<?php
# ************** LICENCE ****************
/*
	Copyright (c) PORTANEO.

	This file is part of POSH (Portaneo Open Source Homepage) http://sourceforge.net/projects/posh/.

	POSH is free software: you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation, either version 3 of the License, or
	(at your option) any later version

	POSH is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	You should have received a copy of the GNU General Public License
	along with Posh.  If not, see <http://www.gnu.org/licenses/>.
*/
# ***************************************
# POSH Users management - XML List of users searched
#
# !! be careful, this file must be saved under uft8 format, and display an e accentuated here : é
# ***************************************

if (!isset($_GET["searchtxt"])) exit();
if (!isset($_GET["p"])) exit();

$folder="";
$not_access=1;
$granted="A";
$pagename="admin/xml_search_user.php";
//includes
require('includes.php');
require_once('../includes/xml.inc.php');

//control that the current administrator has access to the script
$grantedCalls = array("userstab");
require('adm_ctrl_access.php');

$file=new xmlFile();

$file->header("results");
	
$motcle=$_GET["searchtxt"];
$page=$_GET["p"];
$empty=true;

if (strlen($motcle)>2) $empty=false;

if ($empty) {
	echo "<error>Mot clé trop court (3 car. mini) ou incorrect</error>";
}
else
{
	if ($page<1000)
	{
		//get the modules corresponding to the request based on the indexed keywords
        if($_SESSION['general_admin']==0) { 
            $groupList="";
            $DB->getResults($adm_getGroupId,$DB->escape($_SESSION['user_id']));
            while ($row = $DB->fetch(0)) {
                $groupList.="'".$row['group_id']."',";
            }
            $groupList=substr($groupList,0,strlen($groupList)-1);
            $DB->freeResults();
            
            if ($groupList=="") {
                $file->footer("results");
                exit();
            }
            
            $DB->getResults($users_searchXmlAllowed,$groupList,$DB->quote('%'.$motcle.'%'),$DB->quote('%'.$motcle.'%'),($page*21));
        }
        else {
            $DB->getResults($users_searchXml,$DB->quote('%'.$motcle.'%'),$DB->quote('%'.$motcle.'%'),($page*21));
        }
		$nb_search = $DB->nbResults();
		echo "<nbres>".$nb_search."</nbres>";
		$inc=1;
		if ($nb_search>0)
		{
			while ($row = $DB->fetch(0))
			{
				echo "<user>";
				echo "<id>".$row["id"]."</id>";
				echo "<username><![CDATA[".$row["username"]."]]></username>";
				echo "<name><![CDATA[".$row["long_name"]."]]></name>";
				echo "<typ><![CDATA[".$row["typ"]."]]></typ>";
				echo "</user>";
			}
		}
		$DB->freeResults();
	}
}

$file->footer("results");
?>