query("SELECT * FROM $osmain.useraccounts WHERE FirstName = '$FirstName' AND LastName = '$LastName'"); $r = $q->fetch_array(MYSQLI_BOTH); $q->free(); return $r; } function uuid2name($uuid) { global $mysqli; global $osmain; $q2 = $mysqli->query("SELECT * FROM $osmain.useraccounts WHERE PrincipalID = '$uuid'"); $r2 = $q2->fetch_array(MYSQLI_BOTH); $q2->free(); return $r2; } function regionname($ruuid) { global $mysqli; global $osmain; $getregionq = $mysqli->query("SELECT * FROM $osmain.regions WHERE uuid = '$ruuid'"); $regionrow = $getregionq->fetch_array(MYSQLI_BOTH); $r3 = $regionrow['regionName']; $getregionq->free(); return $r3; } function regionip($UUID) { global $mysqli; global $osmain; $getregionq2 = $mysqli->query("SELECT * FROM $osmain.regions WHERE uuid = '$UUID'"); $regionrow2 = $getregionq2->fetch_array(MYSQLI_BOTH); $r4 = $regionrow2['serverIP']; $getregionq2->free(); return $r4; } function online($uuid) { global $mysqli; global $osmain; $oq = $mysqli->query("SELECT * FROM $osmain.griduser WHERE UserID = '$uuid'"); $or = $oq->fetch_array(MYSQLI_BOTH); $online = $or['Online']; $oq->free(); return $online; } function userspersim($sim) { global $mysqli; global $osmain; $simq = $mysqli->query("SELECT * FROM $osmain.presence WHERE RegionID = '$sim'"); $count = $simq->num_rows; $simq->close(); return $count; } function time2date($time) { $dt = new DateTime("@$time"); $r = $dt->format('M d Y g:ia T'); return $r; } function oscat($catid) { switch ($catid) { case "0": $r = "Any"; break; case "18": $r = "Discussion"; break; case "19": $r = "Sports"; break; case "20": $r = "Live Music"; break; case "22": $r = "Commercial"; break; case "23": $r = "Nightlife/Entertainment"; break; case "24": $r = "Games/Contests"; break; case "25": $r = "Pageants"; break; case "26": $r = "Education"; break; case "27": $r = "Arts and Culture"; break; case "28": $r = "Charity/Support Groups"; break; case "29": $r = "Miscellaneous"; break; } return $r; } // Sichere Eingabereinigung für Suchbegriffe // WICHTIG: Diese Funktion ersetzt NICHT Prepared Statements für SQL-Queries! function inputSanitization($s) { // Entferne potentiell gefährliche Zeichen für die Anzeige $s = trim($s); $s = strip_tags($s); $s = htmlspecialchars($s, ENT_QUOTES, 'UTF-8'); // Begrenzte Länge für Suchbegriffe $s = substr($s, 0, 100); return $s; } if (isset($_GET['search'])) { $search = inputSanitization($_GET['search']); $search = strtoupper($search); $searchlink = rawurlencode($search); }else{ $search = ""; $searchlink = "everything"; } if (isset($_GET['type'])) { $type = $_GET['type']; }else{ $type = ""; } if (isset($_GET['m'])) { $m = $_GET['m']; }else{ $m = ""; } if ($search) { $placeholder = "Searching for $search"; }else if (!$search) { $placeholder = "Search"; } $select = "selected"; if (!$m) { $m = "1"; } $eventcat = ""; $searchtitle = strtolower($search); $ptitle = "Searching for $searchtitle"; $PG = "PG"; $MATURE = "M"; $ADULT = "A"; ?>
|
query("SELECT * FROM $osmod.classifieds WHERE name LIKE '%$search%' OR description LIKE '%$search%' AND creationdate < '$now' AND expirationdate > '$now' AND classifiedflags < '$m' ORDER BY 'creationdate' DESC LIMIT 0,100");
while ($cn = $cq->fetch_array(MYSQLI_BOTH)) {
$creatoruuid = $cn['creatoruuid'];
$creationdate = $cn['creationdate'];
$expirationdate = $cn['expirationdate'];
$category = $cn['category'];
$name = $cn['name'];
$parceluuid = $cn['parceluuid'];
$description = $cn['description'];
$snapshotuuid = $cn['snapshotuuid'];
$simname = $cn['simname'];
$classifiedflags = $cn['classifiedflags'];
$creationdate = date("M d Y h:i a T",$creationdate);
$expirationdate = date("M d Y h:i a T",$expirationdate);
$parq = $mysqli->query("SELECT * FROM $osmod.allparcels WHERE parcelUUID = '$parceluuid'");
$parrow = $parq->fetch_array(MYSQLI_BOTH);
$regionid = $parrow['regionUUID'];
$parcelname = $parrow['parcelname'];
$loc = $parrow['landingpoint'];
$parq->free();
$simq = $mysqli->query("SELECT * FROM $osmain.regions WHERE uuid = '$regionid'");
$simr = $simq->fetch_array(MYSQLI_BOTH);
$sim = $simr['regionName'];
$simq->free();
if (!$loc) {
$locr = "128,128,25";
}else{
$locr = str_replace("/", ",", $loc);
}
$FL = uuid2name($creatoruuid);
$FName = $FL['FirstName'];
$LName = $FL['LastName'];
if ($classifiedflags == 0) {
$classifiedflags = "$PG";
}else if ($classifiedflags == 1) {
$classifiedflags = "$MATURE";
}else if ($classifiedflags == 2) {
$classifiedflags = "$ADULT";
}
if (!$snapshotuuid || $snapshotuuid == "00000000-0000-0000-0000-000000000000") {
$pic = "
$pic
$parcelname, $sim ($locr)
$eventinfo
$pic
$MaturePublish
$Charter
Total Members: $gmcount Enrollment: $join Created by $FName $LName
Area: $area $abouttext "; }else if (!$abouttext) { $fakelife = ""; } if ($MaturePublish == 0) { $MaturePublish = "$PG"; }else if ($MaturePublish == 1) { $MaturePublish = "$MATURE"; }else if ($MaturePublish == 2) { $MaturePublish = "$ADULT"; } if ($fakepic == "00000000-0000-0000-0000-000000000000" || !$fakepic) { $pic = "
$pic
$fakelife
$pic
$description |