escape_string(trim($_POST['tableName']));
$table_fields = trim($_POST['tableFields']);
if (isset($_POST['keywords']) AND !empty($_POST['keywords'])) {
$keywords = $dbs->escape_string(urldecode(ltrim($_POST['keywords'])));
} else {
$keywords = '';
}
// explode table fields data
$fields = str_replace(':', ', ', $table_fields);
// set where criteria
$criteria = '';
foreach (explode(':', $table_fields) as $field) {
$criteria .= " $field LIKE '%$keywords%' OR";
}
// remove the last OR
$criteria = substr_replace($criteria, '', -2);
$sql_string = "SELECT $fields ";
// append table name
$sql_string .= " FROM $table_name ";
if ($criteria) { $sql_string .= " WHERE $criteria LIMIT $limit"; }
// send query to database
$query = $dbs->query($sql_string);
$error = $dbs->error;
$data = array();
if (isset($_GET['format'])) {
if ($_GET['format'] == 'json') {
if ($error) { echo json_encode(array('id' => 0, 'text' => $error)); }
if ($query->num_rows > 0) {
while ($row = $query->fetch_row()) {
$data[] = array('id' => $row[0], 'text' => $row[1].(isset($row[2])?' - '.$row[2]:'').(isset($row[3])?' - '.$row[3]:''));
}
} else {
if (isset($_GET['allowNew'])) {
$data[] = array('id' => 'NEW:'.$keywords, 'text' => $keywords.' <'.__('Add New').'>');
} else {
$data[] = array('id' => 'NONE', 'text' => 'NO DATA FOUND');
}
}
echo json_encode($data);
}
exit();
} else {
if ($error) { echo ''; }
if ($query->num_rows < 1) {
// output the SQL string
// echo '';
echo 'NO DATA FOUND'."\n";
} else {
while ($row = $query->fetch_row()) {
$output = '';
$output .= ''.$row[1].(isset($row[2])?' - '.$row[2]:'').(isset($row[3])?' - '.$row[3]:'');
$output .= '';
$voc_q = $dbs->query('SELECT rt_id, related_topic_id FROM mst_voc_ctrl WHERE topic_id='.$row[0]);
while ($voc_d = $voc_q->fetch_row()) {
$topic_q = $dbs->query('SELECT topic FROM mst_topic WHERE topic_id='.$voc_d[1]);
$topic_d = $topic_q->fetch_row();
$output .= '- '.$voc_d[0].''.$topic_d[0].'
';
}
$output .= '
';
$output .= '';
echo $output;
}
}
exit();
}