SQL_search.inc

---

Line #0:<?
Line #1:
Line #2:
Line #3://?//BI_alert($_POST[Desc]);
Line #4:
Line #5:
Line #6:$_SESSION["scanBI"] = "a";
Line #7:
Line #8:if (!isset($_SESSION[cim_scan])) $_SESSION[cim_scan]="QJ_cimtar.php";
Line #9:
Line #10:
Line #11:
Line #12:if (!isset($_SESSION[CIM_sorrend])) $_SESSION[CIM_sorrend]="nev";
Line #13:
Line #14:if (isset($_GET[mod])) $_SESSION[CIM_sorrend]=$_GET[mod];
Line #15:$CIM_sorrend=$_SESSION[CIM_sorrend];
Line #16:
Line #17:
Line #18:if (!isset($_SESSION[CIM_goon])) $_POST[goon]=="?";
Line #19:
Line #20://if (isset($_POST[goon]) and $_POST[goon]=="goon" )
Line #21:if (isset($_POST[goon]))
Line #22:$_SESSION[CIM_goon]=$_POST[goon];
Line #23:
Line #24:
Line #25:
Line #26:
Line #27://if (isset($_POST[goon]) and $_POST[goon]<>"goon" )
Line #28://unset($_SESSION[CIM_goon]);
Line #29:
Line #30:
Line #31://?//include("QJ_varlist.php");
Line #32:
Line #33:if (!isset($_SESSION[CIM_DESC])) $_SESSION[CIM_DESC]="";
Line #34:if (isset($_POST[Desc])) {
Line #35:if ($_SESSION[CIM_DESC]=="*" )
Line #36:$_SESSION[CIM_DESC]=""; else $_SESSION[CIM_DESC]="*";
Line #37:}
Line #38:if (isset($_POST[delete])) {
Line #39:$_GET[value]="";
Line #40:$_SESSION["BI_user_ker"]="";
Line #41:$_SESSION["BI_taj_ker"]="";
Line #42:$_POST[user_ker]="";
Line #43:$_POST[taj_ker]="";
Line #44:}
Line #45:
Line #46://if (isset($_GET[value])){
Line #47:if (isset($_POST[user_ker]) or isset($_POST[submit])){
Line #48://BI_alert("*".$_GET[value]."*");
Line #49:
Line #50:
Line #51:
Line #52:$_SESSION["BI_user_ker"]=$_POST[user_ker];
Line #53:
Line #54:
Line #55:}
Line #56:
Line #57://if (isset($_GET[value])){
Line #58:
Line #59://BI_alert("*".$_GET[value]."*");
Line #60:
Line #61://else $_SESSION["BI_user_ker"]="";
Line #62:
Line #63:
Line #64:// $BI_user_ker= str_replace("~"," ",$_SESSION[BI_user_ker]);
Line #65: $BI_user_ker= $_SESSION[BI_user_ker];
Line #66:
Line #67:if (isset($_POST[Desc])) $_SESSION[CALL_ord]=$_POST[Desc];
Line #68:
Line #69:if ($_POST[Desc]=="DESC") $_SESSION[CALL_ord]="DESC"; else $_SESSION[CALL_ord]="";
Line #70:
Line #71:
Line #72:if (isset($_POST[Puser]) and $_POST[Puser]<>"*"){
Line #73:
Line #74:
Line #75:$sql="select * FROM qj_cimtar where wid='".$_POST[Puser]."'";
Line #76:
Line #77://?//
Line #78:echo($sql."<hr>*1*QJ_cimtarSQL***<hr>");
Line #79:
Line #80:
Line #81:
Line #82:
Line #83:$_SESSION["QJ_cimtarSQL"]=$sql;
Line #84:
Line #85:
Line #86:
Line #87:$sor = mysql_fetch_array($stid);
Line #88:
Line #89:$wjid = $sor[wid];
Line #90:$nev = $sor[nev];
Line #91:$telepules = $sor[telepules];
Line #92:$cim = $sor[cim];
Line #93:$telszam= $sor[telszam];
Line #94:$uzenet= $sor[uzenet];
Line #95:$item =$nev.", ".$telepules.", ".$telepules.", ".$telszam.", ".$uzenet;
Line #96:
Line #97:$BI_user_ker=$sor[$CIM_sorrend];
Line #98:
Line #99://$_SESSION["BI_user_ker"] = $nev ;
Line #100://$_SESSION["CIM_sorrend"]=="nev";
Line #101:
Line #102://$_POST[user_ker]=$_SESSION["BI_user_ker"];
Line #103:// echo "<script language = javascript>";
Line #104:
Line #105:// echo "parent.location.href='index.php'";
Line #106://echo 'window.location.href = "QJ_cimtar.php"';
Line #107:// echo "</script>";
Line #108:
Line #109://exit;
Line #110:
Line #111:}
Line #112:
Line #113:
Line #114:?>
Line #115:<table cellspacing="0" cellpadding="0" align="center" width="100%">
Line #116:<tr ><td >
Line #117:<table width="100%">
Line #118:<tr ><td>
Line #119:
Line #120:
Line #121:<table class="contentpaneopen">
Line #122:<tr>
Line #123:<td valign="top">
Line #124:<form name="search" method="POST" action="<? print $_SESSION[cim_scan]; ?>" >
Line #125:<table bgcolor="#A7C2B3" cellpadding="2" cellspacing="2" width=100%">
Line #126:<tr>
Line #127:<td nowrap>
Line #128:
Line #129:
Line #130:<img width=20 height=20 src='../_Screen/plus.ico' border=0></a> &nbsp;&nbsp;
Line #131:<hr>
Line #132:</td>
Line #133:<td bgcolor="#DBE6E0">
Line #134:
Line #135:
Line #136:<?PHP
Line #137:
Line #138:
Line #139:
Line #140:IF ($CIM_sorrend=="nev") $sel=" SELECTED "; else $sel="";
Line #141:
Line #142:
Line #143:IF ($CIM_sorrend=="email_cim") $sel=" SELECTED "; else $sel="";
Line #144:
Line #145:
Line #146:IF ($CIM_sorrend=="telepules") $sel=" SELECTED "; else $sel="";
Line #147:
Line #148:
Line #149:IF ($CIM_sorrend=="telszam") $sel=" SELECTED "; else $sel="";
Line #150:
Line #151:
Line #152:IF ($CIM_sorrend=="uzenet") $sel=" SELECTED "; else $sel="";
Line #153:
Line #154:
Line #155:
Line #156:?>
Line #157:
Line #158:</select>
Line #159:
Line #160:
Line #161:
Line #162:" value="" name=CHAR_len >
Line #163:
Line #164:
Line #165: <INPUT TYPE='radio' NAME='goon' value='goon' <?if ($goon=="goon") echo(" CHECKED ");?>
Line #166: >Tartalom ...
Line #167:
Line #168: <INPUT TYPE='radio' NAME='goon' value='?' <?if ($goon=="?") echo(" CHECKED "); ?>
Line #169:
Line #170:
Line #171: <INPUT TYPE='CHECKBOX' NAME='Desc' value='DESC' <?if ($_SESSION[CALL_ord]=="DESC") print " checked='checked' "; ?>
Line #172: onclick=this.form.submit(); return true name='Desc'
Line #173: >
Line #174:
Line #175:
Line #176:
Line #177:
Line #178:
Line #179:<?PHP
Line #180:
Line #181:/*IF ($CIM_sorrend=="taj")
Line #182: echo "<script>alert('?taj');CheckLen(search.taj_ker,30,'taj');</script>";
Line #183:IF ($CIM_sorrend=="nev")
Line #184: echo "<script>alert('?nev');CheckLen(search.user_ker,30,'nev');</script>";
Line #185:*/
Line #186:
Line #187:?>
Line #188:
Line #189:</td></tr>
Line #190:
Line #191:<?php
Line #192:
Line #193:$fullRec="";
Line #194:
Line #195:IF ($CIM_sorrend=="nev")
Line #196:$fullRec =" and INSTR((CONCAT_WS(nev,'/', telepules,'/', cim,'/', telszam,'/',email_cim,'/', uzenet)),'".$BI_user_ker."')";
Line #197:
Line #198:IF ($CIM_sorrend=="telepules")
Line #199:$fullRec =" and INSTR((CONCAT_WS(telepules,'/',nev,'/', cim,'/', telszam,'/',email_cim,'/', uzenet)),'".$BI_user_ker."')";
Line #200:
Line #201:IF ($CIM_sorrend=="email")
Line #202:$fullRec =" and INSTR((CONCAT_WS(email_cim,'/',telepules,'/',nev,'/', cim,'/', telszam,'/', uzenet)),'".$BI_user_ker."')";
Line #203:
Line #204:IF ($CIM_sorrend=="telszam")
Line #205:$fullRec =" and INSTR((CONCAT_WS(telszam,'/', nev,'/', telepules,'/', cim,'/',email_cim,'/', uzenet)),'".$BI_user_ker."')";
Line #206:
Line #207:IF ($CIM_sorrend=="uzenet")
Line #208:$fullRec =" and INSTR((CONCAT_WS(uzenet,'/', nev,'/', telepules,'/', cim,'/',email_cim,'/', telszam)),'".$BI_user_ker."')";
Line #209:
Line #210:if ($goon=="goon")
Line #211:$sql2="select * FROM qj_cimtar where $cimwer nev<>'' $fullRec order by $CIM_sorrend $_SESSION[CALL_ord]";
Line #212:else
Line #213:$sql2="select * FROM qj_cimtar where $cimwer nev<>'' and $CIM_sorrend LIKE '$BI_user_ker%' order by $CIM_sorrend $_SESSION[CALL_ord]";
Line #214:
Line #215://if ( !isset($_SESSION[CIM_sorrend]) or !isset($_SESSION[$_SESSION[BI_user_ker]]))
Line #216://$sql2="select * FROM qj_cimtar order by wid";
Line #217:
Line #218:
Line #219:
Line #220:$nurL=mysql_num_rows($stid2);
Line #221:
Line #222: echo "<script language = javascript>";
Line #223: echo "document.search.CHAR_len.value = ".$nurL.";";
Line #224: echo "</script>";
Line #225:
Line #226:
Line #227:
Line #228:
Line #229://SELECT LOWER(CONCAT_WS(title,description)) AS concatenated WHERE concatenated LIKE '%searchterm%'
Line #230://SELECT LOWER(CONCAT_WS(title,description)) AS concatenated WHERE concatenated LIKE LOWER('%SearchTerm%')
Line #231:
Line #232:if ($goon=="goon")
Line #233:$sql="select * FROM qj_cimtar where $cimwer nev<>'' and usr_kod<>'*DEL' $fullRec order by $CIM_sorrend $_SESSION[CALL_ord] limit 15";
Line #234:ELSE
Line #235:$sql="select * FROM qj_cimtar where $cimwer nev<>'' and usr_kod<>'*DEL' and $CIM_sorrend LIKE '$BI_user_ker%' order by $CIM_sorrend $_SESSION[CALL_ord] limit 15";
Line #236:
Line #237://if ( !isset($_SESSION[CIM_sorrend]) or !isset($_SESSION[$_SESSION[BI_user_ker]]))
Line #238://$sql="select * FROM qj_cimtar order by wid limit 15 ";
Line #239:
Line #240:
Line #241:$_SESSION["QJ_cimtarSQL"]=$sql;
Line #242:
Line #243://?//
Line #244:
Line #245://$pos=strpos(htmlspecialchars($sql),"and");
Line #246:$pos=strpos($sql,"and");
Line #247:
Line #248://echo($pos."<hr>***/".$sql."/***<hr>***QJ_cimtarSQL***<hr>");
Line #249:
Line #250:if ($BI_user_ker!="" and substr($sql,0,6)=="select" ) {
Line #251:
Line #252://echo($sql."<hr>");
Line #253:
Line #254:
Line #255:if ($nurL>15) $m=15; else $m=$nurL;
Line #256:
Line #257:
Line #258:onclick=this.form.submit(); return true name="Puser">';
Line #259:
Line #260:
Line #261://echo "<script>var customarray=new Array();</script>";
Line #262:while ($sor = mysql_fetch_array($stid)) {
Line #263:$wjid = $sor[wid];
Line #264:$nev = $sor[nev];
Line #265:$telepules = $sor[telepules];
Line #266:$cim = $sor[cim];
Line #267:$telszam= $sor[telszam];
Line #268:$uzenet= $sor[uzenet];
Line #269:$item =$nev.", ".$telepules.", ".$cim.", ".$telszam.", ".$uzenet;
Line #270:
Line #271:
Line #272:IF ($CIM_sorrend=="nev")
Line #273:$item =$nev.", ".$telepules.", ".$cim.", ".$telszam.", ".$uzenet;
Line #274:IF ($CIM_sorrend=="telepules")
Line #275:$item =$telepules.", ".$cim.", ".$nev.", ".$telszam.", ".$uzenet;
Line #276:IF ($CIM_sorrend=="telszam")
Line #277:$item =$telszam.", ".$nev.", ".$telepules.", ".$cim.", ".$uzenet;
Line #278:IF ($CIM_sorrend=="uzenet")
Line #279:$item =$uzenet.", ".$telszam.", ".$nev.", ".$telepules.", ".$cim;
Line #280:
Line #281:
Line #282:$e.="<option value='$wjid'>$item</option>";
Line #283:}
Line #284:
Line #285:
Line #286:
Line #287:
Line #288:
Line #289:$e.='</select>';
Line #290:
Line #291:
Line #292:} else {
Line #293://echo "<script>var customarray=new Array();</script>";
Line #294://$e="";
Line #295:}
Line #296://onclick="return nullCheck(this)"
Line #297:
Line #298:?>
Line #299:
Line #300:<tr>
Line #301:<td nowrap rowspan=2>
Line #302:<B><? print $talalat; ?> </B>
Line #303:</td>
Line #304:<td bgcolor="#DBE6E0" >
Line #305:
Line #306:value="<?php print $BI_user_ker; ?>" maxlength="50" size="50">
Line #307:
Line #308:<input type="hidden" name="user_uid" id='uuid' value="<?php print $uid; ?>">
Line #309:&nbsp;&nbsp;&nbsp;
Line #310:
Line #311: TYPE='submit' NAME='submit'
Line #312:
Line #313:
Line #314:
Line #315:</td>
Line #316:</tr>
Line #317:<tr>
Line #318:
Line #319:<script>
Line #320:document.search.user_ker.focus();
Line #321://document.search.user_ker.focus();
Line #322:document.search.user_ker.value = "<?php print $BI_user_ker; ?>";
Line #323://var obj = actb(document.getElementById('tdu'),customarray);
Line #324:</script>
Line #325:
Line #326:
Line #327:<td bgcolor="#DBE6E0">
Line #328:
Line #329:
Line #330:</td>
Line #331:</tr>
Line #332:
Line #333:</table>
Line #334:
Line #335:</form>
Line #336:
Line #337:<SCRIPT LANGUAGE="JavaScript">
Line #338:
Line #339:
Line #340: function CheckLen(input,max,hiv){
Line #341:
Line #342:// if(input.value.length>max){
Line #343:
Line #344:// input.value = input.value.substring(0,input.value.length-1);
Line #345:// }
Line #346:
Line #347:// document.search.CHAR_len.value = input.value.length;
Line #348://alert(hiv+ " / " + input.value);
Line #349:
Line #350://window.location.href = "QJ_cimtar.php?&value=" + input.value+"&mod=" + hiv;
Line #351:
Line #352:window.location.href = "QJ_cimtar.php?&value=" + input.value;
Line #353:
Line #354://document.search.user_ker.focus();
Line #355:
Line #356: }
Line #357:
Line #358:
Line #359:function nullCheck(){
Line #360:
Line #361:
Line #362:if (document.search.szempont.value == "nev") {
Line #363:// document.search.CHAR_len.value = search.user_ker.value.length;
Line #364://CheckLen(search.user_ker,30);
Line #365:
Line #366: if (document.search.user_ker.value == "")
Line #367: {
Line #368:
Line #369: return false;
Line #370: }
Line #371:}
Line #372:else if (document.search.szempont.value == "taj") {
Line #373:// document.search.CHAR_len.value = search.taj_ker.value.length;
Line #374://CheckLen(search.taj_ker,30);
Line #375: if (document.search.taj_ker.value == "")
Line #376: {
Line #377:
Line #378: return false;
Line #379: }
Line #380: }
Line #381:}
Line #382:
Line #383:
Line #384:function modCheck (field) {
Line #385:
Line #386://if (document.search.szempont.value == "nev")
Line #387:document.search.user_ker.focus();
Line #388:
Line #389://{
Line #390://alert(document.search.szempont.value+'***NEV***');
Line #391://document.search.taj_ker.value = "alma";
Line #392://CheckLen(search.taj_ker,30);
Line #393://document.search.taj_ker.focus();
Line #394://document.search.taj_ker.value = "<?php print $char; ?>";
Line #395://var obj = actb(document.getElementById('tjk'),customarray);
Line #396:
Line #397://}
Line #398://else if (document.search.szempont.value == "taj") {
Line #399://alert(document.search.szempont.value+'***TAJ***');
Line #400://document.search.user_ker.value = "dio";
Line #401://CheckLen(search.user_ker,30);
Line #402://document.search.user_ker.focus();
Line #403:// document.search.CHAR_len.value = search.user_ker.value.length;
Line #404:
Line #405://}
Line #406:
Line #407:
Line #408://?//alert(field.value+" ---- ");
Line #409:
Line #410:if (field.value != "") {
Line #411: window.location.href = "<? print $_SESSION[cim_scan]; ?>?&mod=" + field.value;
Line #412: }
Line #413:
Line #414:}
Line #415:function firstChar(field, key) {
Line #416:
Line #417: alert(String.fromCharCode(key));
Line #418: var alphaExp = /[a-zA-Z]/;
Line #419: var numExp = /[0-9]/;
Line #420://if (String.fromCharCode(key).match(/[a-zA-Z]/)) {
Line #421: if (field.value.length <= 1 && field.value!=" ") {
Line #422: window.location.href = "QJ_cimtar.php?&char=" + field.value;
Line #423: document.search.user_ker.focus();
Line #424: } else {
Line #425: return false;
Line #426: }
Line #427:// } else {
Line #428:// return false;
Line #429:// }
Line #430:}
Line #431:function firstNum(field, key) {
Line #432:
Line #433: alert(String.fromCharCode(key));
Line #434: var alphaExp = /[a-zA-Z]/;
Line #435: var numExp = /[0-9]/;
Line #436:if (String.fromCharCode(key).match(/[0-9]/)) {
Line #437: if (field.value.length <= 1 && field.value!=" ") {
Line #438: window.location.href = "QJ_cimtar.php?&char=" + field.value;
Line #439: document.search.taj_ker.focus();
Line #440: } else {
Line #441: return false;
Line #442: }
Line #443: } else {
Line #444: return false;
Line #445: }
Line #446:}
Line #447:// -->
Line #448:</SCRIPT>
Line #449:
Line #450:
Line #451:<?php
Line #452:
Line #453:?>
Line #454: