connect_errno) {
die("Database connection failed: " . $mysqli->connect_error);
}
// Sicherer Eingabeschutz
function sanitize_input($input) {
return htmlspecialchars(trim($input), ENT_QUOTES, 'UTF-8');
}
// Funktionen
function oscat($catid) {
switch ($catid) {
case "0": return "Any";
case "18": return "Discussion";
case "19": return "Sports";
case "20": return "Live Music";
case "22": return "Commercial";
case "23": return "Nightlife/Entertainment";
case "24": return "Games/Contests";
case "25": return "Pageants";
case "26": return "Education";
case "27": return "Arts and Culture";
case "28": return "Charity/Support Groups";
case "29": return "Miscellaneous";
default: return "Unknown";
}
}
function getosuser($FirstName, $LastName, $mysqli) {
$query = "SELECT * FROM userinfo WHERE FirstName = ? AND LastName = ?";
$stmt = $mysqli->prepare($query);
$stmt->bind_param("ss", $FirstName, $LastName);
$stmt->execute();
$result = $stmt->get_result();
return $result->fetch_assoc();
}
function uuid2name($uuid, $mysqli) {
$query = "SELECT * FROM userinfo WHERE PrincipalID = ?";
$stmt = $mysqli->prepare($query);
$stmt->bind_param("s", $uuid);
$stmt->execute();
$result = $stmt->get_result();
return $result->fetch_assoc();
}
function regionname($ruuid, $mysqli) {
$query = "SELECT regionName FROM regions WHERE uuid = ?";
$stmt = $mysqli->prepare($query);
$stmt->bind_param("s", $ruuid);
$stmt->execute();
$result = $stmt->get_result();
$row = $result->fetch_assoc();
return $row['regionName'] ?? null;
}
// Suche ausführen
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$search_type = sanitize_input($_POST['search_type'] ?? '');
$search_query = sanitize_input($_POST['search_query'] ?? '');
if ($search_query !== '') {
switch ($search_type) {
case 'userinfo':
$query = "SELECT * FROM userinfo WHERE user LIKE ? OR avatar LIKE ?";
break;
case 'os_groups_groups':
$query = "SELECT * FROM os_groups_groups WHERE Name LIKE ? OR Location LIKE ?";
break;
case 'regions':
$query = "SELECT * FROM regions WHERE regionName LIKE ? OR serverIP LIKE ?";
break;
default:
$query = '';
}
if ($query) {
$stmt = $mysqli->prepare($query);
$search_param = "%$search_query%";
$stmt->bind_param("ss", $search_param, $search_param);
$stmt->execute();
$result = $stmt->get_result();
}
}
}
?>
<?= htmlspecialchars(SITE_NAME . ' ' . $title, ENT_QUOTES, 'UTF-8') ?>
Search Service
num_rows > 0): ?>
Search Results:
fetch_fields() as $field): ?>
| name) ?> |
fetch_assoc()): ?>
|
No results found.
close();
?>