messagesearch.php

   1 <?php include "config.php";
   2 function auth($userid, $password)
   3 {
   4         $sql = "SELECT username FROM users WHERE username='$userid' AND userpass='$password'";
   5         $result = mysql_query($sql);
   6         if (!mysql_num_rows($result))
   7                 return 0;
   8         else
   9         {
  10                 $query_data = mysql_fetch_row($result);
  11                 return $query_data[0];
  12         }
  13 }
  14 function gettopic($topicid)
  15 {
  16         $sql = "SELECT * FROM topics WHERE topicid='$topicid'";
  17         $result = mysql_query($sql);
  18         $myrow = mysql_fetch_array($result);
  19         return $myrow["topicname"];
  20 }
  21 function getboard($boardid)
  22 {
  23         $sql = "SELECT * FROM boards WHERE boardid='$boardid'";
  24         $result = mysql_query($sql);
  25         $myrow = mysql_fetch_array($result);
  26         return $myrow["boardlevel"];
  27 }
  28 function userlevel($boardid)
  29 {
  30         $sql = "SELECT * FROM users WHERE username='$boardid'";
  31         $result = mysql_query($sql);
  32         $myrow = mysql_fetch_array($result);
  33         return $myrow["level"];
  34 }
  35 $username = auth($uname, $pword);
  36 if (!$username)
  37 {
  38         echo "You are not <a href=login.php>Logged In</a>.";
  39         exit;
  40 }
  41 if (!$submit)
  42 {
  43         echo '<form method=post action=messagesearch.php>
  44 <input type=text name=query><br>
  45 <br><input type=submit name=submit value="Search">
  46 </form>';
  47         exit;
  48 }
  49 if (!$query)
  50 {
  51         echo 'You must enter what you are searching for..<br><br>
  52 <form method=post action=messagesearch.php>
  53 <input type=text name=query><br>
  54 <br><input type=submit name=submit value="Search">
  55 </form>';
  56         exit;
  57 }
  58 $sql = "SELECT * FROM messages WHERE messbody LIKE '%$query%' ORDER BY messageid ASC LIMIT 0,50";
  59 $result = mysql_query($sql);
  60 echo "<table width=100%><tr><td><b>Topic Title</b></td><td><b>Posted By</b></td><td><b>Posted At</b></td></tr>";
  61 while ($myrow = mysql_fetch_array($result))
  62 {
  63         $topicname = gettopic($myrow["topic"]);
  64         $userlevel = userlevel($uname);
  65         $boardlevel = getboard($myrow["mesboard"]);
  66         if ($userlevel >= $boardlevel)
  67         {
  68                 echo "<tr><td><a href=messagelist.php?board=".$myrow["mesboard"]."&topic=".$myrow["topic"].">".$topicname."</a></td><td>".$myrow["messby"]."</td><td>".$myrow["postdate"]."</td></tr>";
  69         }
  70         echo "</table>";
  71 }
  72 ?>