rendered paste body<?php/* Block all requests to view "search.php" */if(stristr(htmlentities($_SERVER['PHP_SELF']), "search.php")){ header("Location: index.php"); die();}$query = clean($_POST['query']);$category = clean($_POST['category']);$error = FALSE;$allowed = array("all", "apps", "cracks", "games", "movies", "music", "porn", "torrents", "serials", "other");if(!in_array($category, $allowed)) $error = TRUE;$count = 0;$multi = 0;if(!$error){ if($category == "all") { $mysql_query = mysql_query("SELECT DISTINCT * FROM downloads WHERE name LIKE '%$query%'") or die(mysql_error()); $mysql_query2 = mysql_query("SELECT DISTINCT * FROM serials WHERE name LIKE '%$query%'") or die(mysql_error()); $mysql_query3 = mysql_query("SELECT DISTINCT * FROM torrents WHERE name LIKE '%$query%'") or die(mysql_error()); $multi = 1; } else { if($category == "torrents") $mysql_query = mysql_query("SELECT DISTINCT * FROM torrents WHERE name LIKE '%$query%' AND type='$category'") or die(mysql_error()); else if($category == "serials") $mysql_query = mysql_query("SELECT DISTINCT * FROM serials WHERE name LIKE '%$query%'") or die(mysql_error()); else $mysql_query = mysql_query("SELECT DISTINCT * FROM downloads WHERE name LIKE '%$query%' AND type='$category'") or die(mysql_error()); $multi = 0; } if(@mysql_num_rows($mysql_query) == 0 && @mysql_num_rows($query2) == 0 && @mysql_num_rows($query3) == 0) echo "Sorry, no downloads have matched your search query. <a href=\"javascript:history.back(-1)\">Go back</a>."; else {?> <table width="100%" cellspacing="0" cellpadding="3" border="0" style="border-bottom: 1px solid #000000;"> <tr> <td colspan="4" width="100%" align="right"> <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>?action=search"> Search For: <input type="text" name="query"> in <select name="category"> <option value="all">ALL</option> <option value="apps">Apps</option> <option value="cracks">Cracks</option> <option value="games">Games</option> <option value="movies">Movies</option> <option value="music">Music</option> <option value="porn">Porn</option> <option value="torrents">Torrents</option> <option value="serials">Serials</option> <option value="other">Other</option></select> <input type="submit" value="Search!"> </form> </td> </tr> <tr> <td width="10%" align="left"><i>Type</i></td><?php if($category == "torrents" || $category == "serials") { ?> <td width="60%" align="left"><i>Name</i></td> <td width="10%" align="left"><i>Author</i></td><?php } else { ?> <td width="70%" align="left"><i>Name</i></td><?php } ?> <td width="10%" align="left"><i>Views</i></td> <td width="10%" align="left"><i>Date</i></td> </tr> </table> <table width="100%"><?php if(mysql_num_rows($mysql_query) >= 1) { if($mutli == 0) { while($row = mysql_fetch_array($mysql_query)) { if($count == 0) {?> <tr> <td width="100%" id="dl1" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count++; } else {?> <tr> <td width="100%" id="dl2" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count = 0; } } } else { while($row = mysql_fetch_array($mysql_query)) { if($count == 0) {?> <tr> <td width="100%" id="dl1" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count++; } else {?> <tr> <td width="100%" id="dl2" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count = 0; } } while($row = mysql_fetch_array($mysql_query2)) { if($count == 0) {?> <tr> <td width="100%" id="dl1" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count++; } else {?> <tr> <td width="100%" id="dl2" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count = 0; } } while($row = mysql_fetch_array($mysql_query3)) { if($count == 0) {?> <tr> <td width="100%" id="dl1" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count++; } else {?> <tr> <td width="100%" id="dl2" align="left"> <table width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td width="10%" align="left"><?php echo rename2($row['type']); ?></td><?php if($category == "torrents") { ?> <td width="60%" align="left"><a href="view_t.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else if($category == "serials") { ?> <td width="60%" align="left"><a href="view_s.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td> <td width="10%" align="left"><?php echo $row['nick']; ?></td><?php } else { ?> <td width="70%" align="left"><a href="view.php?id=<?php echo $row['id']; ?>" target="_blank"><?php echo format($row['name']); ?></a></td><?php } ?> <td width="10%" align="left"><?php echo $row['downloads']; ?></td> <td width="10%" align="left"><?php echo str_replace(".", "/", $row['date']); ?></td> </tr> </table> </td> </tr><?php $count = 0; } } }?></table><?php } }}else "There was an error with your search. Please try again. <a href=\"javascript:history.back(-1)\">Go back</a>.";?>