Безопасный и удобный поиск

Безопасный и удобный поиск Главное, с чем сталкиваешься при написании скрипта для поиска - то, что все кажется простым, но объем кода быстро нарастает...
infocity.kiev.ua 10-05-2004	печать

Главное, с чем сталкиваешься при написании скрипта для поиска - то, что все кажется простым, но объем кода быстро нарастает.

Обработка строки

Первым делом надо порезать ручками строку.

$search = substr($search, 0, 64);

64 символов пользователю будет достаточно для поиска. Теперь каленым железом выжжем все "ненормальные" символы.

$search = preg_replace("/[^(w)|(x7F-xFF)|(s)]/", " ", $search);

По идее, нельзя давать пользователю возможности искать по слишком коротким словам - кроме всего прочего, это сильно загружает сервер. Итак, разрешим искать только по словам, которые длиннее двух букв (если ограничение больше, надо заменить "{1,2}" на "{1, кол-во символов}").

$good = trim(preg_replace("/s([^s]{1,2})s/", " ", ereg_replace("[ ]%2B", " "," $search ")));

А после замены плохих слов - надо сжать двойные пробелы (они были сделаны специально для корректного поиска коротких слов).

$good = ereg_eplace("[ ]%2B", " ", $good);

Логика

Допустим, мы хотим предоставить пользователю возможность выбирать логику поиска - искать все слова или только одно из нескольких. Если вы хотите сделать как в Яндексе [2] [1] - два амперсанта означают "И" (слово1&&слово2&&слово3) или как-то еще, то я не советчик. Шаманство со строками на небольшом сайте imho не оправдывает затраченного времени. Поэтому форму для поиска рисуем так:

А в поисковом скрипте лишний раз проверяем, что пользователь ввел:

if ($logic!="AND" && $logic!="OR")
$logic = "OR";

Как будет использоваться логика — ниже.

Релевантность

Наверное, в том же Яндексе [2] [1] все видели ссылочку "сортировать по релевантности". Это оно и есть. Сортировка результатов по количеству совпадений слов.

Отчасти, кстати, такая сортировка снимает проблему обработки логики поиска. Но с БД MySQL делать такую сортировку очень сложно. Надо сперва выбрать, где есть все слова, потом записи, где разные слова (исключив предыдущие). Если у вас постраничный вывод - то вообще дело труба!

Статистика поиска

Неплохо будет сразу информировать пользователя, сколько он нашел строк таблицы. Для этого делается дополнительный запрос в базу:

$query = "SELECT id FROM table WHERE field LIKE "%". str_replace(" ", "%" OR field LIKE "%", $good). "%"";

Для статистики по отдельным словам можно сделать следующее:

$word = explode(" ", $search);
while (list($k, $v) = each($word)) {
 if (strlen($v)>2)
 $stat[]="$v:". mysql_num_rows(mysql_query("SELECT id FROM table WHERE field LIKE "%$v%""));
 else
 $stat[]="$v: короткое";
 };
$word_stats = "Статистика слов: ". implode("", $stat). " ";
unset($stat);

Постраничный вывод результатов

Ну, когда у нас есть макет для поиска и количество строк результата поиска, сделать постраничный поиск - пара пустяков. Проверяем переменную $page (не меньше 0, не больше $results_amount/$rows_in_page).

В запрос, который подсчитывает количество строк (смотри выше), пишем нужные нам поля и поля для сортировки. А потом дописываем

if ($page==0)
$request .= "LIMIT $rows_in_page";
else
$request .= "LIMIT ". $page*$rows_in_page. ",". $rows_in_page;

(синтаксис: LIMIT <кол-во строк> либо LIMIT <кол-во строк отступа>, <кол-во строк>)

В результате выполнения подобного запроса мы получим именно те самые строки, которые надо выводить на странице.

Для навигации можно либо рисовать ссылки на следующую и предыдущую страницы, либо, что сложнее, делать панель навигации на несколько страниц.

if ($page>0)
print ("<a href=search.php?search=". rawurlencode($good). "&page=". ($page-1). ">предыдущая страница</a>");

if ($page<$results_amount/$rows_in_page)
print ("<a href=search.php?search=". rawurlencode($good). "&page=". ($page%2B1). ">следующая страница</a>");

Подсветка

Чтобы подсвечивать светом или жирным шрифтом искомые слова в тексте, надо сделать всего лишь следующее:

$highlight = "(". str_replace(" ", "|", $good). ")";

Пробелы (а они у нас между словами стоят поодиночке, и нигде двойной пробел не встречается, к тому же с концов строки мы их тоже вырезали) достаточно заменить на вертикальную черту - разделитель вариантов в регулярных выражениях. "Плохие" слова мы не подсвечиваем, потому что в базе их не ищем :).

В коде, который выводит текст пишем:

$row["text"] = ereg_replace($highlight, "1", $row["text"]);

После написания выпуска я кинулся, было, писать и себе "подсветку". Не тут-то было! У меня в тексте встречаются теги HTML, поэтому пришлось много подумать... Получилась вот такая вещь (строка со словами для подсветки есть):

$text = eregi_replace(">([^<]*)$words", ">123<", $text);

Приходится смотреть, нет в теге ли это слово. Однако тут встает проблема ресурсоемкости такой замены (мой K6-266 над текстом в 5 килобайт думал целых семь секунд). Печально.

Итог

Применяя такие приемы, можно, во-первых, ограничить свободу действий пользователя и не дать ему а) узнать программную структуру сайта б) вызвать перегрузку сервера (например, отправив мегабайт текста, состоящего из слов длиной в три буквы (фраза получилась двусмысленная, но переписывать не буду :), чтобы скрипт 250 тысяч раз лазил в базу) в) увидеть сообщение об ошибке в результате попадания в строку спецсимволов языка запросов. Во-вторых, некоторое удобство для пользователя - постраничный вывод и подсветка.

	Комментарии		Оставить комментарий
страница < \| 1 \| 2 \| 3 \| 4 \| 5 \| 6 \| 7 \| 8 \| 9 \| > AliPoche \| 29-06-22 09:09 Cystic kidneys in youngsters and adolescents current in various types and might range from a single cyst to a number of bilateral cysts. ThatпїЅs ok creator believes that there are three primary sources of potental hazard although, simply give it to me straight. Modifications based mostly on altitude weren't carried out, as Bata district is positioned at sea degree medicine recall <a href=http://www.lisug.org/pharmlab/buy-cheap-cyklokapron-online/>order cyklokapron in united states online</a>. Neoadjuvant stereotactic body radiation remedy, capecitabine, and liver transplantation for unresectable hilar cholangiocarcinoma. Fortunately, gastroenteritis rarely happens so abruptly as to prevent a planned handover of control, thereby minimizing the flight security danger. It will help the health worker or other relevant person who is ofering the immunization services purchase the necessary data and skills to efectively carryout the immunization companies weight loss pills 94 <a href=http://www.lisug.org/pharmlab/order-alli-online/>60mg alli for sale</a>. Although we lack hard data, we all know that many adults and people in special risk groups usually are not adequately protected towards vaccine-preventable diseases. The mature gametocyte is longer than the diameter of the pink cell and so produces gross distortion and generally even apparent disappearance of the contaminated pink cell. The Protocol states that relief actions are subject to the пїЅsettlementпїЅ of the events con TornUnpapse \| 12-06-22 17:02 Under a range of legislation, even when a patient with capacity requests it, health professionals are not obliged to supply treatment which contravenes good medical apply. Their danger of rupture is ?6% in the ?rst year after neurologic signs is the hallmark of aneurysmal identi?cation and may remain high inde?nitely. It is essential to remember that many of these sufferers will have gastroesophageal reflux in addition to irregular esophageal peristalsis following surgery, which can cause vital long-term issues symptoms ulcer stomach <a href=https://polkcounty.org/med/purchase-online-lopinavir-no-rx/>discount lopinavir 250mg without a prescription</a>. Zygotes have been placed in embryo tradition medium handled cell cycle regulators and steroid hormone receptors. If possible, direct remark of venous stress in the course of the infusion is a useful precaution. Chondrosarcomas come up from the ribs in eighty% of circumstances and from the sternum within the remaining 20% antibiotic resistance due to overuse of antibiotics in agriculture <a href=https://polkcounty.org/med/purchase-online-zitrolab/>purchase cheap zitrolab line</a>. Placement of prosthesis between the long strategy of incus and oval window 5 and 6): Shea platinum Tefon cup piston, Robinson stainless-steel prosthesis, Shea Tefon piston, McGee piston, Fisch platinum Tefon piston and House wire prosthesis. Thus, additional study is needed to make clear the etiology and the correlation between genes and symptoms. Al Charleswag \| 11-06-22 20:57 To overcome this kind of problem, only from 6 to 43 in 20 regular subjects, affording discrim- the intravenous dexamethasone suppression check has been ination between teams (53). The cells are immediately wiped across a clean glass slide and fixed both by immersing the slide in equal components of 95% alcohol and ether or by using a industrial spray (e. So cortisol launched from a broken coronary heart or a damaged spirit actually dries up the bones erectile dysfunction pills philippines <a href=http://www.slouch.org/principles/order-cheap-extra-super-avana/>buy generic extra super avana 260 mg on-line</a>. Adenitive bacteriologic prognosis is best established by culNecrotizing fasciitis and/or streptococcal toxic shock synture and Gram stain of deep tissue obtained at operation or by drome caused by group A streptococci must be treated with optimistic blood cultures. Less commonly, lesions could also be morbilliform (measles-like), circinate, annular, or not often kind pustules, vesicles, or palmoplantar desquamation. Services, Centers for Disease Control and Prevention, National Center for Chronic Disease Prevention and Health Promotion, Offce 4 arrhythmia natural treatment <a href=http://www.slouch.org/principles/buy-cheap-verapamil-online/>order verapamil with american express</a>. Blood circulates via the wire, carrying oxygen and meals to the child and carrying waste Pre-eclampsia A condition of excessive blood away. Maternal pyrexia isn't generally considered a feta VandornElarnelet \| 08-06-22 01:59 Avoid вЂў The patient can reduce the chance of transmission to making these questions appear to be an interrogative others, together with kids. The Free Iliac Crest and Fibula Flaps in Vascularized Oromandibular Reconstruction: Comparison and Long-time period Evaluation. In one Contracting State, a unit of alcohol is outlined as 15 mL of pure alcohol (ethyl alcohol, ethanol), which is equivalent to one normal serving of beer, wine or spirits virus killing robot <a href=http://www.mafa.org/vital/buy-colchicine/>buy 0.5 mg colchicine free shipping</a>. At excessive concentrations, they induce thymocyte apoptosis, but at lower concentrations, they really potentiate thymocyte maturation (Vacchio et al. Although they resemble plasma cells, osteoblasts may detection of metastatic tumors. The relative contri- bution of clonal expansion as a result of nature of stem cell division and of segregation of clones into crypts by fission in explaining the monoclon- ality of the crypt epithelium is unknown no antibiotics for sinus infection <a href=http://www.mafa.org/vital/purchase-azithromax/>cheap azithromax 250 mg fast delivery</a>. This, plus a priority that African Americans might develop cancers that are extra aggressive, has led to fewer Black males being offered lively surveillance as a remedy strategy. Those issues have a high morbidity and mortality, and entail a considerable healthcare expenditure. More generally, splenic infarction occurs as a result of repeated пїЅ If there's VatrasObenseses \| 07-06-22 10:04 Lesions are usually devoid of hair follicles and different <>8,50] (it could possibly be related to the upper price of earlobe piercing in functioning adnexal glands. One of the good difficulties in assessing the results of frenulotomy is in figuring out which sufferers have clinically important issues associated to ankyloglossia. The particular person should be clinically assigned as a very gentle case/ pre-symptomatic case by the treating medical officer impotence over 40 <a href=http://www.mafa.org/vital/buy-cheap-apcalis-sx-online-no-rx/>purchase apcalis sx mastercard</a>. These include climate, skin condition, scars, weight changes, food regimen, activity, body form near the stoma and the character of the ileostomy output. In addition to for sufferers who have not fully responded to an sufficient being brought on by inadequate therapy, poor response might acute phase treatment over a adequate time, typically end result from multiple other components (413) which are enumer fourвЂ“eight weeks. However, there was a big discount in supply less than 32 weeks of gestataion in cerclage group with 3 or extra second-trimester deliveries, and no histories of cervical surgical procedures antibiotics prostatitis <a href=http://www.mafa.org/vital/buy-cheap-amoxil/>purchase amoxil 650 mg free shipping</a>. The results have been comparable to these in other medical literature, but had a lower subsequent surgery fee of approximately 5%. Heat with frequent agitation and boil for 1 minu Darmokaugmend \| 06-06-22 01:26 An equally crucial component was the availability of produce that met business wants. There are three forms of mechanisms of interest to the diagnostician: вЂў Those that management the вЂinside milieuвЂ™ by keeping temperature, tissue perfusion, blood gases, and biochemistry constant. To obtain these lower hemoglobin A1 C values, adjusting the insulin doses are necessary antibiotics for prevention of uti <a href=http://www.ouramb.org/results/order-zibramax-no-rx/>best 500 mg zibramax</a>. The nature of this beneft Metabolic syndrome (obesity, diabetes mellitus) is related to the biologic effect that smoking has on decreasing the Nulliparity, infertility endogenous levels of estrogen, probably the alteration of liver Irregular menstrual cycles metabolism of estrogen, and the impact smoking has on early Polycystic ovarian syndrome onset of menopause. Similarly, trials shouldn't be conducted deemed appropriate, mixture updates should be supplied abroad solely as a result of lack of or much less at predetermined occasions or on demand. Maternal rubella may cause defects in both eye (fourth to sixth weeks of gestation) and ear (seventh to eight weeks) antibiotics for mastitis <a href=http://www.ouramb.org/results/buy-cheap-azimycin/>cheap azimycin 500mg free shipping</a>. A single haloperidol arm was included as a comparative treatment in 1 of the two trials, however this trial did not evaluate these 2 medicine on the total vary of clinically related doses for each. The studie JerekveM \| 04-06-22 04:08 Increased expression in early tumour differentiation and tumour proliferation has indicated that it may probably be used as a tumour marker(19, seventy one-75). Severe Disease: If ceftazidime or a carbapenem usually are not available, ampicillin/sulbactam or other intravenous beta lactam/beta-lactamase inhibitor mixtures might characterize viable, albeit much less-confirmed options. Physical examination at the time of examination revealed regular vital signs, and a mid-peaking systolic murmur with a preserved S2 auscultated loudest on the proper higher sternal border virus yahoo <a href=http://www.ascdayton.org/presentation/purchase-hemomycin/>generic 250mg hemomycin visa</a>. J Eur Acad Dermatol Venereol 2009;23: nearer look at these situations and an method to intertriginous eruptions. Alcohol is the most used psychoactive substance on the planet and Conclusion: these new genetic threat components correlate with abuse can result in dependancy. Hypoxia is one other potential, although much less apy to the brain can induce vasculopathy, one other pocommon, reason for seizures in cancer sufferers anxiety zone hypochondria <a href=http://www.ascdayton.org/presentation/purchase-clomipramine-online-in-usa/>10mg clomipramine for sale</a>. Kleinoeder1, vitro data to predict the overall in vivo pharmacokinetics of drugs or chemical substances J. Table 5 provides advised Transjugular Intrahepatic Portosystemic calorie necessities based mostly on targets of therapy. Anabolic steroid Benitoepity \| 24-05-22 15:24 Incidence, prevalence, and survival of continual pancreatitis: a inhabitants-based research. By distinction, anabolism is a divergent course of in which a few biosynthetic precursors kind all kinds of polymeric, or complex, products. A stoma provides another path for urine (within the case of a urostomy) or stool (in the case of a colostomy or ileostomy) to depart the body diabetes insipidus blood glucose <a href=http://www.fsrt.org/training/purchase-online-actoplus-met-no-rx/>purchase actoplus met 500 mg with visa</a>. Most cases develop Material and methods: This crossectional study was accomplished at a tertiary care Cushing syndrome due to prolonged use of steroids. Low turnover of workers increases patient Combined appropriate therapy, thereby enhancing affected person outcomes. Silicone provides optimal absorption of the shock generated from everyday and excessive-impression heel strike acne 404 nuke book download <a href=http://www.fsrt.org/training/buy-policano-online-in-usa/>policano 30 mg on-line</a>. Binge consuming disorder occurs in about 2% of community cohorts and is widespread among pa tients seeking treatment for weight problems at hospital-affiliated weight programs (1. Medical Policy In General data, Equipment Requirements, revise listing of acceptable tools, particularly acceptable substitute equipment for imaginative and prescient testing. Patients present at all ages, primarily with dysphagia for solids/liquids and bland regurgitation acne jeans mens < AltusHow \| 22-05-22 12:04 Rheumatic fever or any rheumatic heart disease is said to be energetic or recurrent. The fruits are historically used for cuts and ulcers, for pulmonary ailments and fevers. Technicians must take special care to maintain the mice separate and to disinfect the caging system and altering areas to forestall the spread of any pathogen that might be current pulse pressure lying down <a href=http://www.phoenixbiotechnology.com/properties/order-cheap-labetalol/>labetalol 100 mg with visa</a>. Figure 1 also defines levels of blood glucose beneath which a prognosis of diabetes is unlikely in nonвЂ“pregnant individuals. The effect of mannitol on renal estimation from urea nitrogen look and creatinine manufacturing function following cardio-pulmonary bypass in patients with regular throughout steady renal substitute therapy. In Beijing (Monday, June need bourgeois, capitalistic ways and tradition contaminating 13) (Document half) administering medications 6th edition <a href=http://www.phoenixbiotechnology.com/properties/order-depakote-online-in-usa/>purchase depakote 250 mg otc</a>. Thus, elective surgery in sufferers with Postoperative danger discount methods have centered on acute viral or alcoholic hepatitis ought to be delayed until the promoting lung expansion by way of the use of incentive acute episode has resolved. Therefore, one other measure of a strong fnding is the number of diferential diagnoses required to elucidate, say ninety nine% of patients with that fnding. Ceftri Givessbornelp \| 21-05-22 08:39 Although the deformity may not at all times deepen, it's unlikely that it's going to resolve spontaneously. The C and N terminals of those proteins are crosslinked to provide tensile energy to the bone. The primary organics which have been detected are chloroform, bromodichloromethane, dibromochloromethane, bromoform, carbon tetrachloride, and 1,2-dichloroethane allergy treatment while pregnant <a href=http://www.phoenixbiotechnology.com/properties/buy-prednisolone-no-rx/>generic prednisolone 10mg otc</a>. This is a translation of the recommendations in on a regular basis language, with emphasis on questions important to patients. Plateau Pressure At the end of a full inspiration, the airflow out of the patient is capped and the stress in opposition to the cap is examined. Comments: Mild (one hundred fortyвЂ“159/ninetyвЂ“99 mmHg) or moderate (one hundred sixtyвЂ“179/100вЂ“109 mmHg) persistent arterial hyper- Note: rigidity do not appear to cause headache hiv ear infection <a href=http://www.phoenixbiotechnology.com/properties/order-online-nemasole/>best order for nemasole</a>. For some most cancers managing group categorization, or the lower or much less websites, the situation and quantity or burden of superior subcategory ought to be used. Fetal growth retardation <10% percentile of weight for <5% percentile of weight for <1% percentile of weight for gestational age gestational age gestational age Definition: A dysfunction characterised by inhibition of fetal development			Имя: E-mail: Сообщение: = укажите сумму* чисел на картинке*

	ПРОГРАММ: 654 \| СТАТЕЙ: 125 \| КОДОВ: 3434