<script src="<?php echo AT_SOCIAL_BASENAME; ?>lib/js/livesearch.js" type="text/javascript"></script>
<?php 
	//Add Friends Template
	//Generate a random number for the search input name fields, so that the browser will not remember any previous entries.
	$rand = md5(rand(0, time())); 
	if ($this->rand_key != ''){
		$last_search = $_POST['search_friends_'.$this->rand_key];
	} elseif(isset($_GET['search_friends'])) {
		$last_search = htmlentities_utf8($_GET['search_friends']);
	} else {
	    if(isset($_POST['search_friends_'.$rand])){
		    $last_search = html_entity_decode($_POST['search_friends_'.$rand]);
		}
	}
	//take out double quotes until there is a way to escape XSS from the ajax script.
	if(isset($last_search)){
	    $last_search = preg_replace('/\"/', '', $last_search);
	}
	$search_field = htmlentities_utf8($this->search_field);
?>
<?php print_paginator($this->page, $this->num_pages, 'search_friends='.$search_field, 1);  ?>

<div class="input-form" style="float:right; width:34%;padding:1em;min-height:4.5em;">
	<div class="contentrow">
		<h3><?php echo _AT('search_for_friends'); ?></h3>
		<form action="<?php echo url_rewrite(AT_SOCIAL_BASENAME.'index_public.php');?>" method="POST" id="search_friends_form">
			<label for="searchFriends" style="display:none;"><?php echo _AT('search'); ?></label>
			<input type="text" size="60" name="search_friends_<?php echo $rand;?>" id="search_friends" value="<?php if(isset($last_search)){echo $last_search;} ?>" onkeyup="showResults(this.value, 'livesearch', '<?php echo AT_SOCIAL_BASENAME; ?>index_public.php')"/>
			<input type="submit" name="search" value="<?php echo _AT('search'); ?>" class="button">
			<input type="hidden" name="rand_key" value="<?php echo $rand; ?>" />
			
			<div id="livesearch"></div>
		</form>
	</div>
</div>
<div class="" style="float:left; width:59%">
	<div class="headingbox"><h3><?php echo _AT('search_results'); ?></h3></div>
	<div class="contentbox">
	<?php 
	if (!empty($this->friends)):
		$privacy_controller = new PrivacyController();
		echo "<h4>"._AT('there_are_entries', sizeof($this->friends))."</h4>";
		foreach ($this->friends as $id=>$person): 
			$privacy_obj = $privacy_controller->getPrivacyObject($id);
//			debug($privacy_obj->getSearch(), 'search'.$id);
			$relationship = $privacy_controller->getRelationship($id);

			if ((!isset($person['added']) || $person['added']!=1) && !PrivacyController::validatePrivacy(AT_SOCIAL_SEARCH_VISIBILITY, $relationship, $privacy_obj->getSearch())){
				//if this user doesn't want to be searched.
				continue;
			}
	?>
	<div class="contact_mini" >
		<div>
			<div style="float:left;"><?php echo printSocialProfileImg($id); ?></div>
			<div style="padding-left:0.5em; float:left;">
				<?php 
					$member_obj = new Member($id);
					$profile = $member_obj->getAddress();
					echo printSocialName($id) . '<br/>';
					echo $profile['country'] . ' ' . $profile['province'] . '<br/>';
				?>
			</div>
			<div style="clear:both;"></div><br/>
		</div>	
	</div>
	<?php 
		endforeach; 
		else: 
			echo _AT('none_found');
	endif;
	?>
	</div>
	<!--
	<div style="float:right;">
		[-- TODO: Paginator --]
	</div>
	-->
</div>

<div style="clear:both;"></div>
<?php print_paginator($this->page, $this->num_pages, 'search_friends='.$search_field, 1);  ?>
