Merge pull request #2132 from rabuzarus/0112_vier_css

[friendica.git] / mod / search.php

diff --git a/mod/search.php b/mod/search.php
index 339efc92db5750a075851e428424615aea91686e..c15dfae3fea8d981cf74efe685f9fef59078413f 100644 (file)
--- a/mod/search.php
+++ b/mod/search.php
@@ -1,4 +1,8 @@
 <?php
+require_once("include/bbcode.php");
+require_once('include/security.php');
+require_once('include/conversation.php');
+require_once('mod/dirfind.php');
 
 function search_saved_searches() {
 
@@ -90,11 +94,34 @@ function search_content(&$a) {
                return;
        }
 
+       if(get_config('system','local_search') AND !local_user()) {
+               http_status_exit(403,
+                               array("title" => t("Public access denied."),
+                                       "description" => t("Only logged in users are permitted to perform a search.")));
+               killme();
+               //notice(t('Public access denied.').EOL);
+               //return;
+       }
+
+       if (get_config('system','permit_crawling') AND !local_user()) {
+               // To-Do:
+               // - 10 requests are "free", after the 11th only a call per minute is allowed
+
+               $remote = $_SERVER["REMOTE_ADDR"];
+               $result = Cache::get("remote_search:".$remote);
+               if (!is_null($result)) {
+                       if ($result > (time() - 60)) {
+                               http_status_exit(429,
+                                               array("title" => t("Too Many Requests"),
+                                                       "description" => t("Only one search per minute is permitted for not logged in users.")));
+                               killme();
+                       }
+               }
+               Cache::set("remote_search:".$remote, time(), CACHE_HOUR);
+       }
+
        nav_set_selected('search');
 
-       require_once("include/bbcode.php");
-       require_once('include/security.php');
-       require_once('include/conversation.php');
 
        $o = '<h3>' . t('Search') . '</h3>';
 
@@ -110,16 +137,33 @@ function search_content(&$a) {
        }
 
 
-       $o .= search($search,'search-box','/search',((local_user()) ? true : false));
+       $o .= search($search,'search-box','/search',((local_user()) ? true : false), false);
 
        if(strpos($search,'#') === 0) {
                $tag = true;
                $search = substr($search,1);
        }
        if(strpos($search,'@') === 0) {
-               require_once('mod/dirfind.php');
                return dirfind_content($a);
        }
+       if(strpos($search,'!') === 0) {
+               return dirfind_content($a);
+       }
+
+        if(x($_GET,'search-option'))
+               switch($_GET['search-option']) {
+                       case 'fulltext':
+                               break;
+                       case 'tags':
+                               $tag = true;
+                               break;
+                       case 'contacts':
+                               return dirfind_content($a, "@");
+                               break;
+                       case 'forums':
+                               return dirfind_content($a, "!");
+                               break;
+               }
 
        if(! $search)
                return $o;