search.php

<?php

use App\Repository\PackageRepository;

// Start session
session_start();

// Obtain common includes
require_once '../include/prepend.php';

// Redirect early if a bug id is passed as search string
if (isset($_GET['search_for']) && preg_match('/^\d+$/', trim($_GET['search_for']), $search_for_id_array)) {
    redirect("bug.php?id=${search_for_id_array[0]}");
}

// For bug count only, used in places like doc.php.net
$count_only = isset($_REQUEST['count_only']) && $_REQUEST['count_only'];

bugs_authenticate($user, $pw, $logged_in, $user_flags);

$is_security_developer = ($user_flags & (BUGS_TRUSTED_DEV | BUGS_SECURITY_DEV));

$newrequest = http_build_query(array_merge($_GET, $_POST));

if (!$count_only) {
    response_header(
        'Bugs :: Search', "
            <link rel='alternate' type='application/rss+xml' title='Search bugs - RDF' href='rss/search.php?{$newrequest}'>
            <link rel='alternate' type='application/rss+xml' title='Search bugs - RSS 2.0' href='rss/search.php?format=rss2&{$newrequest}'>
    ");
}

// Include common query handler (used also by rss/search.php)
require "{$ROOT_DIR}/include/query.php";

if (isset($_GET['cmd']) && $_GET['cmd'] == 'display')
{
    // FIXME: this if doesn't make sense, check is already performed in
    // query.php - whole condition can be removed, reducing level of
    // nesting by one.
    if (!isset($result)) {
        $errors[] = 'Invalid query';
    } else {
        // For count only, simply print the count and exit
        if ($count_only) {
            echo (int) $total_rows;
            exit;
        }

        // Selected packages to search in
        $package_name_string = '';
        if (count($package_name) > 0) {
            foreach ($package_name as $type_str) {
                $package_name_string.= '&amp;package_name[]=' . urlencode($type_str);
            }
        }

        // Selected packages NOT to search in
        $package_nname_string = '';
        if (count($package_nname) > 0) {
            foreach ($package_nname as $type_str) {
                $package_nname_string.= '&amp;package_nname[]=' . urlencode($type_str);
            }
        }

        $link_params = [
            'search_for'  => urlencode($search_for),
            'project'     => urlencode($project),
            'php_os'      => urlencode($php_os),
            'php_os_not'  => $php_os_not,
            'author_email' => urlencode($author_email),
            'bug_type'    => urlencode($bug_type),
            'boolean'     => $boolean_search,
            'bug_age'     => $bug_age,
            'bug_updated' => $bug_updated,
            'order_by'    => $order_by,
            'direction'   => $direction,
            'limit'       => $limit,
            'phpver'      => urlencode($phpver),
            'cve_id'      => urlencode($cve_id),
            'cve_id_not'  => $cve_id_not,
            'patch'       => urlencode($patch),
            'pull'        => urlencode($pull),
            'assign'      => urlencode($assign),
            'commented_by' => urlencode($commented_by),
        ];

        if ($is_security_developer) {
            $link_params['private'] = $private;
        }

        // Remove empty URL parameters
        foreach ($link_params as $index => $param) {
            if (empty($param))
                unset($link_params[$index]);
        }

        // Create link params string
        $link_params_string = '';
        foreach ($link_params as $index => $param) {
            $link_params_string .= "&amp;$index=$param";
        }

        $link = "search.php?cmd=display{$package_name_string}{$package_nname_string}{$link_params_string}";
        $clean_link = "search.php?cmd=display{$link_params_string}";

        if (isset($_GET['showmenu'])) {
            $link .= '&amp;showmenu=1';
        }

        if (!$rows) {
            $errors[] = 'No bugs were found.';
            display_bug_error($errors, 'warnings', '');
        } else {
            display_bug_error($warnings, 'warnings', 'WARNING:');
            $link .= '&amp;status=' . urlencode($status);
            $package_count = count($package_name);
?>

<table border="0" cellspacing="2" width="100%">

<?php show_prev_next($begin, $rows, $total_rows, $link, $limit);?>

<?php if ($package_count === 1) { ?>
 <tr>
  <td class="search-prev_next" style="text-align: center;" colspan="10">
<?php
    $pck = htmlspecialchars($package_name[0]);
    $pck_url = urlencode($pck);
    echo "Bugs for {$pck}\n";
?>
  </td>
 </tr>
<?php } ?>

 <tr>
  <th class="results<?= $order_by === 'id' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=id">ID#</a></th>
  <th class="results<?= $order_by === 'ts1' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=ts1">Date</a></th>
  <th class="results<?= $order_by === 'ts2' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=ts2">Last Modified</a></th>
<?php if ($package_count !== 1) { ?>
  <th class="results<?= $order_by === 'package_name' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=package_name">Package</a></th>
<?php } ?>
  <th class="results<?= $order_by === 'bug_type' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=bug_type">Type</a></th>
  <th class="results<?= $order_by === 'status' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=status">Status</a></th>
  <th class="results<?= $order_by === 'php_version' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=php_version">PHP Version</a></th>
  <th class="results<?= $order_by === 'php_os' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=php_os">OS</a></th>
  <th class="results<?= $order_by === 'sdesc' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=sdesc">Summary</a></th>
  <th class="results<?= $order_by === 'assign' ? (strcasecmp('desc', $direction)===0 ?' desc':' asc'):''; ?>"><a href="<?php echo $link;?>&amp;reorder_by=assign">Assigned</a></th>
 </tr>
<?php

            foreach ($result as $row) {
                $status_class = $row['private'] == 'Y' ? 'Sec' : ($tla[$row['status']] ?? '');

                echo ' <tr valign="top" class="' , $status_class, '">' , "\n";

                // Bug ID
                echo '  <td align="center"><a href="bug.php?id=', $row['id'], '">', $row['id'], '</a>';
                echo '<br><a href="bug.php?id=', $row['id'], '&amp;edit=1">(edit)</a></td>', "\n";

                // Date
                echo '  <td align="center">', format_date(strtotime($row['ts1'])), "</td>\n";

                // Last Modified
                $ts2 = strtotime($row['ts2']);
                echo '  <td align="center">' , ($ts2 ? format_date($ts2) : 'Not modified') , "</td>\n";

                // Package
                if ($package_count !== 1) {
                    $pck = htmlspecialchars($row['package_name']);
                    $pck_url = urlencode($pck);
                    echo "<td><a href='{$clean_link}&amp;package_name[]={$pck_url}'>{$pck}</a></td>\n";
                }

                /// Bug type
                $type_idx = !empty($row['bug_type']) ? $row['bug_type'] : 'Bug';
                echo '  <td>', htmlspecialchars($bug_types[$type_idx]), '</td>', "\n";

                // Status
                echo '  <td>', htmlspecialchars($row['status']);
                if ($row['status'] == 'Feedback' && $row['unchanged'] > 0) {
                    printf ("<br>%d day%s", $row['unchanged'], $row['unchanged'] > 1 ? 's' : '');
                }
                echo '</td>', "\n";

                /// PHP version
                echo '  <td>', htmlspecialchars($row['php_version']), '</td>';

                // OS
                echo '  <td>', $row['php_os'] ? htmlspecialchars($row['php_os']) : '&nbsp;', '</td>', "\n";

                // Short description
                echo '  <td><a href="bug.php?id=', $row['id'], '">', $row['sdesc']  ? htmlspecialchars($row['sdesc']) : '&nbsp;', '</a></td>', "\n";

                // Assigned to
                echo '  <td>',  ($row['assign'] ? ("<a href=\"{$clean_link}&amp;assign=" . urlencode($row['assign']) . '">' . htmlspecialchars($row['assign']) . '</a>') : '&nbsp;'), '</td>';
                echo " </tr>\n";
            }

            show_prev_next($begin, $rows, $total_rows, $link, $limit);

            echo "</table>\n\n";
        }

        response_footer();
        exit;
    }
}

display_bug_error($errors);
display_bug_error($warnings, 'warnings', 'WARNING:');

?>
<form id="asearch" method="get" action="search.php">
<table id="primary" width="100%">
<tr valign="top">
  <th>Find bugs</th>
  <td style="white-space: nowrap">with all or any of the w<span class="accesskey">o</span>rds</td>
  <td style="white-space: nowrap"><input type="text" name="search_for" value="<?php echo htmlspecialchars($search_for, ENT_COMPAT, 'UTF-8'); ?>" size="20" maxlength="255" accesskey="o"><br>
   <small>
<?php show_boolean_options($boolean_search) ?>
(<a href="search-howto.php" target="_new">?</a>)
   </small>
  </td>
  <td rowspan="4">
   <select name="limit"><?php show_limit_options($limit);?></select>
   &nbsp;
   <select name="order_by"><?php show_order_options($limit);?></select>
   <br>
   <small>
    <input type="radio" name="direction" id="directionasc" value="ASC" <?= $direction != 'DESC' ? 'checked="checked"':'' ?>><label for="directionasc">Ascending</label>
    <input type="radio" name="direction" id="directiondesc" value="DESC" <?= $direction == 'DESC' ? 'checked="checked"':'' ?>><label for="directiondesc">Descending</label>
   </small>
   <br><br>
   <input type="hidden" name="cmd" value="display">
   <label for="submit" accesskey="r">Sea<span class="accesskey">r</span>ch:</label>
   <input id="submit" type="submit" value="Search">
  </td>
</tr>
<tr valign="top">
  <th>Status</th>
  <td style="white-space: nowrap">
   <label for="status" accesskey="n">Retur<span class="accesskey">n</span> bugs
   with <b>status</b></label>
  </td>
  <td><select id="status" name="status"><?php show_state_options($status);?></select></td>
</tr>
<tr valign="top">
  <th>Type</th>
  <td style="white-space: nowrap">
   <label for="bug_type">Return bugs with <b>type</b></label>
  </td>
  <td><select id="bug_type" name="bug_type"><?php show_type_options($bug_type, /* deprecated */ true, /* all */ true);?></select></td>
</tr>
<tr valign="top">
  <th>Project</th>
  <td style="white-space: nowrap">
   <label for="bug_type">Return bugs with <b>project</b></label>
  </td>
  <td><select id="project" name="project">
      <option value="All"<?php if ($project === ''): ?> selected="selected"<?php endif;?>>All</option>

      <?php foreach (PackageRepository::PROJECTS as $key => $value): ?>
        <option value="<?= htmlspecialchars($key, ENT_QUOTES); ?>" <?php if ($project === strtolower($key)): ?> selected="selected"<?php endif; ?>><?= htmlspecialchars($key, ENT_QUOTES); ?></option>
      <?php endforeach; ?>
    </select>
  </td>
</tr>
</table>

<table style="font-size: 100%;">
<tr valign="top">
  <th><label for="category" accesskey="c">Pa<span class="accesskey">c</span>kage</label></th>
  <td style="white-space: nowrap">Return bugs for these <b>packages</b></td>
  <td><select id="category" name="package_name[]" multiple="multiple" size="6"><?php show_package_options($package_name, 2);?></select></td>
</tr>
<tr valign="top">
  <th>&nbsp;</th>
  <td style="white-space: nowrap">Return bugs <b>NOT</b> for these <b>packages</b></td>
  <td><select name="package_nname[]" multiple="multiple" size="6"><?php show_package_options($package_nname, 2);?></select></td>
</tr>
<tr valign="top">
  <th>OS</th>
  <td style="white-space: nowrap">Return bugs with <b>operating system</b></td>
  <td>
    <input type="text" name="php_os" value="<?php echo htmlspecialchars($php_os, ENT_COMPAT, 'UTF-8'); ?>">
    <input type="checkbox" name="php_os_not" id="php_os_not" value="1" <?php echo ($php_os_not == 'not') ? 'checked="checked"' : ''; ?>><label for="php_os_not">NOT</label>
  </td>
</tr>
<tr valign="top">
  <th>PHP Version</th>
  <td style="white-space: nowrap">Return bugs reported with <b>PHP version</b></td>
  <td><input type="text" name="phpver" value="<?php echo htmlspecialchars($phpver, ENT_COMPAT, 'UTF-8'); ?>"></td>
</tr>
<tr valign="top">
  <th>CVE-ID</th>
  <td style="white-space: nowrap">Return bugs reported with <b>CVE-ID</b></td>
  <td>
    <input type="text" name="cve_id" value="<?php echo htmlspecialchars($cve_id, ENT_COMPAT, 'UTF-8'); ?>">
    <input type="checkbox" name="cve_id_not" id="cve_id_not" value="1" <?php echo ($cve_id_not == 'not') ? 'checked="checked"' : ''; ?>><label for="cve_id_not">NOT</label>
  </td>
</tr>

<tr valign="top">
  <th>Assigned</th>
  <td style="white-space: nowrap">Return bugs <b>assigned</b> to</td>
  <td><input type="text" name="assign" value="<?php echo htmlspecialchars($assign, ENT_COMPAT, 'UTF-8'); ?>">
<?php
    if (!empty($auth_user->handle)) {
        $u = htmlspecialchars($auth_user->handle);
        echo "<input type=\"button\" value=\"set to $u\" onclick=\"form.assign.value='$u'\">";
    }
?>
  </td>
</tr>

<tr valign="top">
  <th>Author e<span class="accesskey">m</span>ail</th>
  <td style="white-space: nowrap">Return bugs with author email</td>
  <td><input accesskey="m" type="text" name="author_email" value="<?php echo htmlspecialchars($author_email, ENT_COMPAT, 'UTF-8'); ?>">
<?php
    if (!empty($auth_user->handle)) {
        $u = htmlspecialchars($auth_user->handle);
        echo "<input type=\"button\" value=\"set to $u\" onclick=\"form.author_email.value='$u@php.net'\">";
    }
?>
  </td>
</tr>
<tr valign="top">
  <th>Date</th>
  <td style="white-space: nowrap">Return bugs submitted</td>
  <td><select name="bug_age"><?php show_byage_options($bug_age);?></select></td>
 </tr>
 <tr>
  <td>&nbsp;</td><td style="white-space: nowrap">Return bugs updated</td>
  <td><select name="bug_updated"><?php show_byage_options($bug_updated);?></select></td>
</tr>
<tr valign="top">
  <th>Patch</th>
  <td style="white-space: nowrap">Return only bugs reported with <b>patch attached</b></td>
  <td><input type="checkbox" name="patch" value="Y" <?php echo $patch == 'Y' ? " checked" : "" ?>></td>
</tr>
<tr valign="top">
  <th>Pull Request</th>
  <td style="white-space: nowrap">Return only bugs with a <b>pull request</b></td>
  <td><input type="checkbox" name="pull" value="Y" <?php echo $pull == 'Y' ? " checked" : "" ?>></td>
</tr>
<tr>
    <th>Commented by</th>
    <td style="white-space: nowrap">Return bugs that have been <strong>commented by</strong></td>
    <td><input type="email" name="commented_by" placeholder="me@example.com" value="<?php echo htmlspecialchars($commented_by, ENT_COMPAT, 'UTF-8'); ?>"></td>
</tr>
<?php
    if ($is_security_developer) {
?>
<tr valign="top">
  <th>Private</th>
  <td style="white-space: nowrap">Return only bugs marked as <b>private</b></td>
  <td><input type="checkbox" name="private" value="Y" <?php echo $private == 'Y' ? " checked" : "" ?>></td>
</tr>
<?php } ?>
</table>
</form>

<?php
response_footer();

function show_prev_next($begin, $rows, $total_rows, $link, $limit)
{
    echo "<!-- BEGIN PREV/NEXT -->\n";
    echo " <tr>\n";
    echo '  <td class="search-prev_next" colspan="11">' . "\n";

    if ($limit=='All') {
        echo "$total_rows Bugs</td></tr>\n";
        return;
    }

    echo '   <table border="0" cellspacing="0" cellpadding="0" width="100%">' . "\n";
    echo "    <tr>\n";
    echo '    <td class="search-prev">';
    if ($begin > 0) {
        echo '<a href="' . $link . '&amp;begin=';
        echo max(0, $begin - $limit);
        echo '">&laquo; Show Previous ' . $limit . ' Entries</a>';
    } else {
        echo '&nbsp;';
    }
    echo "</td>\n";

    echo '   <td class="search-showing">Showing ' . ($begin+1);
    echo '-' . ($begin+$rows) . ' of ' . $total_rows . "</td>\n";

    echo '   <td class="search-next">';
    if ($begin+$rows < $total_rows) {
        echo '<a href="' . $link . '&amp;begin=' . ($begin+$limit);
        echo '">Show Next ' . $limit . ' Entries &raquo;</a>';
    } else {
        echo '&nbsp;';
    }
    echo "</td>\n    </tr>\n   </table>\n  </td>\n </tr>\n";
    echo "<!-- END PREV/NEXT -->\n";
}

function show_order_options($current)
{
    global $order_options;

    foreach ($order_options as $k => $v) {
        echo '<option value="', $k, '"', ($v == $current ? ' selected="selected"' : ''), '>Sort by ', $v, "</option>\n";
    }
}