

<a href="javascript:;" onclick="document.getElementById('shoutbox_message').value='@$searchresult ';document.getElementById('searchresult').style.display='none';">&nbsp;$searchresult&nbsp;</a><br />

$allowed_searchtemps=array("search_user","search_user_shoutbox");