Chris@76: <?php
Chris@76: 
Chris@76: /**
Chris@76:  * Simple Machines Forum (SMF)
Chris@76:  *
Chris@76:  * @package SMF
Chris@76:  * @author Simple Machines http://www.simplemachines.org
Chris@76:  * @copyright 2011 Simple Machines
Chris@76:  * @license http://www.simplemachines.org/about/smf/license.php BSD
Chris@76:  *
Chris@76:  * @version 2.0.2
Chris@76:  */
Chris@76: 
Chris@76: if (!defined('SMF'))
Chris@76: 	die('Hacking attempt...');
Chris@76: 
Chris@76: /*	This file contains the functions for displaying and searching in the
Chris@76: 	members list.  It does so with these functions:
Chris@76: 
Chris@76: 	void MemberList()
Chris@76: 		- shows a list of registered members.
Chris@76: 		- if a subaction is not specified, lists all registered members.
Chris@76: 		- allows searching for members with the 'search' sub action.
Chris@76: 		- calls MLAll or MLSearch depending on the sub action.
Chris@76: 		- uses the Memberlist template with the main sub template.
Chris@76: 		- requires the view_mlist permission.
Chris@76: 		- is accessed via ?action=mlist.
Chris@76: 
Chris@76: 	void MLAll()
Chris@76: 		- used to display all members on a page by page basis with sorting.
Chris@76: 		- called from MemberList().
Chris@76: 		- can be passed a sort parameter, to order the display of members.
Chris@76: 		- calls printMemberListRows to retrieve the results of the query.
Chris@76: 
Chris@76: 	void MLSearch()
Chris@76: 		- used to search for members or display search results.
Chris@76: 		- called by MemberList().
Chris@76: 		- if variable 'search' is empty displays search dialog box, using the
Chris@76: 		  search sub template.
Chris@76: 		- calls printMemberListRows to retrieve the results of the query.
Chris@76: 
Chris@76: 	void printMemberListRows(resource request)
Chris@76: 		- retrieves results of the request passed to it
Chris@76: 		- puts results of request into the context for the sub template.
Chris@76: */
Chris@76: 
Chris@76: // Show a listing of the registered members.
Chris@76: function Memberlist()
Chris@76: {
Chris@76: 	global $scripturl, $txt, $modSettings, $context, $settings, $modSettings;
Chris@76: 
Chris@76: 	// Make sure they can view the memberlist.
Chris@76: 	isAllowedTo('view_mlist');
Chris@76: 
Chris@76: 	loadTemplate('Memberlist');
Chris@76: 
Chris@76: 	$context['listing_by'] = !empty($_GET['sa']) ? $_GET['sa'] : 'all';
Chris@76: 
Chris@76: 	// $subActions array format:
Chris@76: 	// 'subaction' => array('label', 'function', 'is_selected')
Chris@76: 	$subActions = array(
Chris@76: 		'all' => array($txt['view_all_members'], 'MLAll', $context['listing_by'] == 'all'),
Chris@76: 		'search' => array($txt['mlist_search'], 'MLSearch', $context['listing_by'] == 'search'),
Chris@76: 	);
Chris@76: 
Chris@76: 	// Set up the sort links.
Chris@76: 	$context['sort_links'] = array();
Chris@76: 	foreach ($subActions as $act => $text)
Chris@76: 		$context['sort_links'][] = array(
Chris@76: 			'label' => $text[0],
Chris@76: 			'action' => $act,
Chris@76: 			'selected' => $text[2],
Chris@76: 		);
Chris@76: 
Chris@76: 	$context['num_members'] = $modSettings['totalMembers'];
Chris@76: 
Chris@76: 	// Set up the columns...
Chris@76: 	$context['columns'] = array(
Chris@76: 		'is_online' => array(
Chris@76: 			'label' => $txt['status'],
Chris@76: 			'width' => '60',
Chris@76: 			'class' => 'first_th',
Chris@76: 		),
Chris@76: 		'real_name' => array(
Chris@76: 			'label' => $txt['username']
Chris@76: 		),
Chris@76: 		'email_address' => array(
Chris@76: 			'label' => $txt['email'],
Chris@76: 			'width' => '25'
Chris@76: 		),
Chris@76: 		'website_url' => array(
Chris@76: 			'label' => $txt['website'],
Chris@76: 			'width' => '70',
Chris@76: 			'link_with' => 'website',
Chris@76: 		),
Chris@76: 		'icq' => array(
Chris@76: 			'label' => $txt['icq'],
Chris@76: 			'width' => '30'
Chris@76: 		),
Chris@76: 		'aim' => array(
Chris@76: 			'label' => $txt['aim'],
Chris@76: 			'width' => '30'
Chris@76: 		),
Chris@76: 		'yim' => array(
Chris@76: 			'label' => $txt['yim'],
Chris@76: 			'width' => '30'
Chris@76: 		),
Chris@76: 		'msn' => array(
Chris@76: 			'label' => $txt['msn'],
Chris@76: 			'width' => '30'
Chris@76: 		),
Chris@76: 		'id_group' => array(
Chris@76: 			'label' => $txt['position']
Chris@76: 		),
Chris@76: 		'registered' => array(
Chris@76: 			'label' => $txt['date_registered']
Chris@76: 		),
Chris@76: 		'posts' => array(
Chris@76: 			'label' => $txt['posts'],
Chris@76: 			'width' => '115',
Chris@76: 			'colspan' => '2',
Chris@76: 			'default_sort_rev' => true,
Chris@76: 		)
Chris@76: 	);
Chris@76: 
Chris@76: 	$context['colspan'] = 0;
Chris@76: 	$context['disabled_fields'] = isset($modSettings['disabled_profile_fields']) ? array_flip(explode(',', $modSettings['disabled_profile_fields'])) : array();
Chris@76: 	foreach ($context['columns'] as $key => $column)
Chris@76: 	{
Chris@76: 		if (isset($context['disabled_fields'][$key]) || (isset($column['link_with']) && isset($context['disabled_fields'][$column['link_with']])))
Chris@76: 		{
Chris@76: 			unset($context['columns'][$key]);
Chris@76: 			continue;
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['colspan'] += isset($column['colspan']) ? $column['colspan'] : 1;
Chris@76: 	}
Chris@76: 
Chris@76: 	// Aesthetic stuff.
Chris@76: 	end($context['columns']);
Chris@76: 	$context['columns'][key($context['columns'])]['class'] = 'last_th';
Chris@76: 
Chris@76: 	$context['linktree'][] = array(
Chris@76: 		'url' => $scripturl . '?action=mlist',
Chris@76: 		'name' => $txt['members_list']
Chris@76: 	);
Chris@76: 
Chris@76: 	$context['can_send_pm'] = allowedTo('pm_send');
Chris@76: 
Chris@76: 	// Jump to the sub action.
Chris@76: 	if (isset($subActions[$context['listing_by']]))
Chris@76: 		$subActions[$context['listing_by']][1]();
Chris@76: 	else
Chris@76: 		$subActions['all'][1]();
Chris@76: }
Chris@76: 
Chris@76: // List all members, page by page.
Chris@76: function MLAll()
Chris@76: {
Chris@76: 	global $txt, $scripturl, $user_info;
Chris@76: 	global $modSettings, $context, $smcFunc;
Chris@76: 
Chris@76: 	// The chunk size for the cached index.
Chris@76: 	$cache_step_size = 500;
Chris@76: 
Chris@76: 	// Only use caching if:
Chris@76: 	// 1. there are at least 2k members,
Chris@76: 	// 2. the default sorting method (real_name) is being used,
Chris@76: 	// 3. the page shown is high enough to make a DB filesort unprofitable.
Chris@76: 	$use_cache = $modSettings['totalMembers'] > 2000 && (!isset($_REQUEST['sort']) || $_REQUEST['sort'] === 'real_name') && isset($_REQUEST['start']) && $_REQUEST['start'] > $cache_step_size;
Chris@76: 
Chris@76: 	if ($use_cache)
Chris@76: 	{
Chris@76: 		// Maybe there's something cached already.
Chris@76: 		if (!empty($modSettings['memberlist_cache']))
Chris@76: 			$memberlist_cache = @unserialize($modSettings['memberlist_cache']);
Chris@76: 
Chris@76: 		// The chunk size for the cached index.
Chris@76: 		$cache_step_size = 500;
Chris@76: 
Chris@76: 		// Only update the cache if something changed or no cache existed yet.
Chris@76: 		if (empty($memberlist_cache) || empty($modSettings['memberlist_updated']) || $memberlist_cache['last_update'] < $modSettings['memberlist_updated'])
Chris@76: 		{
Chris@76: 			$request = $smcFunc['db_query']('', '
Chris@76: 				SELECT real_name
Chris@76: 				FROM {db_prefix}members
Chris@76: 				WHERE is_activated = {int:is_activated}
Chris@76: 				ORDER BY real_name',
Chris@76: 				array(
Chris@76: 					'is_activated' => 1,
Chris@76: 				)
Chris@76: 			);
Chris@76: 
Chris@76: 			$memberlist_cache = array(
Chris@76: 				'last_update' => time(),
Chris@76: 				'num_members' => $smcFunc['db_num_rows']($request),
Chris@76: 				'index' => array(),
Chris@76: 			);
Chris@76: 
Chris@76: 			for ($i = 0, $n = $smcFunc['db_num_rows']($request); $i < $n; $i += $cache_step_size)
Chris@76: 			{
Chris@76: 				$smcFunc['db_data_seek']($request, $i);
Chris@76: 				list($memberlist_cache['index'][$i]) = $smcFunc['db_fetch_row']($request);
Chris@76: 			}
Chris@76: 			$smcFunc['db_data_seek']($request, $memberlist_cache['num_members'] - 1);
Chris@76: 			list ($memberlist_cache['index'][$i]) = $smcFunc['db_fetch_row']($request);
Chris@76: 			$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 			// Now we've got the cache...store it.
Chris@76: 			updateSettings(array('memberlist_cache' => serialize($memberlist_cache)));
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['num_members'] = $memberlist_cache['num_members'];
Chris@76: 	}
Chris@76: 
Chris@76: 	// Without cache we need an extra query to get the amount of members.
Chris@76: 	else
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT COUNT(*)
Chris@76: 			FROM {db_prefix}members
Chris@76: 			WHERE is_activated = {int:is_activated}',
Chris@76: 			array(
Chris@76: 				'is_activated' => 1,
Chris@76: 			)
Chris@76: 		);
Chris@76: 		list ($context['num_members']) = $smcFunc['db_fetch_row']($request);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Set defaults for sort (real_name) and start. (0)
Chris@76: 	if (!isset($_REQUEST['sort']) || !isset($context['columns'][$_REQUEST['sort']]))
Chris@76: 		$_REQUEST['sort'] = 'real_name';
Chris@76: 
Chris@76: 	if (!is_numeric($_REQUEST['start']))
Chris@76: 	{
Chris@76: 		if (preg_match('~^[^\'\\\\/]~' . ($context['utf8'] ? 'u' : ''), $smcFunc['strtolower']($_REQUEST['start']), $match) === 0)
Chris@76: 			fatal_error('Hacker?', false);
Chris@76: 
Chris@76: 		$_REQUEST['start'] = $match[0];
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('substring', '
Chris@76: 			SELECT COUNT(*)
Chris@76: 			FROM {db_prefix}members
Chris@76: 			WHERE LOWER(SUBSTRING(real_name, 1, 1)) < {string:first_letter}
Chris@76: 				AND is_activated = {int:is_activated}',
Chris@76: 			array(
Chris@76: 				'is_activated' => 1,
Chris@76: 				'first_letter' => $_REQUEST['start'],
Chris@76: 			)
Chris@76: 		);
Chris@76: 		list ($_REQUEST['start']) = $smcFunc['db_fetch_row']($request);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['letter_links'] = '';
Chris@76: 	for ($i = 97; $i < 123; $i++)
Chris@76: 		$context['letter_links'] .= '<a href="' . $scripturl . '?action=mlist;sa=all;start=' . chr($i) . '#letter' . chr($i) . '">' . strtoupper(chr($i)) . '</a> ';
Chris@76: 
Chris@76: 	// Sort out the column information.
Chris@76: 	foreach ($context['columns'] as $col => $column_details)
Chris@76: 	{
Chris@76: 		$context['columns'][$col]['href'] = $scripturl . '?action=mlist;sort=' . $col . ';start=0';
Chris@76: 
Chris@76: 		if ((!isset($_REQUEST['desc']) && $col == $_REQUEST['sort']) || ($col != $_REQUEST['sort'] && !empty($column_details['default_sort_rev'])))
Chris@76: 			$context['columns'][$col]['href'] .= ';desc';
Chris@76: 
Chris@76: 		$context['columns'][$col]['link'] = '<a href="' . $context['columns'][$col]['href'] . '" rel="nofollow">' . $context['columns'][$col]['label'] . '</a>';
Chris@76: 		$context['columns'][$col]['selected'] = $_REQUEST['sort'] == $col;
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['sort_by'] = $_REQUEST['sort'];
Chris@76: 	$context['sort_direction'] = !isset($_REQUEST['desc']) ? 'up' : 'down';
Chris@76: 
Chris@76: 	// Construct the page index.
Chris@76: 	$context['page_index'] = constructPageIndex($scripturl . '?action=mlist;sort=' . $_REQUEST['sort'] . (isset($_REQUEST['desc']) ? ';desc' : ''), $_REQUEST['start'], $context['num_members'], $modSettings['defaultMaxMembers']);
Chris@76: 
Chris@76: 	// Send the data to the template.
Chris@76: 	$context['start'] = $_REQUEST['start'] + 1;
Chris@76: 	$context['end'] = min($_REQUEST['start'] + $modSettings['defaultMaxMembers'], $context['num_members']);
Chris@76: 
Chris@76: 	$context['can_moderate_forum'] = allowedTo('moderate_forum');
Chris@76: 	$context['page_title'] = sprintf($txt['viewing_members'], $context['start'], $context['end']);
Chris@76: 	$context['linktree'][] = array(
Chris@76: 		'url' => $scripturl . '?action=mlist;sort=' . $_REQUEST['sort'] . ';start=' . $_REQUEST['start'],
Chris@76: 		'name' => &$context['page_title'],
Chris@76: 		'extra_after' => ' (' . sprintf($txt['of_total_members'], $context['num_members']) . ')'
Chris@76: 	);
Chris@76: 
Chris@76: 	// List out the different sorting methods...
Chris@76: 	$sort_methods = array(
Chris@76: 		'is_online' => array(
Chris@76: 			'down' => allowedTo('moderate_forum') ? 'IFNULL(lo.log_time, 1) ASC, real_name ASC' : 'CASE WHEN mem.show_online THEN IFNULL(lo.log_time, 1) ELSE 1 END ASC, real_name ASC',
Chris@76: 			'up' => allowedTo('moderate_forum') ? 'IFNULL(lo.log_time, 1) DESC, real_name DESC' : 'CASE WHEN mem.show_online THEN IFNULL(lo.log_time, 1) ELSE 1 END DESC, real_name DESC'
Chris@76: 		),
Chris@76: 		'real_name' => array(
Chris@76: 			'down' => 'mem.real_name DESC',
Chris@76: 			'up' => 'mem.real_name ASC'
Chris@76: 		),
Chris@76: 		'email_address' => array(
Chris@76: 			'down' => allowedTo('moderate_forum') ? 'mem.email_address DESC' : 'mem.hide_email DESC, mem.email_address DESC',
Chris@76: 			'up' => allowedTo('moderate_forum') ? 'mem.email_address ASC' : 'mem.hide_email ASC, mem.email_address ASC'
Chris@76: 		),
Chris@76: 		'website_url' => array(
Chris@76: 			'down' => 'LENGTH(mem.website_url) > 0 ASC, IFNULL(mem.website_url, 1=1) DESC, mem.website_url DESC',
Chris@76: 			'up' => 'LENGTH(mem.website_url) > 0 DESC, IFNULL(mem.website_url, 1=1) ASC, mem.website_url ASC'
Chris@76: 		),
Chris@76: 		'icq' => array(
Chris@76: 			'down' => 'LENGTH(mem.icq) > 0 ASC, mem.icq = 0 DESC, mem.icq DESC',
Chris@76: 			'up' => 'LENGTH(mem.icq) > 0 DESC, mem.icq = 0 ASC, mem.icq ASC'
Chris@76: 		),
Chris@76: 		'aim' => array(
Chris@76: 			'down' => 'LENGTH(mem.aim) > 0 ASC, IFNULL(mem.aim, 1=1) DESC, mem.aim DESC',
Chris@76: 			'up' => 'LENGTH(mem.aim) > 0 DESC, IFNULL(mem.aim, 1=1) ASC, mem.aim ASC'
Chris@76: 		),
Chris@76: 		'yim' => array(
Chris@76: 			'down' => 'LENGTH(mem.yim) > 0 ASC, IFNULL(mem.yim, 1=1) DESC, mem.yim DESC',
Chris@76: 			'up' => 'LENGTH(mem.yim) > 0 DESC, IFNULL(mem.yim, 1=1) ASC, mem.yim ASC'
Chris@76: 		),
Chris@76: 		'msn' => array(
Chris@76: 			'down' => 'LENGTH(mem.msn) > 0 ASC, IFNULL(mem.msn, 1=1) DESC, mem.msn DESC',
Chris@76: 			'up' => 'LENGTH(mem.msn) > 0 DESC, IFNULL(mem.msn, 1=1) ASC, mem.msn ASC'
Chris@76: 		),
Chris@76: 		'registered' => array(
Chris@76: 			'down' => 'mem.date_registered DESC',
Chris@76: 			'up' => 'mem.date_registered ASC'
Chris@76: 		),
Chris@76: 		'id_group' => array(
Chris@76: 			'down' => 'IFNULL(mg.group_name, 1=1) DESC, mg.group_name DESC',
Chris@76: 			'up' => 'IFNULL(mg.group_name, 1=1) ASC, mg.group_name ASC'
Chris@76: 		),
Chris@76: 		'posts' => array(
Chris@76: 			'down' => 'mem.posts DESC',
Chris@76: 			'up' => 'mem.posts ASC'
Chris@76: 		)
Chris@76: 	);
Chris@76: 
Chris@76: 	$limit = $_REQUEST['start'];
Chris@76: 	$query_parameters = array(
Chris@76: 		'regular_id_group' => 0,
Chris@76: 		'is_activated' => 1,
Chris@76: 		'sort' => $sort_methods[$_REQUEST['sort']][$context['sort_direction']],
Chris@76: 	);
Chris@76: 
Chris@76: 	// Using cache allows to narrow down the list to be retrieved.
Chris@76: 	if ($use_cache && $_REQUEST['sort'] === 'real_name' && !isset($_REQUEST['desc']))
Chris@76: 	{
Chris@76: 		$first_offset = $_REQUEST['start'] - ($_REQUEST['start'] % $cache_step_size);
Chris@76: 		$second_offset = ceil(($_REQUEST['start'] + $modSettings['defaultMaxMembers']) / $cache_step_size) * $cache_step_size;
Chris@76: 
Chris@76: 		$where = 'mem.real_name BETWEEN {string:real_name_low} AND {string:real_name_high}';
Chris@76: 		$query_parameters['real_name_low'] = $memberlist_cache['index'][$first_offset];
Chris@76: 		$query_parameters['real_name_high'] = $memberlist_cache['index'][$second_offset];
Chris@76: 		$limit -= $first_offset;
Chris@76: 	}
Chris@76: 
Chris@76: 	// Reverse sorting is a bit more complicated...
Chris@76: 	elseif ($use_cache && $_REQUEST['sort'] === 'real_name')
Chris@76: 	{
Chris@76: 		$first_offset = floor(($memberlist_cache['num_members'] - $modSettings['defaultMaxMembers'] - $_REQUEST['start']) / $cache_step_size) * $cache_step_size;
Chris@76: 		if ($first_offset < 0)
Chris@76: 			$first_offset = 0;
Chris@76: 		$second_offset = ceil(($memberlist_cache['num_members'] - $_REQUEST['start']) / $cache_step_size) * $cache_step_size;
Chris@76: 
Chris@76: 		$where = 'mem.real_name BETWEEN {string:real_name_low} AND {string:real_name_high}';
Chris@76: 		$query_parameters['real_name_low'] = $memberlist_cache['index'][$first_offset];
Chris@76: 		$query_parameters['real_name_high'] = $memberlist_cache['index'][$second_offset];
Chris@76: 		$limit = $second_offset - ($memberlist_cache['num_members'] - $_REQUEST['start']) - ($second_offset > $memberlist_cache['num_members'] ? $cache_step_size - ($memberlist_cache['num_members'] % $cache_step_size) : 0);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Select the members from the database.
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT mem.id_member
Chris@76: 		FROM {db_prefix}members AS mem' . ($_REQUEST['sort'] === 'is_online' ? '
Chris@76: 			LEFT JOIN {db_prefix}log_online AS lo ON (lo.id_member = mem.id_member)' : '') . ($_REQUEST['sort'] === 'id_group' ? '
Chris@76: 			LEFT JOIN {db_prefix}membergroups AS mg ON (mg.id_group = CASE WHEN mem.id_group = {int:regular_id_group} THEN mem.id_post_group ELSE mem.id_group END)' : '') . '
Chris@76: 		WHERE mem.is_activated = {int:is_activated}' . (empty($where) ? '' : '
Chris@76: 			AND ' . $where) . '
Chris@76: 		ORDER BY {raw:sort}
Chris@76: 		LIMIT ' . $limit . ', ' . $modSettings['defaultMaxMembers'],
Chris@76: 		$query_parameters
Chris@76: 	);
Chris@76: 	printMemberListRows($request);
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	// Add anchors at the start of each letter.
Chris@76: 	if ($_REQUEST['sort'] == 'real_name')
Chris@76: 	{
Chris@76: 		$last_letter = '';
Chris@76: 		foreach ($context['members'] as $i => $dummy)
Chris@76: 		{
Chris@76: 			$this_letter = $smcFunc['strtolower']($smcFunc['substr']($context['members'][$i]['name'], 0, 1));
Chris@76: 
Chris@76: 			if ($this_letter != $last_letter && preg_match('~[a-z]~', $this_letter) === 1)
Chris@76: 			{
Chris@76: 				$context['members'][$i]['sort_letter'] = htmlspecialchars($this_letter);
Chris@76: 				$last_letter = $this_letter;
Chris@76: 			}
Chris@76: 		}
Chris@76: 	}
Chris@76: }
Chris@76: 
Chris@76: // Search for members...
Chris@76: function MLSearch()
Chris@76: {
Chris@76: 	global $txt, $scripturl, $context, $user_info, $modSettings, $smcFunc;
Chris@76: 
Chris@76: 	$context['page_title'] = $txt['mlist_search'];
Chris@76: 	$context['can_moderate_forum'] = allowedTo('moderate_forum');
Chris@76: 
Chris@76: 	// Can they search custom fields?
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT col_name, field_name, field_desc
Chris@76: 		FROM {db_prefix}custom_fields
Chris@76: 		WHERE active = {int:active}
Chris@76: 			' . (allowedTo('admin_forum') ? '' : ' AND private < {int:private_level}') . '
Chris@76: 			AND can_search = {int:can_search}
Chris@76: 			AND (field_type = {string:field_type_text} OR field_type = {string:field_type_textarea})',
Chris@76: 		array(
Chris@76: 			'active' => 1,
Chris@76: 			'can_search' => 1,
Chris@76: 			'private_level' => 2,
Chris@76: 			'field_type_text' => 'text',
Chris@76: 			'field_type_textarea' => 'textarea',
Chris@76: 		)
Chris@76: 	);
Chris@76: 	$context['custom_search_fields'] = array();
Chris@76: 	while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		$context['custom_search_fields'][$row['col_name']] = array(
Chris@76: 			'colname' => $row['col_name'],
Chris@76: 			'name' => $row['field_name'],
Chris@76: 			'desc' => $row['field_desc'],
Chris@76: 		);
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	// They're searching..
Chris@76: 	if (isset($_REQUEST['search']) && isset($_REQUEST['fields']))
Chris@76: 	{
Chris@76: 		$_POST['search'] = trim(isset($_GET['search']) ? $_GET['search'] : $_POST['search']);
Chris@76: 		$_POST['fields'] = isset($_GET['fields']) ? explode(',', $_GET['fields']) : $_POST['fields'];
Chris@76: 
Chris@76: 		$context['old_search'] = $_REQUEST['search'];
Chris@76: 		$context['old_search_value'] = urlencode($_REQUEST['search']);
Chris@76: 
Chris@76: 		// No fields?  Use default...
Chris@76: 		if (empty($_POST['fields']))
Chris@76: 			$_POST['fields'] = array('name');
Chris@76: 
Chris@76: 		$query_parameters = array(
Chris@76: 			'regular_id_group' => 0,
Chris@76: 			'is_activated' => 1,
Chris@76: 			'blank_string' => '',
Chris@76: 			'search' => '%' . strtr($smcFunc['htmlspecialchars']($_POST['search'], ENT_QUOTES), array('_' => '\\_', '%' => '\\%', '*' => '%')) . '%',
Chris@76: 		);
Chris@76: 
Chris@76: 		// Search for a name?
Chris@76: 		if (in_array('name', $_POST['fields']))
Chris@76: 			$fields = array('member_name', 'real_name');
Chris@76: 		else
Chris@76: 			$fields = array();
Chris@76: 		// Search for messengers...
Chris@76: 		if (in_array('messenger', $_POST['fields']) && (!$user_info['is_guest'] || empty($modSettings['guest_hideContacts'])))
Chris@76: 			$fields += array(3 => 'msn', 'aim', 'icq', 'yim');
Chris@76: 		// Search for websites.
Chris@76: 		if (in_array('website', $_POST['fields']))
Chris@76: 			$fields += array(7 => 'website_title', 'website_url');
Chris@76: 		// Search for groups.
Chris@76: 		if (in_array('group', $_POST['fields']))
Chris@76: 			$fields += array(9 => 'IFNULL(group_name, {string:blank_string})');
Chris@76: 		// Search for an email address?
Chris@76: 		if (in_array('email', $_POST['fields']))
Chris@76: 		{
Chris@76: 			$fields += array(2 => allowedTo('moderate_forum') ? 'email_address' : '(hide_email = 0 AND email_address');
Chris@76: 			$condition = allowedTo('moderate_forum') ? '' : ')';
Chris@76: 		}
Chris@76: 		else
Chris@76: 			$condition = '';
Chris@76: 
Chris@76: 		$customJoin = array();
Chris@76: 		$customCount = 10;
Chris@76: 		// Any custom fields to search for - these being tricky?
Chris@76: 		foreach ($_POST['fields'] as $field)
Chris@76: 		{
Chris@76: 			$curField = substr($field, 5);
Chris@76: 			if (substr($field, 0, 5) == 'cust_' && isset($context['custom_search_fields'][$curField]))
Chris@76: 			{
Chris@76: 				$customJoin[] = 'LEFT JOIN {db_prefix}themes AS t' . $curField . ' ON (t' . $curField . '.variable = {string:t' . $curField . '} AND t' . $curField . '.id_theme = 1 AND t' . $curField . '.id_member = mem.id_member)';
Chris@76: 				$query_parameters['t' . $curField] = $curField;
Chris@76: 				$fields += array($customCount++ => 'IFNULL(t' . $curField . '.value, {string:blank_string})');
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		$query = $_POST['search'] == '' ? '= {string:blank_string}' : 'LIKE {string:search}';
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT COUNT(*)
Chris@76: 			FROM {db_prefix}members AS mem
Chris@76: 				LEFT JOIN {db_prefix}membergroups AS mg ON (mg.id_group = CASE WHEN mem.id_group = {int:regular_id_group} THEN mem.id_post_group ELSE mem.id_group END)' .
Chris@76: 				(empty($customJoin) ? '' : implode('
Chris@76: 				', $customJoin)) . '
Chris@76: 			WHERE (' . implode( ' ' . $query . ' OR ', $fields) . ' ' . $query . $condition . ')
Chris@76: 				AND mem.is_activated = {int:is_activated}',
Chris@76: 			$query_parameters
Chris@76: 		);
Chris@76: 		list ($numResults) = $smcFunc['db_fetch_row']($request);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		$context['page_index'] = constructPageIndex($scripturl . '?action=mlist;sa=search;search=' . $_POST['search'] . ';fields=' . implode(',', $_POST['fields']), $_REQUEST['start'], $numResults, $modSettings['defaultMaxMembers']);
Chris@76: 
Chris@76: 		// Find the members from the database.
Chris@76: 		// !!!SLOW This query is slow.
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT mem.id_member
Chris@76: 			FROM {db_prefix}members AS mem
Chris@76: 				LEFT JOIN {db_prefix}log_online AS lo ON (lo.id_member = mem.id_member)
Chris@76: 				LEFT JOIN {db_prefix}membergroups AS mg ON (mg.id_group = CASE WHEN mem.id_group = {int:regular_id_group} THEN mem.id_post_group ELSE mem.id_group END)' .
Chris@76: 				(empty($customJoin) ? '' : implode('
Chris@76: 				', $customJoin)) . '
Chris@76: 			WHERE (' . implode( ' ' . $query . ' OR ', $fields) . ' ' . $query . $condition . ')
Chris@76: 				AND mem.is_activated = {int:is_activated}
Chris@76: 			LIMIT ' . $_REQUEST['start'] . ', ' . $modSettings['defaultMaxMembers'],
Chris@76: 			$query_parameters
Chris@76: 		);
Chris@76: 		printMemberListRows($request);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 	else
Chris@76: 	{
Chris@76: 		// These are all the possible fields.
Chris@76: 		$context['search_fields'] = array(
Chris@76: 			'name' => $txt['mlist_search_name'],
Chris@76: 			'email' => $txt['mlist_search_email'],
Chris@76: 			'messenger' => $txt['mlist_search_messenger'],
Chris@76: 			'website' => $txt['mlist_search_website'],
Chris@76: 			'group' => $txt['mlist_search_group'],
Chris@76: 		);
Chris@76: 
Chris@76: 		foreach ($context['custom_search_fields'] as $field)
Chris@76: 			$context['search_fields']['cust_' . $field['colname']] = sprintf($txt['mlist_search_by'], $field['name']);
Chris@76: 
Chris@76: 		// What do we search for by default?
Chris@76: 		$context['search_defaults'] = array('name', 'email');
Chris@76: 
Chris@76: 		$context['sub_template'] = 'search';
Chris@76: 		$context['old_search'] = isset($_GET['search']) ? $_GET['search'] : (isset($_POST['search']) ? htmlspecialchars($_POST['search']) : '');
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['linktree'][] = array(
Chris@76: 		'url' => $scripturl . '?action=mlist;sa=search',
Chris@76: 		'name' => &$context['page_title']
Chris@76: 	);
Chris@76: }
Chris@76: 
Chris@76: function printMemberListRows($request)
Chris@76: {
Chris@76: 	global $scripturl, $txt, $user_info, $modSettings;
Chris@76: 	global $context, $settings, $memberContext, $smcFunc;
Chris@76: 
Chris@76: 	// Get the most posts.
Chris@76: 	$result = $smcFunc['db_query']('', '
Chris@76: 		SELECT MAX(posts)
Chris@76: 		FROM {db_prefix}members',
Chris@76: 		array(
Chris@76: 		)
Chris@76: 	);
Chris@76: 	list ($MOST_POSTS) = $smcFunc['db_fetch_row']($result);
Chris@76: 	$smcFunc['db_free_result']($result);
Chris@76: 
Chris@76: 	// Avoid division by zero...
Chris@76: 	if ($MOST_POSTS == 0)
Chris@76: 		$MOST_POSTS = 1;
Chris@76: 
Chris@76: 	$members = array();
Chris@76: 	while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		$members[] = $row['id_member'];
Chris@76: 
Chris@76: 	// Load all the members for display.
Chris@76: 	loadMemberData($members);
Chris@76: 
Chris@76: 	$context['members'] = array();
Chris@76: 	foreach ($members as $member)
Chris@76: 	{
Chris@76: 		if (!loadMemberContext($member))
Chris@76: 			continue;
Chris@76: 
Chris@76: 		$context['members'][$member] = $memberContext[$member];
Chris@76: 		$context['members'][$member]['post_percent'] = round(($context['members'][$member]['real_posts'] * 100) / $MOST_POSTS);
Chris@76: 		$context['members'][$member]['registered_date'] = strftime('%Y-%m-%d', $context['members'][$member]['registered_timestamp']);
Chris@76: 	}
Chris@76: }
Chris@76: 
Chris@76: ?>