search.php

本代码是为客户联系管理而做的系统

############################################# ADVANCED SEARCH ############################################# 

if ($_REQUEST['do'] == "advanced" OR $_REQUEST['do'] == "doadvanced") {	

	$table[] = table_midheader('User Properties');

	// id range
	$bit = form_input('greater', $_REQUEST['greater'], 3) . " < <b>ID</b> > " . form_input('lessthan', $_REQUEST['lessthan'], 3);
	$table[] = array(table_thelp('<b>User ID Range</b>', 'Users', 'Search: User ID Range'), $bit);

	// user owner
	$bit = form_input('username', $_REQUEST['username'], 30);
	$table[] = array(table_thelp('<b>Username</b>', 'Users', 'Search: Username'), $bit);
	$bit = form_input('email', $_REQUEST['email'], 30);
	$table[] = array(table_thelp('<b>E-mail</b>', 'Users', 'Search: User E-mail'), $bit);

	// sort dates for display
	if ($_REQUEST['ydate_registered_start']) {
		$date = @strtotime("$_REQUEST[ydate_registered_start]-$_REQUEST[mdate_registered_start]-$_REQUEST[ddate_registered_start]");
	} else {
		$date = NULL;
	}

	if ($_REQUEST['ydate_registered_end']) {
		$date2 = @strtotime("$_REQUEST[ydate_registered_end]-$_REQUEST[mdate_registered_end]-$_REQUEST[ddate_registered_end]");
	} else {
		$date2 = NULL;
	}

	// date of registration
	$bit =  'From ' . form_date('date_registered_start', '', $date, '', 1) . "<a onClick=\"datePop('searchform', 'date_registered_start')\">".html_image('tech/bul102.gif')."</a> To " . form_date('date_registered_end', '', $date2, '', 1) . "<a onClick=\"datePop('searchform', 'date_registered_end')\">".html_image('tech/bul102.gif')."</a>";
	$table[] = array(table_thelp('<b>Date Registered</b>', 'Users', 'Search: Date Registered'), $bit);
	unset($date, $date2);


	$db->query("SELECT * FROM user_def WHERE tech_viewable");
	if ($db->num_rows()) {
		$table[] = table_midheader('Custom User Fields');
		while ($result = $db->row_array()) {
			$display_name = unserialize($result[display_name]);
			$display_name = $display_name[$settings[default_language]];
			$array_fields[$result[name]] = $display_name;
	
			$bit = field_def($result, 'redo', $_REQUEST[custom_fields][$result[name]], $_REQUEST[custom_fields]["extra" . $result[name]], '', 'custom_fields', 1);
			$table[] = array("<b>$display_name</b>", $bit);
		}
	}

	$array_fields = array_merge(array('id' => 'id', 'email' => 'email', 'username' => 'username'), $array_fields);

	// some standard fields for 1st time user
	if (!is_array($_REQUEST[submit_fields])) {
		$_REQUEST[submit_fields] = array('username', 'email');
	}

	// build the html for which fields to choose
	$tmp = "<table><tr>";
	$i = 0;
	while (list ($key, $var) = each ($array_fields)) {
		if ($i > 3) {
			$tmp .= "</tr><tr>";
			$i=0;
		}
	
		$tmp .= "<td><b>$var</b>:</td><td><input type=\"checkbox\" name=\"submit_fields[]\" value=\"$key\" " . iff(@in_array($key, $_REQUEST[submit_fields]), 'checked=\"checked\"', '') . "></td>";
		$i++;
	
	}

	$tmp .= "</tr></table>";

	$table[] = table_midheader('Format of Results');

	$table[] = array(table_thelp('<b>Fields to Display</b>', 'Users', 'Search: Fields to Display'), $tmp);

	$searchtable = $table;

	if ($_REQUEST['do'] != 'doadvanced') {
		table_header('Search for Users', 'search.php', array('do' => 'doadvanced'), '', 'searchform');
		table_content($columns, $searchtable);
		table_footer('Search');
		$shown = 1;
	}

	unset($columns, $table);

}

############################################# SEARCH RESULTS ############################################# 

if ($_REQUEST['do'] == "doadvanced") {
	//////////////////// USERID RANGE ////////////////////

	give_default($_REQUEST[greater], 0);
	$where .= " WHERE id >= '" . mysql_escape_string($_REQUEST[greater]) . "'";
	if ($_REQUEST[lessthan]) {
		$where .= " AND id <= '" . mysql_escape_string($_REQUEST[lessthan]) . "'";
	}

	//////////////////// CUSTOM FIELDS ////////////////////

	$db->query("SELECT * FROM user_def WHERE tech_viewable ORDER BY displayorder");
	while ($result = $db->row_array()) {
		$where .= field_search($result, 
			$_REQUEST[custom_fields][$result[name]], 
			$_REQUEST[custom_fields]['extra' . $result[name]],
			'user',
			$_REQUEST[custom_fields][$result[name]."_match"],
			$_REQUEST[custom_fields][$result[name]."_not"]);
		$allowed_fields[] = $result[name];
		$data[$result[name]] = array('display_name' => $result[display_name], 'description' => $result[description]);
	}

	//////////////////// FIELDS TO DISPLAY ////////////////////

	$allowed_fields[] = 'id';
	$allowed_fields[] = 'username';
	$allowed_fields[] = 'email';

	// start building query
	$select = "SELECT id";
	
	// add id to the front of the array
	if (!is_array($_REQUEST[submit_fields])) {
		array_unshift($_REQUEST[submit_fields], 'id');
	}
	
	// get the data back (only bit they are allowed to view) and build query.
	foreach ($_REQUEST[submit_fields] AS $key => $val) {
		if (in_array($val, $allowed_fields)) {
			$select .= ", $val";
			if ($val == 'username') {
				$cols[] = 'Username';
			} elseif ($val == 'email') {
				$cols[] = 'Email';
			} elseif ($val == 'id') {
				$cols[] = 'User ID';
			} else {
				$cols_tmp = unserialize($data[$val]['display_name']);
				$cols[] = $cols_tmp[$settings[default_language]];
			}
			$col_vals[] = $val;
		}
	}

	$col_vals[] = 'tickets';
	$col_vals[] = 'edit';
	$col_vals[] = 'delete';
	
	// add from statement
	$query .= " FROM user ";

	//////////////////// EMAIL / USERNAME ////////////////////

	if (trim($_REQUEST[username]) != '') {
		$where .= " AND username LIKE '%" . mysql_escape_string(addslashes_like($_REQUEST[username])) . "%'";
	}
	if (trim($_REQUEST[email]) != '') {
		$where .= " AND email LIKE '%" . mysql_escape_string(addslashes_like($_REQUEST[email])) . "%'";
	}

	//////////////////// DATES ////////////////////

	// earliest date registered
	if ($_REQUEST['ydate_registered_start']) {
		$time = mktime(0, 0, 0, $_REQUEST['mdate_registered_start'], $_REQUEST['ddate_registered_start'], $_REQUEST['ydate_registered_start']);
		$where .= " AND date_registered >= '$time'";
	}

	// lastest date registered
	if ($_REQUEST['ydate_registered_end']) {
		$time = mktime(0, 0, 0, $_REQUEST['mdate_registered_end'], $_REQUEST['ddate_registered_end'], $_REQUEST['ydate_registered_end']);
		$where .= " AND date_registered <= '$time'";
	}


	//////////////////// LIMIT  ////////////////////

	if ($_REQUEST['page']) {
		$page = $_REQUEST['page'];
	} else {
		$page = 1;
	}

	$start = $perpage * $page;
	$start = $start - $perpage;

	$limit = " LIMIT $start, $perpage";

	////////////////////// LOAD CUSTOM USER FIELD DATA ///////////////////////

	$db->query("SELECT * FROM user_def");
	$custfields = array();
	while ($result = $db->row_array()) {
		$custfields[$result['name']] = $result;
	}

	//////////////////// RUN QUERY & LOOP ////////////////////

	$result = $db->query_return("SELECT COUNT(*) AS total FROM user $where");
	$total = $result[total];

	//////////////////// DISPLAY RESULTs ////////////////////

	$cols[] = "Tickets";
	$cols[] = "Edit";
	$cols[] = "Delete";

	$db->query("
		$select
		FROM user
		$where
	");

	$total = $db->num_rows();
	if ($total == 1) {
		$userdata = $db->row_array();
		jump("view.php?id=$userdata[id]", 'One user found, viewing...');
		exit;
	} else {
		while ($result = $db->row_array()) {
			if ((strtolower(trim($result['username'])) == strtolower(trim($_REQUEST['username']))) OR
				(strtolower(trim($result['email'])) == strtolower(trim($_REQUEST['email'])))) {

				jump("view.php?id=$result[id]", 'Exact match found, viewing...');
				exit;
			}
		}
	}

	table_header('Search for Users', 'search.php', array('do' => 'doadvanced'), '', 'searchform');
	table_content($columns, $searchtable);
	table_footer('Search');

	$db->query("
		$select
		FROM user
		$where
		$limit
	");
	
	while ($result = $db->row_array()) {
	
		foreach ($col_vals AS $key => $val) {

			// field types
			if ($val == 'edit') {
				$table[$i][] = "<center><a href=\"view.php?id=$result[id]\">Edit</a></center>";
			} elseif ($val == 'delete') {
				$table[$i][] = jprompt('Do you want to delete this user? This will permanently delete ALL tickets and billing information for this user!', "actions.php?do=delete&id=$result[id]", '<center>Delete</center>');
			} elseif ($val == 'tickets') {
				$table[$i][] = "<center><a href=\"view.php?id=$result[id]\">Tickets</a></center>";
			} else {
				if (stristr($val, 'custom')) {
					$user_data = $custfields[$val];
					$user_data['display_name'] = unserialize($user_data['display_name']);
					$user_data['display_name'] = $user_data['display_name'][$settings['default_language']];
					$table[$i][] = field_display($user_data, $result[$val]);
				} else {
					$table[$i][] = $result[$val];
				}
			}
		}
		$i++;
	}

	table_header('The following users matched your criteria' . iff(($total == 1), " ($total user)", " ($total users)"));
	table_content($cols, $table);
	table_footer();

	//////////////////// PAGENAV ////////////////////

	if ($_REQUEST[greater] == '0') {
		unset($_REQUEST[greater]);
	}

	if ($total) {
		$variables = serialize($_REQUEST);
		echo "<form action=\"search.php\" method=\"post\" name=\"frm\">";
		echo form_hidden('variables', $variables) . form_hidden('do', 'doadvanced');
		echo pagenav($total, $perpage, $page, '', 'frm', 'select', 'page');
		echo "<span id=\"hiddenbit\"></span></form>";
	}

}

tech_footer();
?>