<?
//TODO: Clean up this fucking mess
/*
Forums search result page
*/

list($Page, $Limit) = Format::page_limit(POSTS_PER_PAGE);

if (isset($_GET['type']) && $_GET['type'] === 'body') {
  $Type = 'body';
} else {
  $Type = 'title';
}

// What are we looking for? Let's make sure it isn't dangerous.
if (isset($_GET['search'])) {
  $Search = trim($_GET['search']);
} else {
  $Search = '';
}

$ThreadAfterDate = db_string($_GET['thread_created_after']);
$ThreadBeforeDate = db_string($_GET['thread_created_before']);

if ((!empty($ThreadAfterDate) && !is_valid_date($ThreadAfterDate)) || (!empty($ThreadBeforeDate) && !is_valid_date($ThreadBeforeDate))) {
  error("Incorrect topic created date");
}

$PostAfterDate = db_string($_GET['post_created_after']);
$PostBeforeDate = db_string($_GET['post_created_before']);

if ((!empty($PostAfterDate) && !is_valid_date($PostAfterDate)) || (!empty($PostBeforeDate) && !is_valid_date($PostBeforeDate))) {
  error("Incorrect post created date");
}

// Searching for posts by a specific user
if (!empty($_GET['user'])) {
  $User = trim($_GET['user']);
  $DB->query("
    SELECT ID
    FROM users_main
    WHERE Username = '".db_string($User)."'");
  list($AuthorID) = $DB->next_record();
  if ($AuthorID === null) {
    $AuthorID = 0;
    //this will cause the search to return 0 results.
    //workaround in line 276 to display that the username was wrong.
  }
} else {
  $User = '';
}

// Are we looking in individual forums?
if (isset($_GET['forums']) && is_array($_GET['forums'])) {
  $ForumArray = [];
  foreach ($_GET['forums'] as $Forum) {
    if (is_number($Forum)) {
      $ForumArray[] = $Forum;
    }
  }
  if (count($ForumArray) > 0) {
    $SearchForums = implode(', ', $ForumArray);
  }
}

// Searching for posts in a specific thread
if (!empty($_GET['threadid']) && is_number($_GET['threadid'])) {
  $ThreadID = $_GET['threadid'];
  $Type = 'body';
  $SQL = "
    SELECT
      Title
    FROM forums_topics AS t
      JOIN forums AS f ON f.ID = t.ForumID
    WHERE t.ID = $ThreadID
      AND " . Forums::user_forums_sql();
  $DB->query($SQL);
  if (list($Title) = $DB->next_record()) {
    $Title = " &gt; <a href=\"forums.php?action=viewthread&amp;threadid=$ThreadID\">$Title</a>";
  } else {
    error(404);
  }
} else {
  $ThreadID = '';
}

// Let's hope we got some results - start printing out the content.
View::show_header('Forums &gt; Search', 'bbcode,forum_search');
?>
<div class="thin">
  <div class="header">
    <h2><a href="forums.php">Forums</a> &gt; Search<?=$Title?></h2>
  </div>
  <form class="search_form" name="forums" action="" method="get">
    <input type="hidden" name="action" value="search" />
    <table cellpadding="6" cellspacing="1" border="0" class="layout border" width="100%">
      <tr>
        <td><strong>Search for:</strong></td>
        <td>
          <input type="search" name="search" size="70" value="<?=display_str($Search)?>" />
        </td>
      </tr>
      <tr>
        <td><strong>Posted by:</strong></td>
        <td>
          <input type="search" name="user" placeholder="Username" size="70" value="<?=display_str($User)?>" />
        </td>
      </tr>
      <tr>
        <td><strong>Topic created:</strong></td>
        <td>
          After:
          <input type="text" name="thread_created_after" id="thread_created_after" placeholder="YYYY-MM-DD" pattern="[1-2][0-9]{3}-[0-9]{2}-[0-9]{2}" value="<?=$ThreadAfterDate?>" />
          Before:
          <input type="text" name="thread_created_before" id="thread_created_before" placeholder="YYYY-MM-DD" pattern="[1-2][0-9]{3}-[0-9]{2}-[0-9]{2}" value="<?=$ThreadBeforeDate?>" />
        </td>
      </tr>
<?
if (empty($ThreadID)) {
?>
      <tr>
        <td><strong>Search in:</strong></td>
        <td>
          <input type="radio" name="type" id="type_title" value="title"<? if ($Type == 'title') { echo ' checked="checked"'; } ?> />
          <label for="type_title">Titles</label>
          <input type="radio" name="type" id="type_body" value="body"<? if ($Type == 'body') { echo ' checked="checked"'; } ?> />
          <label for="type_body">Post bodies</label>
        </td>
      </tr>
      <tr id="post_created_row" <? if ($Type == 'title') { echo "class='hidden'"; } ?>>
        <td><strong>Post created:</strong></td>
        <td>
          After:
          <input type="text" class="date_picker" name="post_created_after" id="post_created_after" value="<?=$PostAfterDate?>" />
          Before:
          <input type="text" class="date_picker" name="post_created_before" id="post_created_before" value="<?=$PostBeforeDate?>" />
        </td>
      </tr>
      <tr>
        <td><strong>Forums:</strong></td>
        <td>
    <table id="forum_search_cat_list" class="cat_list layout">


<?
  // List of forums
  $Open = false;
  $LastCategoryID = -1;
  $Columns = 0;
  $i = 0;
  foreach ($Forums as $Forum) {
    if (!Forums::check_forumperm($Forum['ID'])) {
      continue;
    }

    $Columns++;

    if ($Forum['CategoryID'] != $LastCategoryID) {
      $LastCategoryID = $Forum['CategoryID'];
      if ($Open) {
        if ($Columns % 5) { ?>
        <td colspan="<?=(5 - ($Columns % 5))?>"></td>
<?
        }

?>
      </tr>
<?
      }
      $Columns = 0;
      $Open = true;
      $i++;
?>
      <tr>
        <td colspan="5" class="forum_cat">
          <strong><?=$ForumCats[$Forum['CategoryID']]?></strong>
          <a href="#" class="brackets forum_category" id="forum_category_<?=$i?>">Check all</a>
        </td>
      </tr>
      <tr>
<?    } elseif ($Columns % 5 == 0) { ?>
      </tr>
      <tr>
<?    } ?>
        <td>
          <input type="checkbox" name="forums[]" value="<?=$Forum['ID']?>" data-category="forum_category_<?=$i?>" id="forum_<?=$Forum['ID']?>"<? if (isset($_GET['forums']) && in_array($Forum['ID'], $_GET['forums'])) { echo ' checked="checked"';} ?> />
          <label for="forum_<?=$Forum['ID']?>"><?=htmlspecialchars($Forum['Name'])?></label>
        </td>
<?  }
  if ($Columns % 5) { ?>
        <td colspan="<?=(5 - ($Columns % 5))?>"></td>
<?  } ?>
      </tr>
    </table>
<? } else { ?>
            <input type="hidden" name="threadid" value="<?=$ThreadID?>" />
<? } ?>
          </td>
        </tr>
        <tr>
          <td colspan="2" class="center">
            <input type="submit" value="Search" />
          </td>
        </tr>
      </table>
    </form>
  <div class="linkbox">
<?

// Break search string down into individual words
$Words = explode(' ', db_string($Search));

if ($Type == 'body') {

  $SQL = "
    SELECT
      SQL_CALC_FOUND_ROWS
      t.ID,
      ".(!empty($ThreadID) ? "SUBSTRING_INDEX(p.Body, ' ', 40)" : 't.Title').",
      t.ForumID,
      f.Name,
      p.AddedTime,
      p.ID,
      p.Body,
      t.CreatedTime
    FROM forums_posts AS p
      JOIN forums_topics AS t ON t.ID = p.TopicID
      JOIN forums AS f ON f.ID = t.ForumID
    WHERE " . Forums::user_forums_sql() . ' AND ';

  //In tests, this is significantly faster than LOCATE
  $SQL .= "p.Body LIKE '%";
  $SQL .= implode("%' AND p.Body LIKE '%", $Words);
  $SQL .= "%' ";

  //$SQL .= "LOCATE('";
  //$SQL .= implode("', p.Body) AND LOCATE('", $Words);
  //$SQL .= "', p.Body) ";

  if (isset($SearchForums)) {
    $SQL .= " AND f.ID IN ($SearchForums)";
  }
  if (isset($AuthorID)) {
    $SQL .= " AND p.AuthorID = '$AuthorID' ";
  }
  if (!empty($ThreadID)) {
    $SQL .= " AND t.ID = '$ThreadID' ";
  }
  if (!empty($ThreadAfterDate)) {
    $SQL .= " AND t.CreatedTime >= '$ThreadAfterDate'";
  }
  if (!empty($ThreadBeforeDate)) {
    $SQL .= " AND t.CreatedTime <= '$ThreadBeforeDate'";
  }
  if (!empty($PostAfterDate)) {
    $SQL .= " AND p.AddedTime >= '$PostAfterDate'";
  }
  if (!empty($PostBeforeDate)) {
    $SQL .= " AND p.AddedTime <= '$PostBeforeDate'";
  }

  $SQL .= "
    ORDER BY p.AddedTime DESC
    LIMIT $Limit";

} else {
  $SQL = "
    SELECT
      SQL_CALC_FOUND_ROWS
      t.ID,
      t.Title,
      t.ForumID,
      f.Name,
      t.LastPostTime,
      '',
      '',
      t.CreatedTime
    FROM forums_topics AS t
      JOIN forums AS f ON f.ID = t.ForumID
    WHERE " . Forums::user_forums_sql() . ' AND ';
  $SQL .= "t.Title LIKE '%";
  $SQL .= implode("%' AND t.Title LIKE '%", $Words);
  $SQL .= "%' ";
  if (isset($SearchForums)) {
    $SQL .= " AND f.ID IN ($SearchForums)";
  }
  if (isset($AuthorID)) {
    $SQL .= " AND t.AuthorID = '$AuthorID' ";
  }
  if (!empty($ThreadAfterDate)) {
    $SQL .= " AND t.CreatedTime >= '$ThreadAfterDate'";
  }
  if (!empty($ThreadBeforeDate)) {
    $SQL .= " AND t.CreatedTime <= '$ThreadBeforeDate'";
  }
  $SQL .= "
    ORDER BY t.LastPostTime DESC
    LIMIT $Limit";
}

// Perform the query
$Records = $DB->query($SQL);
$DB->query('SELECT FOUND_ROWS()');
list($Results) = $DB->next_record();
$DB->set_query_id($Records);

$Pages = Format::get_pages($Page, $Results, POSTS_PER_PAGE, 9);
echo $Pages;
?>
  </div>
  <table cellpadding="6" cellspacing="1" border="0" class="forum_list border" width="100%">
  <tr class="colhead">
    <td>Forum</td>
    <td><?=((!empty($ThreadID)) ? 'Post begins' : 'Topic')?></td>
    <td>Topic creation time</td>
    <td>Last post time</td>
  </tr>
<? if (!$DB->has_results()) { ?>
    <tr><td colspan="4">Nothing found<?=((isset($AuthorID) && $AuthorID == 0) ? ' (unknown username)' : '')?>!</td></tr>
<? }

while (list($ID, $Title, $ForumID, $ForumName, $LastTime, $PostID, $Body, $ThreadCreatedTime) = $DB->next_record()) {
  // Print results
?>
    <tr class="row">
      <td>
        <a href="forums.php?action=viewforum&amp;forumid=<?=$ForumID?>"><?=$ForumName?></a>
      </td>
      <td>
<?  if (empty($ThreadID)) { ?>
        <a href="forums.php?action=viewthread&amp;threadid=<?=$ID?>"><?=Format::cut_string($Title, 80); ?></a>
<?  } else { ?>
        <?=Format::cut_string($Title, 80); ?>
<?
  }
  if ($Type == 'body') { ?>
        <a data-toggle-target="#post_<?=$PostID?>_text">(Show)</a> <span class="float_right tooltip last_read" title="Jump to post"><a href="forums.php?action=viewthread&amp;threadid=<?=$ID?><? if (!empty($PostID)) { echo "&amp;postid=$PostID#post$PostID"; } ?>"></a></span>
<?  } ?>
      </td>
      <td>
        <?=time_diff($ThreadCreatedTime)?>
      </td>
      <td>
        <?=time_diff($LastTime)?>
      </td>
    </tr>
<?  if ($Type == 'body') { ?>
    <tr class="row hidden" id="post_<?=$PostID?>_text">
      <td colspan="4"><?=Text::full_format($Body)?></td>
    </tr>
<?  }
}
?>
  </table>

  <div class="linkbox">
    <?=$Pages?>
  </div>
</div>
<? View::show_footer(); ?>
