X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fsearch.php;h=a8372599916c4e574b0faca3e11fc1080184a651;hb=0c9cc29a51941eb572bf16fd5489d0947d47d033;hp=251dd4778f37b52545d2ee817e408ba2df47d617;hpb=d9f23dbb20098db18c495cf39237662c1a6adca3;p=friendica.git
diff --git a/mod/search.php b/mod/search.php
index 251dd4778f..a837259991 100644
--- a/mod/search.php
+++ b/mod/search.php
@@ -61,7 +61,7 @@ function search_init(&$a) {
}
}
if(x($_GET,'remove') && $search) {
- q("delete from `search` where `uid` = %d and `term` = '%s' limit 1",
+ q("DELETE FROM `search` WHERE `uid` = %d AND `term` = '%s' LIMIT 1",
intval(local_user()),
dbesc($search)
);
@@ -95,16 +95,42 @@ function search_content(&$a) {
}
if(get_config('system','local_search') AND !local_user()) {
- notice(t('Public access denied.').EOL);
- return;
- //http_status_exit(403);
- //killme();
+ http_status_exit(403,
+ array("title" => t("Public access denied."),
+ "description" => t("Only logged in users are permitted to perform a search.")));
+ killme();
+ //notice(t('Public access denied.').EOL);
+ //return;
}
- nav_set_selected('search');
-
+ if (get_config('system','permit_crawling') AND !local_user()) {
+ // Default values:
+ // 10 requests are "free", after the 11th only a call per minute is allowed
+
+ $free_crawls = intval(get_config('system','free_crawls'));
+ if ($free_crawls == 0)
+ $free_crawls = 10;
+
+ $crawl_permit_period = intval(get_config('system','crawl_permit_period'));
+ if ($crawl_permit_period == 0)
+ $crawl_permit_period = 10;
+
+ $remote = $_SERVER["REMOTE_ADDR"];
+ $result = Cache::get("remote_search:".$remote);
+ if (!is_null($result)) {
+ $resultdata = json_decode($result);
+ if (($resultdata->time > (time() - $crawl_permit_period)) AND ($resultdata->accesses > $free_crawls)) {
+ http_status_exit(429,
+ array("title" => t("Too Many Requests"),
+ "description" => t("Only one search per minute is permitted for not logged in users.")));
+ killme();
+ }
+ Cache::set("remote_search:".$remote, json_encode(array("time" => time(), "accesses" => $resultdata->accesses + 1)), CACHE_HOUR);
+ } else
+ Cache::set("remote_search:".$remote, json_encode(array("time" => time(), "accesses" => 1)), CACHE_HOUR);
+ }
- $o = '
' . t('Search') . '
';
+ nav_set_selected('search');
if(x($a->data,'search'))
$search = notags(trim($a->data['search']));
@@ -117,8 +143,13 @@ function search_content(&$a) {
$search = ((x($_GET,'tag')) ? notags(trim(rawurldecode($_GET['tag']))) : '');
}
-
- $o .= search($search,'search-box','/search',((local_user()) ? true : false), false);
+ // contruct a wrapper for the search header
+ $o .= replace_macros(get_markup_template("content_wrapper.tpl"),array(
+ 'name' => "search-header",
+ '$title' => t("Search"),
+ '$title_size' => 3,
+ '$content' => search($search,'search-box','search',((local_user()) ? true : false), false)
+ ));
if(strpos($search,'#') === 0) {
$tag = true;
@@ -131,7 +162,7 @@ function search_content(&$a) {
return dirfind_content($a);
}
- if(x($_GET,'search-option'))
+ if(x($_GET,'search-option'))
switch($_GET['search-option']) {
case 'fulltext':
break;
@@ -160,17 +191,14 @@ function search_content(&$a) {
if($tag) {
logger("Start tag search for '".$search."'", LOGGER_DEBUG);
- $r = q("SELECT STRAIGHT_JOIN `item`.`uri`, `item`.*, `item`.`id` AS `item_id`,
- `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`alias`, `contact`.`rel`,
- `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`,
- `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid`
+ $r = q("SELECT %s
FROM `term`
- INNER JOIN `item` ON `item`.`id`=`term`.`oid`
- INNER JOIN `contact` ON `contact`.`id` = `item`.`contact-id` AND NOT `contact`.`blocked` AND NOT `contact`.`pending`
- WHERE `item`.`visible` AND NOT `item`.`deleted` AND NOT `item`.`moderated`
- AND (`term`.`uid` = 0 OR (`term`.`uid` = %d AND NOT `term`.`global`)) AND `term`.`otype` = %d AND `term`.`type` = %d AND `term`.`term` = '%s'
+ STRAIGHT_JOIN `item` ON `item`.`id`=`term`.`oid` %s
+ WHERE %s AND (`term`.`uid` = 0 OR (`term`.`uid` = %d AND NOT `term`.`global`)) AND `term`.`otype` = %d AND `term`.`type` = %d AND `term`.`term` = '%s'
ORDER BY term.created DESC LIMIT %d , %d ",
- intval(local_user()), intval(TERM_OBJ_POST), intval(TERM_HASHTAG), dbesc(protect_sprintf($search)),
+ item_fieldlists(), item_joins(), item_condition(),
+ intval(local_user()),
+ intval(TERM_OBJ_POST), intval(TERM_HASHTAG), dbesc(protect_sprintf($search)),
intval($a->pager['start']), intval($a->pager['itemspage']));
} else {
logger("Start fulltext search for '".$search."'", LOGGER_DEBUG);
@@ -181,17 +209,14 @@ function search_content(&$a) {
$sql_extra = sprintf(" AND `item`.`body` REGEXP '%s' ", dbesc(protect_sprintf(preg_quote($search))));
}
- $r = q("SELECT STRAIGHT_JOIN `item`.`uri`, `item`.*, `item`.`id` AS `item_id`,
- `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`alias`, `contact`.`rel`,
- `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`,
- `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid`
- FROM `item`
- INNER JOIN `contact` ON `contact`.`id` = `item`.`contact-id` AND NOT `contact`.`blocked` AND NOT `contact`.`pending`
- WHERE `item`.`visible` AND NOT `item`.`deleted` AND NOT `item`.`moderated`
- AND (`item`.`uid` = 0 OR (`item`.`uid` = %s AND (`item`.`private` OR NOT `item`.`network` IN ('%s', '%s', '%s'))))
+
+ $r = q("SELECT %s
+ FROM `item` %s
+ WHERE %s AND (`item`.`uid` = 0 OR (`item`.`uid` = %s AND NOT `item`.`global`))
$sql_extra
- GROUP BY `item`.`uri` ORDER BY `item`.`id` DESC LIMIT %d , %d ",
- intval(local_user()), dbesc(NETWORK_DFRN), dbesc(NETWORK_OSTATUS), dbesc(NETWORK_DIASPORA),
+ GROUP BY `item`.`uri` ORDER BY `item`.`id` DESC LIMIT %d , %d",
+ item_fieldlists(), item_joins(), item_condition(),
+ intval(local_user()),
intval($a->pager['start']), intval($a->pager['itemspage']));
}
@@ -204,7 +229,7 @@ function search_content(&$a) {
if($tag)
$title = sprintf( t('Items tagged with: %s'), $search);
else
- $title = sprintf( t('Search results for: %s'), $search);
+ $title = sprintf( t('Results for: %s'), $search);
$o .= replace_macros(get_markup_template("section_title.tpl"),array(
'$title' => $title