search.php

一个页面界面的邮件程序

<?php
require_once("../inc/constants.inc.php");
require_once("../inc/properties.inc.php");
require_once("../inc/tools.inc.php");
require_once("../inc/db.inc.php");

header('Content-type: text/xml;');

if (!isset($_SESSION['user'])) {
	die();
}

$search = false;
$terms = $termsFullText = null;

if (isset($_POST['terms'])) {
	$search = true;
	$termsFullText = prepSqlValue($_POST['terms']);
	$terms = prepSqlValue("%". $_POST['terms'] ."%");
} else if (isset($_GET['terms'])) {
	$search = true;
	$termsFullText = prepSqlValue($_GET['terms']);
	$terms = prepSqlValue("%". $_GET['terms'] ."%");
}

$dom = new DOMDocument('1.0', ENCODING);
$root = $dom->appendChild(new DOMElement('response'));

$sql = 	" SELECT DISTINCT P.id as personID, P.*, UP.*, G.id as groupID, G.* " .
		" FROM `user` U, `user_person` UP, `group` G, `person` P LEFT JOIN `address` A ON P.id=A.idperson LEFT JOIN `contact` C ON P.id=C.idperson " .
		" WHERE UP.idperson = P.id " .
		"	AND UP.iduser = U.id " .
		"	AND P.idgroup = G.id " .
		"	AND G.iduser = U.id " .
		"	AND U.id='" . $_SESSION['user'] . "'";

if ($search) {
	$sql .= " AND (MATCH (P.lastname,P.firstname,P.note) AGAINST ($termsFullText IN BOOLEAN MODE)" .
			" OR MATCH (A.street,A.street_next,A.zipcode,A.town,A.country,A.note) AGAINST ($termsFullText IN BOOLEAN MODE)" .
			" OR MATCH (C.value,C.note) AGAINST ($termsFullText IN BOOLEAN MODE)" .
			" OR C.value like $terms)";
}

$sql .= " ORDER BY P.lastname, P.firstname";

$result = mysql_query($sql);

$root->setAttribute("terms", prepShowValue($terms));
$root->setAttribute("sql", prepShowValue($sql));

if ($result && mysql_num_rows($result) > 0) {
	while ($line = mysql_fetch_assoc($result)) {
		addPersonNodeToXml($root, $line);
	}
}

echo $dom->saveXML();
?>