root/browse.php

<?php</span>
<span class="code-lang">$root_path = './';
require ($root_path . 'include/config.php');
require ($root_path . 'include/functions_torrenttable.php');
require ($root_path . 'include/functions_selects.php');
require ($root_path . 'include/functions_search.php');

function _build_where ( $wherea ) {
    $where = '';
    foreach ( $wherea AS $key => $vals ) {
        if ( is_array($vals) ) {
            foreach ( $vals AS $_null => $val ) {
                $where .= ( $where ? ' AND ' : '' ) .  $key . ' ' . $val;
            }
        }
        else {
            $where .= ( $where ? ' AND ' : '' ) .  $key . ' ' . $vals;
        }
    }

    return $where;
}

if ( empty($_REQUEST['cat']) && !empty($_REQUEST['uri']) ) {
    $seo->get_id_from_uri($session_cid);
    if ( $session_cid == 0 ) {
        header('HTTP/1.1 404 Not Found');
        trigger_error('HTTP/1.1 404 Not Found');
    } else {
        $_REQUEST['cat'] = $_GET['cat'] = (int) $session_cid;
    }
}

$userdata = session_pagestart($user_ip);
init_userprefs($userdata);
//loggedinorreturn();
parked();

$cats = $cache->obtain_cats();

$searchstr = request_var('search', '');
$category = request_var('cat', 0);
$all = request_var('all', 0);
$search_in = request_var('search_in', 0);
$incldead = request_var('incldead', 0);
$sort = request_var('sort', '');
$type = request_var('type','');
$search_id = request_var('search_id', '');
$page = request_var('page', 0);
$count = 0;
$addparam = array();
$wherea = array();
$wherecatina = array();
$not_in_cats = array();
$search_ids = array();
$back_url = array();
$current_time = time();
$current_cat_name = '';</span>
<span class="code-lang">
if ($sort && $type) {
        $column = '';
        $ascdesc = '';
        switch($type) {
                case 'asc': $ascdesc = 'ASC'; break;
                case 'desc': $ascdesc = 'DESC'; break;
                default: $ascdesc = 'DESC'; break;
        }
        switch($sort) {
                case '1': $column = 't.name'; break;
                case '2': $column = 't.numfiles'; break;
                case '3': $column = 't.comments'; break;
                case '4':
                        $column = 'IF(t.numratings < ' . $config['minvotes'] . ', 0, ROUND(t.ratingsum / t.numratings, 1)) ' . $ascdesc;
                        $column .= ', t.numratings ' . $ascdesc;
                        $column .= ', t.ctime';
                break;
                case '5': $column = 't.ctime'; break;
                case '7': $column = 't.size'; break;
                case '8': $column = 't.completed'; break;
                case '9': $column = 't.seeders'; break;
                case '10': $column = 't.leechers'; break;
                case '11': $column = 'u.name'; break;
                default: $column = 't.ctime'; break;
        }

        $orderby = $column . ' ' . $ascdesc;
        $addparam[] = 'sort=' . $sort;
        $addparam[] = 'type=' . $type;
}
else {
        $orderby = 't.ctime DESC';

}

if ( $userdata['class'] < UC_MODERATOR ) {
    $wherea['t.moderated'][] = ' = 1';
    $wherea['t.banned'][] = ' = 0';
    $wherea['t.hidden'][] = ' = 0';
}

switch ( $incldead ) {
    //only visible
    case 1:
        $addparam[] = 'incldead=1';
    break;

    //non visible
    case 2:
        $addparam[] = 'incldead=2';
        $wherea['t.visible'][] = ' = 0';
    break;

    //gold
    case 3:
    case 9:
    case 10:
        $free = ( $incldead == 3 ? 1 : ( $incldead == 9 ? 2 : 4 ) );
        $addparam[] = 'incldead=' . $incldead;
        $wherea['t.free'][] = ' = ' . $free;
        $wherea['t.visible'][] = ' = 1';
    break;

    //no seeds
    case 4:
        $addparam[] = 'incldead=4';
        $wherea['t.seeders'][] = ' = 0';
        $wherea['t.leechers'][] = '> 0';
    break;

    //owned
    case 5:
        $addparam[] = 'incldead=5';
        $wherea['t.owner'][] = ' = ' . $userdata['uid'];
        unset($wherea['t.moderated']);
    break;

    //hidden
    case 6:
        if ( $userdata['hiddentorrents'] || $userdata['class'] >= UC_MODERATOR ) {
            $addparam[] = 'incldead=6';
            $wherea['t.hidden'][] = ' = 1';
        }
    break;

    //banned
    case 7:
        if ( $userdata['class'] >= UC_MODERATOR ) {
            $addparam[] = 'incldead=7';
            $wherea['t.banned'][] = ' = 1';
        }
    break;

    //non moderated
    case 8:
        if ( $userdata['class'] >= UC_MODERATOR ) {
            $addparam[] = 'incldead=8';
            $wherea['t.moderated'][] = ' = 0';
        }
    break;

    //all with non visible
    default:
        //$wherea[] = 't.visible = 1';
    break;
}

if ( !$all ) {
        if ( !$_GET && strpos($userdata['notifs'], '[cat') !== false ) {
                $all = true;
                foreach ( $cats AS $cat_id => $cat_ary ) {
                        $all &= $cat_id;
                                if ( strpos($userdata['notifs'], '[cat' . $cat_id . ']') !== false ) {
                                        $wherecatina[] = $cat_id;
                                        $addparam[] = 'c' . $cat_id . '=1';
                                }
                }
        }
        elseif ( $category ) {
                $wherecatina[] = $category;
                $addparam[] = 'cat=' . $category;
        }
        else {
                $all = true;
                foreach ( $cats AS $cat_id => $cat_ary ) {
                        $all &= request_var('c' . $cat_id, 0);
                        if ( isset($_GET['c' . $cat_id]) ) {
                                $wherecatina[] = $cat_id;
                                $addparam[] = 'c' . $cat_id . '=1';
                        }
                }
        }
}
elseif ( $all ) {
        $wherecatina = array();
        $addparam = array();
}

if ( sizeof($wherecatina) && sizeof($wherecatina) != sizeof($cats) ) {
    $new_wherecatina = array();
    foreach ( $wherecatina AS $_null => $_val ) {
        if ( isset($cats[$_val]) ) {
            if ( $cats[$_val]['cat_parent'] ) {
                $new_wherecatina[] = $_val;
            }
            //no cat parent, try to get all child cats
            else {
                foreach ( $cats AS $_key => $_ary ) {
                    if ( $_ary['cat_parent'] == $_val ) {
                        $new_wherecatina[] = $_key;
                    }
                }
                $new_wherecatina[] = $_val;
            }
        }
    }
    $wherecatina = $new_wherecatina;
    if ( sizeof($wherecatina) ) {
        $wherea['t.category'][] = ' IN (' . implode(', ', $wherecatina) . ')';
    }
}

if ( sizeof($cats) ) {
    $catsperrow = 5;
    $cats_split_row = $catsperrow - 1;
    $row = 0;
    $col = 0;

    $sql = 'SELECT * FROM ' . CATEGORIES_TABLE . ' ORDER BY cat_parent_id, name';
    $result = $db->sql_query($sql, 3600);

    while( $row = $db->sql_fetchrow($result) ){
        $parent_cat_id = ( $row['cat_parent_id'] ? $row['cat_parent_id'] : $row['id'] );
        $_cats[$parent_cat_id][$row['id']] = $row;
    }

    foreach ( $_cats AS $cat_id => $cat_ary ) {
        $count = sizeof($cat_ary) - 1;

        if ( ( $cat_ary[$cat_id]['anonymous_view'] && !$userdata['session_logged_in'] ) || $userdata['session_logged_in'] ) {

            if (!$col) {
                $template->assign_block_vars('cats_row', array());
            }
            $checked_sub_cats = array_keys($cat_ary);

            if ( strpos($userdata['notifs'], '[ex]') !== false ) {
                $open_subcats = ( sizeof($wherecatina) ? array_intersect($checked_sub_cats, $wherecatina) : array() );
                $open_subcats = ( sizeof($open_subcats) ? true : false );
            }
            else {
                $open_subcats = false;
            }

            // www.phpBB-SEO.com SEO TOOLKIT BEGIN
            $seo->set_cat_url($cat_id, $cat_ary[$cat_id]['name']);
            // www.phpBB-SEO.com SEO TOOLKIT END

            if ( $category == $cat_id ) {
                $current_cat_name = $cat_ary[$cat_id]['name'];
            }

            $template->assign_block_vars('cats_row.cats_col', array(
                    'U_CAT' => append_sid($root_path . 'browse.php?cat=' . $cat_id),
                    'CAT_ID' => $cat_id,
                    'CAT_NAME' => $cat_ary[$cat_id]['name'],
                    'CHECKED' => ( in_array($cat_id, $wherecatina) ? ' checked="checked"' : ''),
                    'SHOW_SUBCATS' => ( $count ? true : false ),
                    'OPEN_SUBCATS' => $open_subcats
            ));
            if ( $col == $cats_split_row ) {
                $col = 0;
                $row++;
            }
            else {
                $col++;
            }

            $parent_cat_name = $cat_ary[$cat_id]['name'];

            unset($cat_ary[$cat_id]);
            if ( $count ) {

                foreach( $cat_ary AS $key => $sub_ary ) {

                    // www.phpBB-SEO.com SEO TOOLKIT BEGIN
                    $seo->set_cat_url($key, $sub_ary['name']);
                    // www.phpBB-SEO.com SEO TOOLKIT END

                    if ( $category == $key ) {
                        $current_cat_name = $parent_cat_name . ' --> ' . $sub_ary['name'];
                    }

                    $template->assign_block_vars('cats_row.cats_col.subcats_row', array(
                         'U_CAT' => append_sid($root_path . 'browse.php?cat=' . $key),
                        'CAT_ID' => $key,
                        'CAT_NAME' => $sub_ary['name'],
                        'CHECKED' => ( in_array($key, $wherecatina) ? ' checked="checked"' : '')
                    ));
                }
            }
        }
        else {
            $not_in_cats = array_merge(array_keys($cat_ary), $not_in_cats);
        }
    }
    if ( $col ) {
        $template->assign_block_vars('cats_row.colspan', array(
            'CATS_COLSPAN' => ( $catsperrow - $col )  )
         );
    }
}

if ( sizeof($not_in_cats) ) {
    $wherea['t.category'][] = ' NOT IN (' . implode(', ', $not_in_cats) . ')';
}

if ( $searchstr && defined('SPHINX_SEARCH') ) {
    require($root_path . 'include/search/sphinx/sphinxapi.php');

    $cl = new SphinxClient();
    $cl->SetServer( "localhost", 3312 );

    switch ( $search_in ) {
    default:
        $query = '@(name,filename)';
        $cl->SetFieldWeights(array('name' => 100, 'tag_name' => 50, 'descr' => 20, 'filename' => 10));
        break;

    case 2:
        $query = '@(descr,name)';
        $cl->SetFieldWeights(array('descr' => 100, 'name' => 20, 'tag_name' => 20, 'filename' => 10));
        break;

    case 3:
        $query = '@tag_name';
        $cl->SetFieldWeights(array('name' => 0, 'descr' => 0, 'filename' => 0, 'tag_name' => 10000));
        break;
    }

    $cl->SetMatchMode(SPH_MATCH_EXTENDED2);
    $cl->SetSortMode(SPH_SORT_RELEVANCE);
    $cl->SetLimits(0, 10000, 10000);

    $punct = array('+',',','.','-','"','\'','&','!','?',':',';','#','~','=','/','^','(',')','_','<','>');
    $clSearchstr = str_replace($punct, ' ', $searchstr);
    $result = $cl->Query($query . ' ' . $clSearchstr);

    if ( !empty($result['matches']) ) {
    $search_ids = array_keys($result['matches']);
    $wherea['t.fid'][] = ' IN (' . implode(', ', $search_ids) . ')';
    $addparam[] = 'search=' . urlencode($searchstr);
    $addparam[] = 'search_in=' . $search_in;
    }

    if ( !$sort ) {
    $orderby = 'FIELD(`fid`, ' . implode(',',$search_ids) . ')';
    }
}
else {

if ( $searchstr || $search_id ) {

    //flood control
    if ( $config['search_flood_interval'] && !$search_id ) {
        $where_sql = ( $userdata['uid'] == ANONYMOUS ) ? "se.session_ip = '$user_ip'" : 'se.session_user_id = ' . $userdata['uid'];
        $sql = 'SELECT MAX(sr.search_time) AS last_search_time
                FROM ' . SEARCH_TABLE . ' sr, ' . SESSIONS_TABLE . " se
                WHERE sr.session_id = se.session_id
                AND $where_sql";
        $result = $db->sql_query($sql);

        if ( $row = $db->sql_fetchrow($result) ) {
            if ( $row['last_search_time'] > 0 && ( $current_time - $row['last_search_time']) < $config['search_flood_interval'] )
               {
                $wait_time = $config['search_flood_interval'] - ( $current_time - $row['last_search_time'] );
                   trigger_error(sprintf($lang['search_flood_error'], $wait_time));
              }
         }
     }

     if ( !$search_id ) {

         $add_where = array();
         if ( sizeof($wherea) ) {
             foreach ( $wherea AS $key => $vals ) {
                 foreach ( $vals AS $_null => $val ) {
                     $add_where[] =  $key . ' ' . $val;
                 }
             }
         }

         switch ( $search_in ) {
             case 3:
                 $where_search = 'tg.tag_name';
                 $sql = 'SELECT t.fid AS id FROM ' . TORRENTS_TABLE . ' t LEFT JOIN ' . TAGS_TABLE . ' tg ON (t.fid = tg.tag_for_id)';
                 $add_where[] = 'tg.tag_type = ' . TYPE_TORRENT;
                 $strict = true;
                 $searchstr = rawurldecode($searchstr);
                 //$searchstr = str_replace('+', ' ', rawurldecode($searchstr)); //strange bug O_o
             break;

             case 2:
                 $where_search = 't.descr';
                 $sql = 'SELECT t.fid AS id FROM ' . TORRENTS_TABLE . ' t';
                 $strict = false;
             break;

             default:
                 $where_search = 't.name';
                 $sql = 'SELECT t.fid AS id FROM ' . TORRENTS_TABLE . ' t';
                 $strict = false;
             break;
         }

         $search_ids = search_text_in_db($searchstr, $sql, $where_search, $add_where, $strict);

        if ( sizeof($search_ids) ) {
            $wherea['t.fid'][] = ' IN (' . implode(', ', $search_ids) . ')';
        }
    }
    else {
        $sql = 'SELECT search_array
                FROM ' . SEARCH_TABLE . ' sr, ' . SESSIONS_TABLE . " se
                WHERE sr.session_id = se.session_id
                AND search_id = '" . $db->sql_escape($search_id) . "'";
        $result = $db->sql_query($sql);
        $search_ids = ( $row = $db->sql_fetchrow($result) ) ? unserialize($row['search_array']) : array();

        if ( sizeof($search_ids) ) {
            $wherea['t.fid'][] = ' IN (' . implode(', ', $search_ids) . ')';
        }
        $addparam[] = 'search=' . urlencode($searchstr);
        $addparam[] = 'search_id=' . $search_id;
    }

    //if ( $config['search_flood_interval'] && !$search_id ) {
    if ( !$search_id ) {
        $search_id = md5(dss_rand());
        $result_array = serialize($search_ids);

        $sql = "UPDATE " . SEARCH_TABLE . "
                SET search_id = '" . $db->sql_escape($search_id) . "', search_time = " . $current_time . ", search_array = '" . $db->sql_escape($result_array) . "'
                WHERE session_id = '" . $userdata['session_id'] . "'";
        $db->sql_query($sql);

        if ( !$db->sql_affectedrows() ) {
            $sql = 'INSERT INTO ' . SEARCH_TABLE . ' (search_id, session_id, search_time, search_array) VALUES(\'' . $db->sql_escape($search_id) . '\', \'' . $userdata['session_id'] . '\', ' . $current_time . ', \'' . $db->sql_escape($result_array) . '\')';
            $db->sql_query($sql);
        }

        if ( sizeof($search_ids) ) {
            $wherea['t.fid'][] = ' IN (' . implode(', ', $search_ids) . ')';
        }
        $addparam[] = 'search=' . urlencode($searchstr);
        $addparam[] = 'search_id=' . $search_id;
     }

}
}
$count = sizeof($search_ids);

//begin tags
require_once($root_path . 'include/class.tags.php');
$tags = tags::tag_cloud_for_cat($wherecatina);
$show_tags_cloud = sizeof($tags);</span>
<span class="code-lang">
foreach ( $tags AS $_null => $tag_ary ) {
    $template->assign_block_vars('tags_row', array(
        'TAG_NAME' => $tag_ary['tag_name'],
        'TAG_SIZE' => $tag_ary['size'],
        'U_TAG' => append_sid($root_path . 'browse.php?search_in=3&amp;search=' . $tag_ary['enc_tag_name']),
    ));
}
//end tags

$where = _build_where($wherea);

//$where = ( sizeof($wherea) ? 'WHERE ' . implode(' AND ', $wherea) : '' );

if ( !$searchstr ) {</span>
<span class="code-keyword">    $sql_array['SELECT'] = 'COUNT(*) AS count';
    $sql_array['FROM'] = array(TORRENTS_TABLE    => 't');
    $sql_array['WHERE'] = $where;

    $sql = $db->sql_build_query('SELECT', $sql_array);

    $result = $db->sql_query($sql);
    $count = ( $row = $db->sql_fetchrow($result) ) ? $row['count'] : 0;
}
$torrentsperpage = ( $userdata['torrentsperpage'] ? $userdata['torrentsperpage'] : 40 );</span>
<span class="code-lang">
if ( $count ) {
    $wherea['t.owner'][] = ' = u.uid';
    $back_url = $addparam;

    $where = _build_where($wherea);

    $addparam = ( $addparam ? implode('&amp;', $addparam) . '&amp;' : '' );

    list($pagertop, $pagerbottom, $offset, $limit) = pager($torrentsperpage, $count, 'browse.php?' . $addparam);

    $sql_array['SELECT'] = 't.fid, t.category, t.leechers, t.seeders, t.name, t.completed, t.free, t.size, t.ctime, t.comments, t.numfiles, t.owner, t.hidden, t.numratings, t.ratingsum, t.banned, t.hidden, t.moderated, u.privacy, u.parked, u.name AS username, u.title, u.class, u.donor, u.name_append, u.enabled, u.warneduntil, u.uid';
    $sql_array['FROM'] = array(TORRENTS_TABLE    => 't', USERS_TABLE => 'u');
    $sql_array['WHERE'] = $where;
    $sql_array['ORDER_BY'] = $orderby;

    $sql = $db->sql_build_query('SELECT', $sql_array);
    $result = $db->sql_query_limit($sql, $limit, $offset);
}
else {
    unset($result);
}

$incldead_ary = array(</span>
<span class="code-lang">    0 => $lang['include_dead'],
    1 => $lang['active'],
    2 => $lang['only_dead'],
    3 => $lang['free'],
    9 => $lang['free_silver'],
    10 => $lang['free_bronze'],
    4 => $lang['without_seed']
);

if ( $userdata['class'] >= $config['min_class_allow_upload'] && $userdata['session_logged_in'] ) {
    $incldead_ary[5] = $lang['my_torrents'];
}

if ( $userdata['hiddentorrents'] || $userdata['class'] >= UC_MODERATOR ) {
    $incldead_ary[6] = $lang['only_hidden'];
}

if ( $userdata['class'] >= UC_MODERATOR ) {
    $incldead_ary[7] = $lang['only_banned'];
    $incldead_ary[8] = $lang['only_not_moderated'];
}

$incldead_select = '<select name="incldead">';</span>
<span class="code-lang">foreach ( $incldead_ary AS $_key => $_val ) {
    $incldead_select .= '<option value="' . $_key . '"' . ( $incldead == $_key ? ' selected="selected"' : '' ) . '>' . $_val . '</option>';
}
$incldead_select .= '</select>';

$search_in_ary = array(1 => $lang['name'], 2 => $lang['description'], 3 => $lang['tags']);
$search_in_select  = '<select name="search_in">';</span>
<span class="code-lang">foreach ( $search_in_ary AS $_key => $_val ) {
    $search_in_select .= '<option value="' . $_key . '"' . ( $search_in === $_key ? ' selected="selected"' : '' ) . '>' . $_val . '</option>';
}
$search_in_select .= '</select>';</span>
<span class="code-lang">
if ( $page ) {
    $back_url[] = 'page=' . $page;
}

if ( sizeof($back_url) ) {
    $back_link = '';
    $back_link_params = $back_url;

    foreach ( $back_url AS $_null => $value ) {
        list($param, $val) = explode('=', $value);
        $back_link .= ( $back_link ? '&' : '' ) . $param . '=' . urlencode($val);
    }
    $back_link = base64_encode($back_link);
}
else {
    $back_link = '';
}

$ary = array();</span>
<span class="code-lang">
if ( $count ) {
    while ( $row = $db->sql_fetchrow($result) ) {
        $ary[] = $row;
    }
    torrenttable($ary);
}

$template->assign_vars(array(</span>
<span class="code-lang">    'S_BROWSE_ACTION' => append_sid($root_path . 'browse.php'),
    'U_SHOW_ALL' => append_sid($root_path . 'browse.php?all=1'),
    'INCLDEAD_SELECT' => $incldead_select,
    'SEARCH_IN_SELECT' => $search_in_select,
    'SEARCH_STRING' => $searchstr,
    'SEARCH_RESULTS' => sprintf($lang['search_results'], $searchstr),
    'PAGERBOTTOM' => ( isset($pagerbottom) ? $pagerbottom : '' ),
    'PAGERTOP' => ( isset($pagertop) ? $pagertop : '' ),
    'BACK_LINK' => $back_link,

    'FOUND' => sizeof($ary),

    'SHOW_TAGS_CLOUD' => $show_tags_cloud,
));

if ( $searchstr ) {
    stdhead(sprintf($lang['search_results'], $searchstr), false);
}
else {
    $page_title = $lang['browse'] . ( $current_cat_name ? ' &quot;' . $current_cat_name . '&quot;' : '' );
    stdhead($page_title, false);
}

$template->set_filenames(array(</span>
<span class="code-lang">    'body' => 'browse.html'
));
stdfoot();
?>