View file MySharedFiles/inc/search.php

<?
$search=NULL;
if (isset($_SESSION['search']))$search=$_SESSION['search'];
if (isset($_POST['search']))$search=$_POST['search'];
$_SESSION['search']=$search;

$search=preg_replace("#( ){2,}#"," ",$search);
$search=preg_replace("#^( ){1,}|( ){1,}$#","",$search);



if (isset($_GET['go']) && $search!=NULL)
{
$search_a=explode(' ', $search);

for($i=0;$i<count($search_a);$i++)
{
$search_a2[$i]='<span class="search_c">'.stripcslashes(htmlspecialchars($search_a[$i])).'</span>';
$search_a[$i]=stripcslashes(htmlspecialchars($search_a[$i]));
}

$q_search=str_replace('%','',$search);
$q_search=str_replace(' ','%',$q_search);
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `user_files` WHERE `id` like '%".mysql_escape_string($q_search)."%'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
if ($k_post==0)echo "<div class=\"poster\">\nНет результатов</div>\n";
$q=mysql_query("SELECT * FROM `user_files` WHERE `id` like '%".mysql_escape_string($q_search)."%' ORDER BY `time` DESC LIMIT $start, $set[p_str]");
$i=0;
while ($f = mysql_fetch_assoc($q))
{
$path=mysql_fetch_assoc(mysql_query("select * from `user_dir` where `id`='".$stat['id_dir']."';"));
echo "<a class='touch' href='/file/ID$f[id]'>$f[name]</a>

<div class=frends2>
ID файла <b>$f[id]</b></a><br>
Формат <b>$f[ras]</b></a><br>
Закачек <b>$f[k_loads]</b></a><br>
</div>";
}
if ($k_page>1){str("?go&amp;",$k_page,$page);
print'<br>';}
}
else
echo '';
echo "<div class='poster'><b> Введите номер файла (только цифры)</b></div>";
echo "<form method=\"post\" action=\"?go\" class=\"search\">\n";
$search=stripcslashes(htmlspecialchars($search));
echo "<input type=\"text\" name=\"search\" onkeyup=\"this.value=this.value.replace(/[^\d\.\,]+/g,'')\" maxlength=\"64\" size=\"11\" value=\"$search\" /><br />\n";
echo "<input type=\"submit\" value=\"Поиск\" />\n";
echo "</form>\n";
?>