ajax.suggest.php

<?php
/**
 * -------   U-232 Codename Trinity   ----------*
 * ---------------------------------------------*
 * --------  @authors U-232 Team  --------------*
 * ---------------------------------------------*
 * -----  @site https://u-232.duckdns.org/  ----*
 * ---------------------------------------------*
 * -----  @copyright 2020 U-232 Team  ----------*
 * ---------------------------------------------*
 * ------------  @version V6  ------------------*
 */

require_once(dirname(__FILE__).DIRECTORY_SEPARATOR.'include'.DIRECTORY_SEPARATOR.'bittorrent.php');
require_once INCL_DIR.'user_functions.php';

dbconn(true);
loggedinorreturn();

if (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
    $orderby = 'ORDER BY ';
    $order = [
        0 => 'seeders',
        1 => 'leechers',
        2 => 'id',
        3 => 'size',
        4 => 'hits',
        5 => 'vip',
    ];
    $outhtml = "<style>.hover:hover{color:".($_POST["color"] ?? 'green')."}</style><table border='0' style='width:100%;border:0px;' ><tr><td>";
    if (empty($_POST['search'])) {
        die(false);
    }
    $wh = isset($_POST["order"]) ? (int)$_POST["order"] : 2;
    $orderby .= isset($wh) && array_key_exists($wh, $order) ? sqlesc($order[$wh]) : 'id';
    $limit = isset($_POST["limit"]) ? (int)$_POST["limit"] : 10;
    $where = isset($_POST["search"]) ? sprintf('WHERE name LIKE \'%s\'', '%'.$_POST["search"].'%') : die(false);
    $query = "SELECT id, name FROM torrents $where $orderby LIMIT $limit";
    ($res = sql_query("SELECT COUNT(id) FROM torrents $where")) || sqlerr(__FILE__, __LINE__);
    $row = $res->fetch_row();
    $count = $row[0];
    if ($count > 0) {
        ($res = sql_query($query)) || sqlerr(__FILE__, __LINE__);
        $ye = '';
        $i = 1;
        while ($row = $res->fetch_assoc()) {
            if (empty($row['name'])) {
                die(false);
            }
            $outhtml .= "$i : <a href='details.php?id=".(int)$row['id']."' class='hover'>".htmlsafechars($row['name'])."</a><br/>";
            $i++;

        }
        echo $outhtml .= "</td></tr></table>";
    } else {
        die(false);
    }
} else {
    header("Location: {$TRINITY20['baseurl']}/index.php");
}
die(false);

?>