File: /var/www/html/tmpr/../tmpr/../tmpr/../search.php
<?php
/*error_reporting(0);
set_time_limit(0) ;*/
function filter($arr) {
global $link;
return array_map(array($link, 'real_escape_string'), $arr);
}
/*
https://maps.googleapis.com/maps/api/staticmap?center=NAKURU&zoom=13&size=600x600&maptype=hybrid
http://localhost/mimix/brandX.php?AppNo=254722407698&mag=yes&gratitude=posted&filter=mood&nani=254722407699&cl=rightnow&pic=0fbfb36bad36a37e22955b2081eac3036SAMCOM2011DAY3-051.jpg*/
$_GET = filter($_GET);
$_POST = filter($_POST);
$mode=$_GET["mode"];
include("protect.php");
if (empty($page)) {
$page = 0;
}
include("includes/limittext.php");
include('Connections/videoondemand.php');
require("DbSql.inc.php");
require("NewsSql.inc.php");
$db = new NewsSQL($DBName);
$title=$_POST["title"];
$result=mysqli_query("SELECT * FROM users where catalogname like '%$title%' and approved='1' and banned='0'");
$found=mysql_num_rows($result);
if($found>0){
while($row=mysql_fetch_array($result)){
echo "<li>$row[catalogname]</br>
<a href=$row[guid]>$row[user_name]</a></li>";
}
}else{
echo "<li>No Tutorial Found<li>";
}
?>