advancedsearch.php

这是matlab的一个小程序

<?php
require_once(dirname(__FILE__)."/../include/common.inc.php");
require_once(DEDEINC."/datalistcp.class.php");
$timestamp = time();

//限制同时搜索数量
$timelock = '../data/time.lock';
if($cfg_allsearch_limit < 1)
{
	$cfg_allsearch_limit = 1;
}
if(file_exists($timelock))
{
	if($timestamp - filemtime($timelock) < $cfg_allsearch_limit)
	{
		showmsg('服务器忙，请稍后搜索','-1');
		exit();
	}
}
@touch($timelock,$timestamp);
$mid = isset($mid) && is_numeric($mid) ? $mid : 0;
if($mid == 0)
{
	showmsg('参数不正确，高级自定义搜索必须指定模型id', 'javascript');
	exit();
}
$query = "select maintable, mainfields, addontable, addonfields, template from #@__advancedsearch where mid='$mid'";
$searchinfo = $dsql->GetOne($query);
if(!is_array($searchinfo))
{
	showmsg('自定义搜索模型不存在','-1');
	exit();
}
$template = $searchinfo['template'] != '' ?  $searchinfo['template'] : 'advancedsearch.htm';
if(empty($sql))
{
	//主表字段处理
	$q = stripslashes($q);
	$q = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]"," ",trim($q));
	if( ($cfg_notallowstr!='' && eregi($cfg_notallowstr,$q)) || ($cfg_replacestr!='' && eregi($cfg_replacestr,$q)) )
	{
		echo "你的信息中存在非法内容，被系统禁止！<a href='javascript:history.go(-1)'>[返回]</a>"; exit();
	}
	$q = addslashes($q);
	$iscommend = isset($iscommend) && is_numeric($iscommend) ? $iscommend : 0;
	$typeid = isset($typeid) && is_numeric($typeid) ? $typeid : 0;
	$typeid = max($typeid, 0);
	$includesons = isset($includesons) ? 1 : 0;
	$writer = isset($writer) ? trim($writer) : '';
	$source = isset($source) ? trim($source) : '';
	$startdate = isset($startdate) ? trim($startdate) : '';
	$enddate = isset($enddate) ? trim($enddate) : '';
	if($startdate != '')
	{
		$starttime = strtotime($startdate);
	}
	else
	{
		$starttime = 0;
	}
	if($enddate != '')
	{
		$endtime = strtotime($enddate);
	}
	else
	{
		$endtime = 0;
	}
	$where = ' where main.arcrank>-1 ';

	if($q != '')
	{
		$where .= " and (main.title like '%$q%' or main.keywords like '%$q%' or main.description like '%$q%') ";
	}
	if($iscommend == 1)
	{
		$where .= ' and main.flag like "%c%" ';
	}
	if(!empty($typeid))
	{
		if($includesons == 1)
		{
			$tids =  TypeGetSunID($typeid,$dsql,'',$mid,true);
			$where .= " and main.typeid in ($tids) ";
		}
		else
		{
			$where .= " and main.typeid=$typeid ";
		}
	}
	else
	{
		$where .= " and main.channel=$mid ";
	}
	if($writer != '')
	{
		$writer = stripslashes($writer);
		$writer = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim($writer));
		$writer = addslashes($writer);
		$where .= " and main.writer='$writer' ";
	}
	if($source != '')
	{
		$source = stripslashes($source);
		$source = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim($source));
		$source = addslashes($source);
		$where .= " and main.source='$source' ";
	}
	if($starttime > 0)
	{
		$where .= " and main.senddate>$starttime ";
	}
	if($endtime > 0){
		$where .= " and main.senddate<$endtime";
	}
	$maintable = $searchinfo['maintable'];
	$addontable = $searchinfo['addontable'];
	$mainfields = $searchinfo['mainfields'];
	$addonfields = $searchinfo['addonfields'];
	$mainfieldsarr = explode(',', $mainfields);
	$addonfieldsarr = explode(',', $addonfields);
	array_pop($addonfieldsarr);//弹出

	$intarr = array('int','float');
	$textarr = array('textdata','textchar','text','htmltext','multitext');
	foreach($addonfieldsarr as $addonfield)
	{
		$addonfieldarr = explode(':', $addonfield);
		$var = $addonfieldarr[0];
		$type = $addonfieldarr[1];
		if(in_array($type, $intarr))
		{
			if(isset(${'start'.$var}) && trim(${'start'.$var})!='')
			{
				${'start'.$var} = trim(${'start'.$var});
				${'start'.$var} = intval(${'start'.$var});
				$where .= " and addon.$var>${'start'.$var} ";
			}
			if(isset(${'end'.$var}) && trim(${'end'.$var})!='')
			{
				${'end'.$var} = trim(${'end'.$var});
				${'end'.$var} = intval(${'end'.$var});
				$where .= " and addon.$var<${'end'.$var} ";
			}
		}
		elseif(in_array($type, $textarr))
		{
			if(isset(${$var}) && trim(${$var})!='')
			{
				${$var} = stripslashes(${$var});
				${$var} = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim(${$var}));
				${$var} = addslashes(${$var});
				$where .= " and addon.$var like '%${$var}%'";
			}
		}
		elseif($type == 'select')
		{
			${$var} = stripslashes(${$var});
			${$var} = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim(${$var}));
			${$var} = addslashes(${$var});
			if(${$var} != '')
			{
				$where .= " and addon.$var like '${$var}'";
			}
		}
		elseif($type == 'radio')
		{
			${$var} = stripslashes(${$var});
			${$var} = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim(${$var}));
			${$var} = addslashes(${$var});
			if(${$var} != '')
			{
				echo $where .= " and addon.$var like '${$var}'";
			}
		}
		elseif($type == 'checkbox')
		{
			if(is_array(${$var}) && !empty(${$var}))
			{
				foreach(${$var} as $tmpvar)
				{
					$tmpvar = trim($tmpvar);
					if($tmpvar != '')
					{
						$tmpvar = stripslashes($tmpvar);
						$tmpvar = ereg_replace("[\|\"\r\n\t%\*\?\(\)\$;,'%<>]","",trim($tmpvar));
						$tmpvar = addslashes($tmpvar);
						$where .= " and CONCAT(',',addon.$var, ',') like '%,$tmpvar,%' ";
					}
				}
			}
		}
		elseif($type == 'datetime')
		{
			${'start'.$var} = trim(${'start'.$var});
			if(${'start'.$var} != '')
			{
				${'start'.$var} = strtotime(${'start'.$var});
			}
			else
			{
				${'start'.$var} = 0;
			}
			${'end'.$var} = trim(${'end'.$var});
			if(${'end'.$var} != '')
			{
				${'end'.$var} = strtotime(${'end'.$var});
			}
			else
			{
				${'end'.$var} = 0;
			}
		}
	}
	$orderby = ' order by main.sortrank desc ';
	$query = "select main.id as aid,main.*,main.description as description1, type.* from $maintable main left join #@__arctype type on type.ID=main.typeid left join $addontable addon on addon.aid=main.ID $where  $orderby";
	$sql = $query;
}
else
{
	$sql = urldecode($sql);
	$query = $sql;
}
echo $sql;

$sql = urlencode($sql);
$dlist = new DataListCP();
$dlist->pageSize = 20;
$dlist->SetParameter("sql", $sql);
$dlist->SetParameter("mid", $mid);
if(file_exists(DEDEROOT."/templets/default/$template"))
{
	$templatefile = DEDEROOT."/templets/default/$template";
}
else
{
	$templatefile = DEDEROOT."/templets/default/advancedsearch.htm";
}
$dlist->SetTemplate($templatefile);
$dlist->SetSource($query);
require_once(DEDEINC."/channelunit.class.php");

//获得一个指定档案的链接
function GetArcUrl($aid,$typeid,$timetag,$title,$ismake=0,$rank=0,$namerule='',$artdir='',$money=0)
{
	return GetFileUrl($aid,$typeid,$timetag,$title,$ismake,$rank,$namerule,$artdir,$money);
}
$dlist->Display();
?>