query("SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name = '{$_GET['table_name']}' and table_schema = '{$_SESSION['db_name']}'"); while ($row = $results->fetch_assoc()) { $column_name = $row['COLUMN_NAME']; if ($column_name == 'record_id') { continue; } else { $name_arr[] = $column_name; $var_arr[] = $_GET["$column_name"]; } } $index = 0; $counter = 0; while ($index <= count($name_arr)) { if (strlen($name_arr[$index]) < 2 || strlen($var_arr[$index]) < 1) { } else { $counter++; $string_1[] = "`" . $name_arr[$index] . "` LIKE '%" . $var_arr[$index] . "%'"; } $index++; } if ($counter == 0) { $string_1[] = "1 = 1"; } $where_data = implode(' AND ', $string_1); $user_re = $db->exec_query('safesure_users', ['*'], '', '', '', '', "record_id = {$_SESSION['user_id']}"); $user_data = $user_re->fetch_assoc(); if ($_GET['table_name'] == 'clients') { // get user_details $string_arr = []; foreach (explode(',', $user_data['clients_multi']) as $value) { $string_arr[] = ' record_id = ' . $value; } $where_data = $where_data . " AND (" . implode(' OR ', $string_arr) . ')'; } // if ($_GET['table_name'] == 'client_employees') { // // get user_details // $string_arr = []; // foreach (explode(',', $user_data['clients_multi']) as $value) { // $string_arr[] = ' clients_id = ' . $value; // } // $where_data = $where_data . " AND (" . implode(' OR ', $string_arr) . ')'; // } if ($_GET['table_name'] == 'bookings') { // get user_details $string_arr = []; foreach (explode(',', $user_data['clients_multi']) as $value) { $string_arr[] = ' clients_id = ' . $value; } $where_data = $where_data . " AND (" . implode(' OR ', $string_arr) . ')'; } $result = $db->exec_query($_GET['table_name'], ['*'], '', '', '', '', $where_data, "ORDER BY {$_GET['order_by']} {$_GET['order_type']}"); if ($result === false || $result->num_rows < 1) { echo "
NO RESULTS "; echo "
"; } $db->add_log("USER SEARCHED WITH { " . str_replace("'", " ", str_replace('`', ' ', $where_data)) . " }", $_GET['table_name'], 0); while ($data = $result->fetch_assoc()) { echo "
"; foreach ($name_arr as $colls) { if (strpos($colls, '_id') !== false) { $link_table_name = substr($colls, 0, strpos($colls, '_id')); $link_table_result = $db->exec_query($link_table_name, ['*'], '', '', '', '', "record_id = {$data[$link_table_name . '_id']}", "ORDER BY " . $link_table_name . "_name ASC"); if ($link_table_result !== false) { $link_table_data = $link_table_result->fetch_assoc(); echo " "; } else { echo " "; } } else { if ($WebApp->find_string_in_string($colls, 'password')) { ?>
"; echo "
"; }