Subversion-Projekte lars-tiefland.content-management

<?php

    /**
     * @package   Content-management
     * @author    Lars Tiefland <tiefland@weban.de>
     * @copyright 2010 Webagentur Niewerth
     * @license   propietary http://www.weban.de
     * @version   $Rev: 4003 $
     * @filesource
     * 
     */

    /**
     * 
     * @package   Content-management
     * @author    Lars Tiefland <tiefland@weban.de>
     * @copyright 2010 Webagentur Niewerth
     */

    require_once "../Online-Shop/connect2.php";
    require_once "Weban_Smarty.class.php";

    header( "Last-Modified: " . time() );
    // SVN: $Id: kundensuche.php 4003 2011-10-13 13:56:26Z erling $
    $input = filter_input_array( INPUT_POST, array( "id" =>
        FILTER_SANITIZE_NUMBER_INT, "Name1" => FILTER_SANITIZE_STRING, "PLZ" =>
        FILTER_SANITIZE_NUMBER_INT, "Ort" => FILTER_SANITIZE_STRING, "Name2" =>
        FILTER_SANITIZE_STRING, "E_Mail" => FILTER_SANITIZE_EMAIL,
        "suche_an" => FILTER_SANITIZE_NUMBER_INT ) );

    foreach ( $input as $key => $wert )
    {
        $input[$key] = utf8_decode( $wert );
    }

    if ( $input["id"] )
    {
        $sql = "SELECT
                Anrede,
                Name1,
                Vorname,
                Name2,
                Strasse,
                Hausnummer,
                PLZ,
                Ort,
                Land,
                Telefon,
                Fax,
                E_Mail,
                AP_Bemerkung,
                ID            
            FROM
                Logins
            WHERE
                ID=" . $input["id"] . "
        ";
        $res = mysql_query( $sql );
        $row = mysql_fetch_assoc( $res );
        echo implode( "###", $row );
    }
    else
    {
        if ( strlen( $input["Name1"] ) >= 3 )
        {
            $search[] = "Name1 LIKE '" . $input["Name1"] . "%'";
        }
        if ( strlen( $input["Name2"] ) >= 3 )
        {
            $search[] = "Name2 LIKE '" . $input["Name2"] . "%'";
        }
        if ( strlen( $input["Ort"] ) >= 3 )
        {
            $search[] = "Ort LIKE '" . $input["Ort"] . "%'";
        }
        if ( strlen( $input["PLZ"] ) == 5 )
        {
            $search[] = "PLZ=" . $input["PLZ"];
        }
        $pos = strpos( $input["E_Mail"], "@" );
        if ( $pos !== false )
        {
            list( $local, $dom ) = explode( "@", $input["E_Mail"] );
            $input["E_Mail"] = $local . "%@" . $dom;
            $search[] = "E_Mail LIKE '%" . $input["E_Mail"] . "%'";
        }
        if ( is_array( $search ) )
        {
            $where = implode( " AND ", $search );
            $sql = "SELECT
                ID,
                Vorname,
                Name1,
                Name2,
                PLZ,
                Ort,
                E_Mail,
                AP_Bemerkung
            FROM
                Logins
            WHERE
                $where
        ";
            $res = mysql_query( $sql );
            while ( $row = mysql_fetch_assoc( $res ) )
            {
                $daten[] = $row;
            }
            $GLOBALS["ui"] = new Weban_Smarty();
            $GLOBALS["ui"]->assign( "daten", $daten );
            $GLOBALS["ui"]->display( "ergebnisse.tpl" );
        }
        else
        {
            echo "";
        }
    }
?>