working at user login

[living-lab-site.git] / application / controllers / catalog.php

diff --git a/application/controllers/catalog.php b/application/controllers/catalog.php
index 1addf0d..743342e 100644 (file)
--- a/application/controllers/catalog.php
+++ b/application/controllers/catalog.php
@@ -55,7 +55,10 @@ class Catalog extends CI_Controller {
                // ** LOADING VIEWS
                // **
                $this->load->view('html_begin', $this->html_head_params);
-               $this->load->view('header', array('selected_menu' => 'home'));
+               $this->load->view('header', array(
+                       'selected_menu'=> 'home',
+                       'username'=> $this->session->userdata('username')
+               ));
                
                $main_params['content'] = $this->load->view('catalog/index_view', $data, TRUE);
                $main_params['side'] = $this->load->view('side_default', NULL, TRUE);
@@ -67,23 +70,7 @@ class Catalog extends CI_Controller {
        
        public function test($page = 0)
        {
-               $params = array(        'title' => 'Test - '. $this->config->item('site_name'),
-                                                       //'css' => array(),
-                                                       //'js' => array(),
-                                                       //'metas' => array('description'=>'','keywords'=>'')
-                       );
-               $this->load->library('html_head_params', $params);
-               
-               // **
-               // ** LOADING VIEWS
-               // **
-               $this->load->view('html_begin', $this->html_head_params);
-               $this->load->view('header', array('selected_menu' => 'home'));
-               
-               $this->load->view('echo', array('output'=>'Test Page', 'clear'=>TRUE));
-               
-               $this->load->view('footer');
-               $this->load->view('html_end');
+               echo $this->uri->segment(1);
        }
        
        public function category($category_name, $ordering = 'hottest', $offset = 0)
@@ -131,7 +118,6 @@ class Catalog extends CI_Controller {
                $this->load->view('html_begin', $this->html_head_params);
                $this->load->view('header', array(
                        'search_category_name'=>$vs_data['category_name'],
-                       'search_category_title'=>$vs_data['category_title']
                ));
                
 //             $main_params['content'] = $this->load->view('catalog/category_view', $data, TRUE);
@@ -146,20 +132,31 @@ class Catalog extends CI_Controller {
        
        public function search($search_query = "", $offset = 0, $category_name = NULL)
        {
+               $this->load->model('videos_model');
+               $this->load->library('security');
+               
                // Redirect to an URL which contains search string if data was passed
                // via POST method and not via URL segments.
-               $str_post_search = $this->input->post('search', TRUE);
+               $str_post_search = $this->input->post('search');
+               $str_post_category = $this->input->post('search-category');
                if ($search_query === "" && $str_post_search !== FALSE) 
-                       redirect('catalog/search/'. $this->input->post('search', TRUE));
+               {
+                       redirect('catalog/search/'
+                               . $this->videos_model->encode_search_query($str_post_search)
+                               . '/0'
+                               . ($str_post_category === FALSE ? '' : "/$str_post_category"));
+                       return;
+               }
 
-               $this->load->model('videos_model');
-               
                // **
                // ** LOADING MODEL
                // **
                // Search query is encoded for URL and must be decoded.
                $enc_search_query = $search_query;
                $search_query = $this->videos_model->decode_search_query($search_query);
+               
+               // Security filtering
+               $search_query = $this->security->xss_clean($search_query);
                $results_data['search_query'] = $search_query;
 
                // Category
@@ -172,7 +169,6 @@ class Catalog extends CI_Controller {
                if ($category_name !== NULL)
                {
                        $header_data['search_category_name'] = $results_data['category_name'];
-                       $header_data['search_category_title'] = $results_data['category_title'];
                }
                
                // Check if search string is valid.