Coding standards
Security in ResourceSpace
Developer reference
Database
Action functions
Admin functions
Ajax functions
Annotation functions
API functions
Collections functions
Comment functions
Config functions
CSV export functions
Dash functions
Debug functions
Encryption functions
Facial recognition functions
File functions
General functions
Language functions
Log functions
Login functions
Message functions
Migration functions
Node functions
PDF functions
Plugin functions
Render functions
Reporting functions
Request functions
Research functions
Slideshow functions
Theme permission functions
User functions
Video functions
Database functions
Metadata functions
Resource functions
Search functions
Map functions
Job functions
Tab functions

search_special()

Parameters

ColumnTypeDefaultDescription
$search
$sql_join
$fetchrows
$sql_prefix
$sql_suffix
$order_by
$orig_order
$select
$sql_filter
$archive
$return_disk_usage
$return_refs_only false
$returnsql false

Location

include/search_functions.php lines 1182 to 1744

Definition

 
function search_special($search,$sql_join,$fetchrows,$sql_prefix,$sql_suffix,$order_by,$orig_order,$select,$sql_filter,$archive,$return_disk_usage,$return_refs_only=false, $returnsql=false)
    {
    # Process special searches. These return early with results.
    global $FIXED_LIST_FIELD_TYPES, $lang, $k, $USER_SELECTION_COLLECTION, $date_field;
    global $allow_smart_collections, $smart_collections_async;
    global $config_search_for_number,$userref;
    
    if(!is_a($sql_join,"PreparedStatementQuery") && trim($sql_join == ""))
        {
        $sql_join = new PreparedStatementQuery();
        }
    if(!is_a($sql_filter,"PreparedStatementQuery") && trim($sql_filter == ""))
        {
        $sql_filter = new PreparedStatementQuery();
        }
    $sql = new PreparedStatementQuery();
    # View Last
    if (substr($search,0,5)=="!last") 
        {
        # Replace r2.ref with r.ref for the alternative query used here.

        $order_by=str_replace("r.ref","r2.ref",$order_by);
        if ($orig_order=="relevance")
            {
            # Special case for ordering by relevance for this query.
            $direction=((strpos($order_by,"DESC")===false)?"ASC":"DESC");
            $order_by="r2.ref " . $direction;
            }
        
        # add date field, if access allowed, for use in $order_by
        if(metadata_field_view_access($date_field) && strpos($select, "field" . $date_field) === false )
            {
            $select .= ", field{$date_field} ";
            }
        
        # Extract the number of records to produce
        $last=explode(",",$search);
        $last=str_replace("!last","",$last[0]);

        # !Last must be followed by an integer. SQL injection filter.
        if (is_int_loose($last))
            {
            $last=(int)$last;
            } 
        else
            {
            $last=1000;
            $search="!last1000";
            }
        
        # Fix the ORDER BY for this query (special case due to inner query)
        $order_by=str_replace("r.rating","rating",$order_by);
        $sql->sql = $sql_prefix . "SELECT DISTINCT *,r2.total_hit_count score FROM (SELECT $select FROM resource r " . $sql_join->sql . " WHERE " . $sql_filter->sql . " ORDER BY ref DESC LIMIT $last ) r2 ORDER BY $order_by" . $sql_suffix;
        $sql->parameters = array_merge($sql_join->parameters,$sql_filter->parameters);
        }
   
    // View Resources With No Downloads
    elseif (substr($search,0,12)=="!nodownloads") 
        {
        if ($orig_order=="relevance") {$order_by="ref DESC";}
        $sql->sql = $sql_prefix . "SELECT r.hit_count score, $select FROM resource r " . $sql_join->sql . "  WHERE " . $sql_filter->sql . " AND r.ref NOT IN (SELECT DISTINCT object_ref FROM daily_stat WHERE activity_type='Resource download') GROUP BY r.ref ORDER BY $order_by" . $sql_suffix;
        $sql->parameters = array_merge($sql_join->parameters,$sql_filter->parameters);
        }
    
    // Duplicate Resources (based on file_checksum)
    elseif (substr($search,0,11)=="!duplicates") 
        {
        // Extract the resource ID
        $ref=explode(" ",$search);
        $ref=str_replace("!duplicates","",$ref[0]);
        $ref=explode(",",$ref); // just get the number
        $ref=$ref[0];
        if ($ref!="") 
            {
            # Find duplicates of a given resource
            if (is_int_loose($ref)) 
                {
                $sql->sql="SELECT DISTINCT r.hit_count score, $select FROM resource r " . $sql_join->sql . "
                    WHERE " . $sql_filter->sql . " AND file_checksum <> '' AND file_checksum IS NOT NULL 
                                      AND file_checksum = (SELECT file_checksum FROM resource WHERE ref=$ref AND (file_checksum <> '' AND file_checksum IS NOT NULL) ) 
                    ORDER BY file_checksum, ref";   
                $sql->parameters = array_merge($sql_join->parameters,$sql_filter->parameters); 
                }
            else
                {
                # Given resource is not a valid identifier
                return array();
                }
            }
        else
            {
            # Find all duplicate resources
            $sql->sql = $sql_prefix . "SELECT DISTINCT r.hit_count score, $select FROM resource r " . $sql_join->sql . " WHERE " . $sql_filter->sql . " AND file_checksum IN (SELECT file_checksum FROM (SELECT file_checksum FROM resource WHERE file_checksum <> '' AND file_checksum IS NOT null GROUP BY file_checksum having count(file_checksum)>1)r2) ORDER BY file_checksum, ref" . $sql_suffix;
            $sql->parameters = array_merge($sql_join->parameters,$sql_filter->parameters);
            }
        }
    
    # View Collection
    elseif (substr($search, 0, 11) == '!collection')
        {
        global $userref,$ignore_collection_access;

        $colcustperm = $sql_join;
        $colcustfilter = $sql_filter; // to avoid allowing this sql_filter to be modified by the $access_override search in the smart collection update below!!!
             
        # Special case if a key has been provided.
        if($k != '')
            {
            $sql_filter->sql = 'r.ref > 0';
            $sql_filter->parameters = [];
            }

        # Extract the collection number
        $collection = explode(' ', $search);
        $collection = str_replace('!collection', '', $collection[0]);
        $collection = explode(',', $collection); // just get the number
        $collection = (int)$collection[0];

        # Check access
        $validcollections = [];
        if(upload_share_active() !== false)
            {
            $validcollections = get_session_collections(get_rs_session_id(), $userref);
            }
        else
            {
            $user_collections = array_column(get_user_collections($userref,"","name","ASC",-1,false), "ref");
            $public_collections = array_column(search_public_collections('', 'name', 'ASC', true, false), 'ref');
            # include collections of requested resources
            $request_collections = array();
            if (checkperm("R") || checkperm("Rb"))
                {
                include_once('request_functions.php');
                $request_collections = array_column(get_requests(), 'collection');
                }
            # include collections of research resources
            $research_collections = array();
            if (checkperm("r"))
                {
                include_once('research_functions.php');
                $research_collections = array_column(get_research_requests(), 'collection');
                }
            $validcollections = array_unique(array_merge($user_collections, array($USER_SELECTION_COLLECTION), $public_collections, $request_collections, $research_collections));
            }

        // Attach the negated user reference special collection
        $validcollections[] = (0 - $userref);
            
        if(in_array($collection, $validcollections) || featured_collection_check_access_control($collection) || $ignore_collection_access)
            {
            if(!collection_readable($collection))
                {
                return array();
                }
            }
        elseif($k == "" || upload_share_active() !== false)
            {
            return [];
            }
        
        if($allow_smart_collections)
            {
            global $smartsearch_ref_cache;
            if(isset($smartsearch_ref_cache[$collection]))
                {
                $smartsearch_ref = $smartsearch_ref_cache[$collection]; // this value is pretty much constant
                }
            else
                {
                $smartsearch_ref = ps_value('SELECT savedsearch value FROM collection WHERE ref = ?',['i',$collection], '');
                $smartsearch_ref_cache[$collection] = $smartsearch_ref;
                }

            global $php_path;
            if($smartsearch_ref != '' && !$return_disk_usage)
                {
                if($smart_collections_async && isset($php_path) && file_exists($php_path . '/php'))
                    {
                    exec($php_path . '/php ' . dirname(__FILE__) . '/../pages/ajax/update_smart_collection.php ' . escapeshellarg($collection) . ' ' . '> /dev/null 2>&1 &');
                    }
                else 
                    {
                    include (dirname(__FILE__) . '/../pages/ajax/update_smart_collection.php');
                    }
                }   
            }

        $sql->sql = $sql_prefix . "SELECT DISTINCT c.date_added,c.comment,c.purchase_size,c.purchase_complete,r.hit_count score,length(c.comment) commentset, $select FROM resource r  join collection_resource c on r.ref=c.resource " . $colcustperm->sql . " WHERE c.collection = ? AND (" . $colcustfilter->sql . ") GROUP BY r.ref ORDER BY $order_by" . $sql_suffix;
        $sql->parameters = array_merge($colcustperm->parameters,["i",$collection],$colcustfilter->parameters);
        $collectionsearchsql=hook('modifycollectionsearchsql','',array($sql));

        if($collectionsearchsql)
            {
            $sql=$collectionsearchsql;
            }
        }

    # View Related - Pushed Metadata (for the view page)
    elseif (substr($search,0,14)=="!relatedpushed")
        {
        # Extract the resource number
        $resource=explode(" ",$search);$resource=str_replace("!relatedpushed","",$resource[0]);
        $order_by=str_replace("r.","",$order_by); # UNION below doesn't like table aliases in the ORDER BY.
        
        $sql->sql = $sql_prefix . "SELECT DISTINCT r.hit_count score,rt.name resource_type_name, $select FROM resource r join resource_type rt on r.resource_type=rt.ref AND rt.push_metadata=1 join resource_related t on (t.related=r.ref AND t.resource = ?) " . $sql_join->sql . " WHERE 1=1 AND " . $sql_filter->sql . " GROUP BY r.ref 
        UNION
        SELECT DISTINCT r.hit_count score, rt.name resource_type_name, $select FROM resource r join resource_type rt on r.resource_type=rt.ref AND rt.push_metadata=1 join resource_related t on (t.resource=r.ref AND t.related= ?) " . $sql_join->sql . "  WHERE 1=1 AND " . $sql_filter->sql . " GROUP BY r.ref 
        ORDER BY $order_by" . $sql_suffix;
        $sql->parameters = array_merge(["i",$resource],$sql_join->parameters,$sql_filter->parameters,["i",$resource],$sql_join->parameters,$sql_filter->parameters);
        }

    # View Related
    elseif (substr($search,0,8)=="!related")
        {
        # Extract the resource number
        $resource=explode(" ",$search);$resource=str_replace("!related","",$resource[0]);
        $order_by=str_replace("r.","",$order_by); # UNION below doesn't like table aliases in the ORDER BY.

        global $pagename, $related_search_show_self;
        $sql_self = new PreparedStatementQuery();
        if ($related_search_show_self && $pagename == 'search')
            {
            $sql_self->sql = " SELECT DISTINCT r.hit_count score, $select FROM resource r " .  This site uses cookies for interactivity and analytics      Accept cookies