1234567891011121314151617181920212223242526272829303132333435363738 |
- <?php
- /* For licensing terms, see /dokeos_license.txt */
- $language_file = array('registration','messages','userInfo','admin');
- $cidReset = true;
- require '../inc/global.inc.php';
- $track_online_table = Database::get_statistic_table(TABLE_STATISTIC_TRACK_E_ONLINE);
- $tbl_my_user = Database :: get_main_table(TABLE_MAIN_USER);
- $tbl_my_user_friend = Database :: get_main_table(TABLE_MAIN_USER_FRIEND);
- $search=Database::escape_string(Security::remove_XSS($_POST['search']));
- $current_date=date('Y-m-d H:i:s',time());
- $html_form='<select id="id_search_name" name="id_search_name" size="8"" style="width:350px;">';
- $user_id = api_get_user_id();
- $is_western_name_order = api_is_western_name_order();
- if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
-
- $sql = 'SELECT DISTINCT u.user_id as id, '.($is_western_name_order ? 'concat(u.firstname," ",u.lastname," ","( ",u.email," )")' : 'concat(u.lastname," ",u.firstname," ","( ",u.email," )")').' as name
- FROM '.$tbl_my_user_friend.' uf ' .
- 'INNER JOIN '.$tbl_my_user.' AS u ON uf.friend_user_id = u.user_id ' .
- 'WHERE relation_type<>6 AND friend_user_id<>'.(int)$user_id.' AND '.($is_western_name_order ? 'concat(u.firstname, " ", u.lastname)' : 'concat(u.lastname, " ", u.firstname)').' like CONCAT("%","'.$search.'","%") ';
-
-
- } elseif (api_get_setting('allow_social_tool')=='false' && api_get_setting('allow_message_tool')=='true') {
- $valid=api_get_setting('time_limit_whosonline');
-
- $sql='SELECT DISTINCT u.user_id as id, '.($is_western_name_order ? 'concat(u.firstname," ",u.lastname," ","( ",u.email," )")' : 'concat(u.lastname," ",u.firstname," ","( ",u.email," )")').' as name
- FROM '.$tbl_my_user.' u INNER JOIN '.$track_online_table.' t ON u.user_id=t.login_user_id
- WHERE DATE_ADD(login_date,INTERVAL "'.$valid.'" MINUTE) >= "'.$current_date.'" AND '.($is_western_name_order ? 'concat(u.firstname, " ", u.lastname)' : 'concat(u.lastname, " ", u.firstname)').' like CONCAT("%","'.$search.'","%") ';
- }
- $res=Database::query($sql,__FILE__,__LINE__);
- while ($row=Database::fetch_array($res,'ASSOC')) {
- $html_form.='<option value="'.$row['id'].'">'.api_xml_http_response_encode($row['name']).'</option>';
- }
- $html_form.='</select>';
- echo $html_form;
- ?>
|