View file wapus top english version/search.php

<?php
//=============================
#Version WapuS_ToP_final
#Script By: Black1992
#Email: skyangel15@inbox.lv
#Icq: 414454754
#Url: http://WaPuS.pp.Ru
//=============================
require 'config.php';
require 'inc/config.inc.php';
require 'inc/functions.inc.php';
ini_set('session.use_cookies',0);
ini_set('session.use_trans_sid',1);
session_name('sid');
session_start();
connect_to_db();

$def_n = 5; // Число сайтов на стр. по умолч.

$title = 'Search';
include 'head.php';
echo '<div class="main"><b>Search this site</b></div>';

if (!isset($_GET['p']) || ((!isset($_POST['s']) || empty($_POST['s'])) && (!isset($_SESSION['s_s']) || empty($_SESSION['s_s'])))) {
 echo '<div class="rek3">';
 form('search.php?p=1', 'post');
 echo 'Find from:<br/>
<input type="text" name="s"><br/>
How to look for:<br/>
<input type="radio" name="m" value="n" checked> By name or address<br/>
<input type="radio" name="m" value="o"> According to description<br/>
Results per page:<br/>
<input type="text" name="n" size="2" maxlength="2" value="' . $def_n . '"><br/>';
 submit('Search site', 's,m,n');
 echo '</div>';
} else {
 if (isset($_POST['s'])) $s = $_POST['s'];
 else $s = $_SESSION['s_s'];
 $ss = htmlspecialchars(stripslashes($s));
 $ss = strtr(mysql_real_escape_string($ss), array('_' => '\\_', '%' => '\\%'));

 if ((isset($_POST['m']) && $_POST['m'] == 'o') || (isset($_SESSION['s_m']) && $_SESSION['s_m'] == 'o') ) {
   $m = 'o';
   $sql = 'info LIKE \'%' . $s . '%\'';
 } else {
  $m = 'n';
  $sql = 'site_name LIKE \'%' . $s . '%\' || link LIKE \'%' . $s . '%\'';
 }
 if (isset($_POST['n']) && is_numeric($_POST['n'])) {
  $n = (int)$_POST['n'];
 } elseif (isset($_SESSION['s_n']) && is_numeric($_SESSION['s_n'])) {
  $n = (int)$_SESSION['s_n'];
 } else $n = $def_n;
 
 $_SESSION['s_s'] = $s;
 $_SESSION['s_m'] = $m;
 $_SESSION['s_n'] = $n;

 $res = mysql_query('SELECT COUNT(*) AS t FROM users WHERE ' . $sql);
 $total = mysql_result($res, 0, 't');
 mysql_free_result($res);
 if ($total) {
  nav($total, $n, 'search.php', sid);
  $res = mysql_query('SELECT uid, site_name, info FROM users WHERE ' . $sql . ' LIMIT ' . $nav['start'] . ', ' . $n);
  echo '<div class="rek3"><b>Результаты поиска:</b></br>
';
  $i = $nav['start'] + 1;
  while ($r = mysql_fetch_assoc($res)) {
   echo '
<b>' . $i . '. <a href="outtop.php?uid=' . $r['uid'] . '">' . htmlspecialchars($r['site_name']) . '</a></b> <a href="stat.php?uid=' . $r['uid'] . '">[?]</a><br/>
' . htmlspecialchars(block($r['info'], 100)) . '</div><div class="rek3">';
   $i ++;
  }
  mysql_free_result($res);
  echo"<center>";
  echo $nav['pages'];
 } else {
  echo '</div></center><div class="rek3">Сайтов с подобным содержанием не найдено.</div>';
 }
}


include "foot_code.php";


?>