isadmin()) die('Zugriff verweigert'); $select='SELECT * '; $from='FROM '.BANLIST_TABLE; $where=''; //make sure the search query is 3 chars min...defaults to no query with warning message if($_REQUEST['a']=='search') { if(!$_REQUEST['query'] || strlen($_REQUEST['query'])<3) { $errors['err']='Suchbegriff muss mehr als 3 Zeichen lang sein.'; }else{ //Do the search $search=true; $qstr.='&a='.urlencode($_REQUEST['a']); $qstr.='&query='.urlencode($_REQUEST['query']); $searchTerm=trim($_REQUEST['query']); if(strpos($searchTerm,'@') && Validator::is_email($searchTerm)){ //pulling all tricks! $where=' WHERE email='.db_input($searchTerm); }else{ $where=' WHERE email LIKE \'%'.db_real_escape($searchTerm,false).'%\''; } } } //I admit this crap sucks...but who cares?? $sortOptions=array('date'=>'added','email'=>'email'); $orderWays=array('DESC'=>'DESC','ASC'=>'ASC'); //Sorting options... if($_REQUEST['sort']) { $order_column =$sortOptions[$_REQUEST['sort']]; } if($_REQUEST['order']) { $order=$orderWays[$_REQUEST['order']]; } $order_column=$order_column?$order_column:'added'; $order=$order?$order:'DESC'; $order_by=" ORDER BY $order_column $order "; $total=db_count('SELECT count(*) '.$from.' '.$where); $pagelimit=$thisuser->getPageLimit(); $pagelimit=$pagelimit?$pagelimit:PAGE_LIMIT; //true default...if all fails. $page=($_GET['p'] && is_numeric($_GET['p']))?$_GET['p']:1; $pageNav=new Pagenate($total,$page,$pagelimit); $pageNav->setURL('admin.php',$qstr.'&sort='.urlencode($_REQUEST['sort']).'&order='.urlencode($_REQUEST['order'])); //Ok..lets roll...create the actual query $query="$select $from $where $order_by LIMIT ".$pageNav->getStart().",".$pageNav->getLimit(); //echo $query; $banlist = db_query($query); $showing=db_num_rows($banlist)?$pageNav->showing():''; $result_type=($search)?'Suchergebnisse':'gesperrte Emailadressen'; $negorder=$order=='DESC'?'ASC':'DESC'; //Negate the sorting.. $showadd=($errors && $_POST['a']=='add')?true:false; ?>