ImpressCMS/impresscms

<?php
/**
 * Finds users
 *
 * @copyright The XOOPS project http://www.xoops.org/
 * @license http://www.fsf.org/copyleft/gpl.html GNU public license
 * @author Taiwen Jiang (phppp or D.J.) <php_pp@hotmail.com>
 * @since Xoops 1.00
 */
include "../mainfile.php";

$denied = true;

if (!empty($_REQUEST['token']) && is_object(icms::$user)) {
    if (icms::$security->validateToken($_REQUEST['token'], false)) {
        $denied = false;
    }
} elseif (is_object(icms::$user) && icms::$user->isAdmin()) {
    $denied = false;
}
if ($denied) {
    icms_core_Message::error(_NOPERM);
    exit();
}


/* define variable and set default values */
$target = $multiple = $token = $user_from = $user_occ = $user_intrest = '';
$uname = $user_submit = $user_avatar = $user_sort = $user_order = '';
$mode = $user_viewemail = $user_viewoid = $attachsig = $user_mailok = $usecookie = $limit = $start = 0;
$posts = $posts_more = $posts_less = $last_login_more = $last_login_less = $user_regdate_more = 0;
$user_regdate_less = $level = $rank = $groups = 0;
$email = $name = $user_icq = $user_aim = $user_yim = $user_msnm = $url = '';
$uname_match = $name_match = $email_match = $user_icq_match = $user_aim_match = $user_yim_match = $user_msnm_match = '';

$filter_get = array(
    'target' => 'str',
    'multiple' => 'str',
    'token' => 'str',
    'mode' => 'int');

$filter_post = array(
    'uname' => 'str',
    'user_sig' => 'html',
    'email' => 'str', // because we search for partial email addresses
    'url' => 'str', // the search is for partial matching
    'user_viewemail' => 'int',
    'user_viewoid' => 'int',
    'attachsig' => 'int',
    'user_mailok' => 'str',
    'usecookie' => 'int',
    'limit' => 'int',
    'start' => 'int',
    'posts' => 'int',
    'posts_more' => 'int',
    'posts_less' => 'int',
    'last_login_more' => 'int',
    'last_login_less' => 'int',
    'user_regdate_more' => 'int',
    'user_regdate_less' => 'int',
    'mode' => 'int',
    'target' => 'str',
    'multiple' => 'str',
    'token' => 'str',
    'groups' => 'int',
    'level' => 'int',
    'rank' => 'int',
    'user_from' => 'str',
    'user_occ' => 'str',
    'user_intrest' => 'str',
    'user_submit' => 'str',
    'user_avatar' => 'str',
    'user_sort' => 'str',
    'user_order' => 'str',
    'uname_match' => 'str',
    'name_match' => 'str',
    'email_match' => 'str',
    'user_icq_match' => 'str',
    'user_aim_match' => 'str',
    'user_yim_match' => 'str',
    'user_msnm_match' => 'str');

if (!empty($_GET)) {
    // in places where strict mode is not used for checkVarArray, make sure filter_ vars are not overwritten
    if (isset($_GET['filter_post'])) unset($_GET['filter_post']);
    $clean_GET = icms_core_DataFilter::checkVarArray($_GET, $filter_get, true);
    extract($clean_GET);
}

if (!empty($_POST)) {
    $clean_POST = icms_core_DataFilter::checkVarArray($_POST, $filter_post, true);
    extract($clean_POST);
}

xoops_header(false);

$name_form = 'memberslist';
$name_userid = 'uid' . ($multiple ? "[]" : "");
$name_username = 'uname' . ($multiple ? "[]" : "");


icms_loadLanguageFile('core', 'findusers');

$rank_handler = icms_getModuleHandler("userrank", "system");
$user_handler = icms::handler("icms_member");

$unsets = array(
    "actkey",
    "pass",
    "theme",
    "umode",
    "uorder",
    "notify_mode");

foreach ($unsets as $var) {
    unset($user_handler->vars[$var]);
}

$items_match = array(
    "uname" => _MA_USER_UNAME,
    "name" => _MA_USER_REALNAME,
    "email" => _MA_USER_EMAIL,
    "user_icq" => _MA_USER_ICQ,
    "user_aim" => _MA_USER_AIM,
    "user_yim" => _MA_USER_YIM,
    "user_msnm" => _MA_USER_MSNM);

$items_range = array(
    "user_regdate" => _MA_USER_RANGE_USER_REGDATE,
    "last_login" => _MA_USER_RANGE_LAST_LOGIN,
    "posts" => _MA_USER_RANGE_POSTS);

// --> these show up on the PM dialog when the number of users exceeds 200 (default)
define("FINDUSERS_MODE_SIMPLE", 0);
define("FINDUSERS_MODE_ADVANCED", 1);

$modes = array(
    FINDUSERS_MODE_SIMPLE => _MA_USER_MODE_SIMPLE,
    FINDUSERS_MODE_ADVANCED => _MA_USER_MODE_ADVANCED);
// <-- see above comment

if (empty($user_submit)) {

    $form = new icms_form_Theme(_MA_USER_FINDUS, "uesr_findform", "findusers.php", 'post', true);

    if (FINDUSERS_MODE_ADVANCED == $mode) {
        foreach ($items_match as $var => $title) {
            $text = new icms_form_elements_Text("", $var, 30, 100, ${$var});
            $match = new icms_form_elements_select_Matchoption("", "{$var}_match", ${$var . '_match'});
            $match_tray = new icms_form_elements_Tray($title, "&nbsp;");
            $match_tray->addElement($match);
            $match_tray->addElement($text);
            $form->addElement($match_tray);
            unset($text, $match, $match_tray);
        }

        $url_text = new icms_form_elements_Text(_MA_USER_URLC, "url", 30, 100, $url);
        $location_text = new icms_form_elements_Text(_MA_USER_LOCATION, "user_from", 30, 100, $user_from);
        $occupation_text = new icms_form_elements_Text(_MA_USER_OCCUPATION, "user_occ", 30, 100, $user_occ);
        $interest_text = new icms_form_elements_Text(_MA_USER_INTEREST, "user_intrest", 30, 100, $user_intrest);
        foreach ($items_range as $var => $title) {
            $more = new icms_form_elements_Text("", "{$var}_more", 10, 5, ${$var . '_more'});
            $less = new icms_form_elements_Text("", "{$var}_less", 10, 5, ${$var . '_less'});
            $range_tray = new icms_form_elements_Tray($title, "&nbsp;-&nbsp;&nbsp;");
            $range_tray->addElement($less);
            $range_tray->addElement($more);
            $form->addElement($range_tray);
            unset($more, $less, $range_tray);
        }

        $mailok_radio = new icms_form_elements_Radio(_MA_USER_SHOWMAILOK, "user_mailok", empty($user_mailok) ? "both" : $user_mailok);
        $mailok_radio->addOptionArray(array(
            "mailok" => _MA_USER_MAILOK,
            "mailng" => _MA_USER_MAILNG,
            "both" => _MA_USER_BOTH));
        $avatar_radio = new icms_form_elements_Radio(_MA_USER_HASAVATAR, "user_avatar", empty($user_avatar) ? "both" : $user_avatar);
        $avatar_radio->addOptionArray(array(
            "y" => _YES,
            "n" => _NO,
            "both" => _MA_USER_BOTH));

        $level_radio = new icms_form_elements_Radio(_MA_USER_LEVEL, "level", $level);
        $levels = array(
            0 => _ALL,
            1 => _MA_USER_LEVEL_ACTIVE,
            2 => _MA_USER_LEVEL_INACTIVE,
            3 => _MA_USER_LEVEL_DISABLED);
        $level_radio->addOptionArray($levels);

        $member_handler = icms::handler('icms_member');
        $groups = $member_handler->getGroupList();
//        $groups[0] = _ALL;
        $group_select = new icms_form_elements_Select(_MA_USER_GROUP, 'groups', $groups, 3, true);
        $group_select->addOptionArray($groups);

        $ranks = $rank_handler->getList();
        $ranks[0] = _ALL;
        $rank_select = new icms_form_elements_Select(_MA_USER_RANK, 'rank', $rank);
        $rank_select->addOptionArray($ranks);

        $form->addElement($url_text);
        $form->addElement($location_text);
        $form->addElement($occupation_text);
        $form->addElement($interest_text);
        $form->addElement($mailok_radio);
        $form->addElement($avatar_radio);
        $form->addElement($level_radio);

        $form->addElement($group_select);
        $form->addElement($rank_select);
    } else {
        foreach (array(
            "uname",
            "email") as $var) {
            $title = $items_match[$var];
            $text = new icms_form_elements_Text("", $var, 30, 100, ${$var});
            $match = new icms_form_elements_select_Matchoption("", "{$var}_match", ${$var . '_match'});
            $match_tray = new icms_form_elements_Tray($title, "&nbsp;");
            $match_tray->addElement($match);
            $match_tray->addElement($text);
            $form->addElement($match_tray);
            unset($text, $match, $match_tray);
        }
    }

    $sort_select = new icms_form_elements_Select(_MA_USER_SORT, "user_sort", $user_sort);
    $sort_select->addOptionArray(array(
        "uname" => _MA_USER_UNAME,
        "last_login" => _MA_USER_LASTLOGIN,
        "user_regdate" => _MA_USER_REGDATE,
        "posts" => _MA_USER_POSTS));
    $order_select = new icms_form_elements_Select(_MA_USER_ORDER, "user_order", $user_order);
    $order_select->addOptionArray(array(
        "ASC" => _MA_USER_ASC,
        "DESC" => _MA_USER_DESC));

    $form->addElement($sort_select);
    $form->addElement($order_select);

    $form->addElement(new icms_form_elements_Text(_MA_USER_LIMIT, "limit", 6, 6, empty($limit) ? 50 : $limit));
    $form->addElement(new icms_form_elements_Hidden("mode", $mode));
    $form->addElement(new icms_form_elements_Hidden("target", $target));
    $form->addElement(new icms_form_elements_Hidden("multiple", $multiple));
    $form->addElement(new icms_form_elements_Hidden("token", $token));
    $form->addElement(new icms_form_elements_Button("", "user_submit", _SUBMIT, "submit"));


    $acttotal = $user_handler->getUserCountByGroupLink(array(), new icms_db_criteria_Item('level', 0, '>'));
    $inacttotal = $user_handler->getUserCountByGroupLink(array(), new icms_db_criteria_Item('level', 0, '<='));
    echo "</html><body>";

    echo "<h2 style='text-align:" . _GLOBAL_LEFT . ";'>" . _MA_USER_FINDUS . " - " . $modes[$mode] . "</h2>";

    $modes_switch = array();

    foreach ($modes as $_mode => $title) {
        if ($mode == $_mode) continue;

        $modes_switch[] = "<a href='findusers.php?target=" . htmlspecialchars($target, ENT_QUOTES) . "&amp;multiple=" . htmlspecialchars($multiple, ENT_QUOTES) . "&amp;token=" . htmlspecialchars($token, ENT_QUOTES) . "&amp;mode={$_mode}'>{$title}</a>";
    }

    echo "<h4>" . implode(" | ", $modes_switch) . "</h4>";
    echo "(" . sprintf(_MA_USER_ACTUS, "<span style='color:#ff0000;'>$acttotal</span>") . " " . sprintf(_MA_USER_INACTUS, "<span style='color:#ff0000;'>$inacttotal</span>") . ")";
    $form->display();
} else {
    $limit = empty($limit) ? 50 : $limit;
    $start = $start;

    $criteria = new icms_db_criteria_Compo();
    foreach (array_keys($items_match) as $var) {
        if (!empty($$var)) {
            $match = (!empty(${$var . '_match'})) ? (int) (${$var / '_match'}) : XOOPS_MATCH_START;
            $value = str_replace("_", "\\\_", icms_core_DataFilter::addSlashes(trim($$var)));
            switch ($match) {
                case XOOPS_MATCH_START:
                    $criteria->add(new icms_db_criteria_Item($var, $value . '%', 'LIKE'));
                    break;
                case XOOPS_MATCH_END:
                    $criteria->add(new icms_db_criteria_Item($var, '%' . $value, 'LIKE'));
                    break;
                case XOOPS_MATCH_EQUAL:
                    $criteria->add(new icms_db_criteria_Item($var, $value));
                    break;
                case XOOPS_MATCH_CONTAIN:
                    $criteria->add(new icms_db_criteria_Item($var, '%' . $value . '%', 'LIKE'));
                    break;
            }
        }
    }

    if (!empty($url)) {
        $criteria->add(new icms_db_criteria_Item('url', $url . '%', 'LIKE'));
    }

    if (!empty($user_from)) {
        $criteria->add(new icms_db_criteria_Item('user_from', '%' . $user_from . '%', 'LIKE'));
    }

    if (!empty($user_intrest)) {
        $criteria->add(new icms_db_criteria_Item('user_intrest', '%' . $user_intrest . '%', 'LIKE'));
    }
    if (!empty($user_occ)) {
        $criteria->add(new icms_db_criteria_Item('user_occ', '%' . $user_occ . '%', 'LIKE'));
    }

    foreach (array(
        "last_login",
        "user_regdate") as $var) {
        if (!empty(${$var . '_more'})) {
            $time = time() - (60 * 60 * 24 * (int) (trim(${$var . '_more'})));
            if ($time > 0) {
                $criteria->add(new icms_db_criteria_Item($var, $time, '<='));
            }
        }
        if (!empty(${$var . '_less'})) {
            $time = time() - (60 * 60 * 24 * (int) (trim(${$var . '_less'})));
            if ($time > 0) {
                $criteria->add(new icms_db_criteria_Item($var, $time, '>='));
            }
        }
    }

    if (!empty($posts_more)) {
        $criteria->add(new icms_db_criteria_Item('posts', $posts_more, '<='));
    }
    if (!empty($posts_less)) {
        $criteria->add(new icms_db_criteria_Item('posts', $posts_less, '>='));
    }
    if (!empty($user_mailok)) {
        if ($user_mailok == "mailng") {
            $criteria->add(new icms_db_criteria_Item('user_mailok', 0));
        } elseif ($user_mailok == "mailok") {
            $criteria->add(new icms_db_criteria_Item('user_mailok', 1));
        }
    }
    if (!empty($user_avatar)) {
        if ($user_avatar == "y") {
            $criteria->add(new icms_db_criteria_Item('user_avatar', "('', 'blank.gif')", 'NOT IN'));
        } elseif ($user_avatar == "n") {
            $criteria->add(new icms_db_criteria_Item('user_avatar', "('', 'blank.gif')", 'IN'));
        }
    }

    if (!empty($level)) {
        $level_value = array(
            1 => 1,
            2 => 0,
            3 => -1);
        $level = isset($level_value[$level]) ? $level_value[$level] : 1;
        $criteria->add(new icms_db_criteria_Item("level", $level));
    }

    if (!empty($rank)) {
        $rank_obj = $rank_handler->get($rank);
        if ($rank_obj->getVar("rank_special")) {
            $criteria->add(new icms_db_criteria_Item("rank", ($rank)));
        } else {
            if ($rank_obj->getVar("rank_min")) {
                $criteria->add(new icms_db_criteria_Item('posts', $rank_obj->getVar("rank_min"), '>='));
            }

            if ($rank_obj->getVar("rank_max")) {
                $criteria->add(new icms_db_criteria_Item('posts', $rank_obj->getVar("rank_max"), '<='));
            }
        }
    }

    $total = $user_handler->getUserCountByGroupLink($groups, $criteria);

    $validsort = array(
        "uname",
        "email",
        "last_login",
        "user_regdate",
        "posts");
    $sort = (!in_array($user_sort, $validsort)) ? "uname" : $user_sort;
    $order = "ASC";
    if (isset($user_order) && $user_order == "DESC") {
        $order = "DESC";
    }

    $criteria->setSort($sort);
    $criteria->setOrder($order);
    $criteria->setLimit($limit);
    $criteria->setStart($start);
    $foundusers = $user_handler->getUsersByGroupLink($groups, $criteria, true);

    echo $js_adduser = '
        <script type="text/javascript">
            var multiple=' . (int) $multiple . ';

            function addusers()
            {
                var sel_str = "";
                var num = 0;

                var mForm = document.forms["' . $name_form . '"];
                for (var i=0;i!=mForm.elements.length;i++) {
                    var id=mForm.elements[i];
                    if (( (multiple > 0 && id.type == "checkbox") || (multiple == 0 && id.type == "radio") ) && (id.checked == true) && ( id.name == "' . $name_userid . '" )) {

                        var name = mForm.elements[++i];
                        var len = id.value.length + name.value.length;
                        sel_str += len + ":" + id.value + ":" + name.value;
                        num ++;
                    }
                }

                if (num == 0) {

                    alert("' . _MA_USER_NOUSERSELECTED . '");

                    return false;
                }

                sel_str = num + ":" + sel_str;
                window.opener.addusers(sel_str);

                alert("' . _MA_USER_USERADDED . '");

                if (multiple == 0) {
                    window.close();
                    window.opener.focus();
                }
                return true;
            }
        </script>
    ';

    echo "</html><body>";
    echo "<a href='findusers.php?target=" . htmlspecialchars($target, ENT_QUOTES) . "&amp;multiple=" . (int) $multiple . "&amp;token=" . htmlspecialchars($token, ENT_QUOTES) . "'>" . _MA_USER_FINDUS . "</a>&nbsp;<span style='font-weight:bold;'>&raquo;&raquo;</span>&nbsp;" . _MA_USER_RESULTS . "<br /><br />";
    if (empty($start) && empty($foundusers)) {
        echo "<h4>" . _MA_USER_NOFOUND, "</h4>";
        $hiddenform = "<form name='findnext' action='findusers.php' method='post'>";
        // @todo this needs major evaluation
        foreach ($_POST as $k => $v) {
            if ($k == 'XOOPS_TOKEN_REQUEST') {
                // regenerate token value
                $hiddenform .= icms::$security->getTokenHTML() . "\n";
            } else {
                $hiddenform .= "<input type='hidden' name='" . htmlSpecialChars($k, ENT_QUOTES) . "' value='" . htmlSpecialChars(icms_core_DataFilter::stripSlashesGPC($v), ENT_QUOTES) . "' />\n";
            }
        }

        // @todo change test, since these variables will always be set now
        if (!isset($limit)) {
            $hiddenform .= "<input type='hidden' name='limit' value='{$limit}' />\n";
        }

        if (!isset($start)) {
            $hiddenform .= "<input type='hidden' name='start' value='{$start}' />\n";
        }

        $hiddenform .= "<input type='hidden' name='token' value='" . htmlspecialchars($token, ENT_QUOTES) . "' />\n";
        $hiddenform .= "</form>";

        echo "<div>" . $hiddenform;
        echo "<a href='#' onclick='javascript:document.findnext.start.value=0;document.findnext.user_submit.value=0;document.findnext.submit();'>" . _MA_USER_SEARCHAGAIN . "</a>\n";
        echo "</div>";
    } elseif ($start < $total) {
        if (!empty($total)) {
            echo sprintf(_MA_USER_USERSFOUND, $total) . "<br />";

        }

        if (!empty($foundusers)) {
            echo "<form action='findusers.php' method='post' name='{$name_form}' id='{$name_form}'>
            <table width='100%' border='0' cellspacing='1' cellpadding='4' class='outer'>
            <tr>
            <th align='center' width='5px'>";

            if (!empty($multiple)) {
                echo "<input type='checkbox' name='memberslist_checkall' id='memberslist_checkall' onclick='xoopsCheckAll(\"{$name_form}\", \"memberslist_checkall\");' />";
            }
            echo "</th>
            <th align='center'>" . _MA_USER_UNAME . "</th>
            <th align='center'>" . _MA_USER_REALNAME . "</th>
            <th align='center'>" . _MA_USER_REGDATE . "</th>
            <th align='center'>" . _MA_USER_LASTLOGIN . "</th>
            <th align='center'>" . _MA_USER_POSTS . "</th>

            </tr>";
            $ucount = 0;
            foreach (array_keys($foundusers) as $j) {
                if ($ucount % 2 == 0) {
                    $class = 'even';
                } else {
                    $class = 'odd';
                }

                $ucount++ ;
                $fuser_name = $foundusers[$j]->getVar("name") ? $foundusers[$j]->getVar("name") : "&nbsp;";
                echo "<tr class='$class'>
                <td align='center'>";
                if (!empty($multiple)) {
                    echo "<input type='checkbox' name='{$name_userid}' id='{$name_userid}' value='" . $foundusers[$j]->getVar("uid") . "' />";
                    echo "<input type='hidden' name='{$name_username}' id='{$name_username}' value='" . $foundusers[$j]->getVar("uname") . "' />";
                } else {
                    echo "<input type='radio' name='{$name_userid}' id='{$name_userid}' value='" . $foundusers[$j]->getVar("uid") . "' />";
                    echo "<input type='hidden' name='{$name_username}' id='{$name_username}' value='" . $foundusers[$j]->getVar("uname") . "' />";
                }
                echo "</td>
                <td><a href='" . ICMS_URL . "/userinfo.php?uid=" . $foundusers[$j]->getVar("uid") . "' target='_blank'>" . $foundusers[$j]->getVar("uname") . "</a></td>
                <td>" . $fuser_name . "</td>
                <td align='center'>" . ($foundusers[$j]->getVar("user_regdate") ? date(_SHORTDATESTRING, $foundusers[$j]->getVar("user_regdate")) : "") . "</td>
                <td align='center'>" . ($foundusers[$j]->getVar("last_login") ? date(_MEDIUMDATESTRING, $foundusers[$j]->getVar("last_login")) : "") . "</td>
                <td align='center'>" . $foundusers[$j]->getVar("posts") . "</td>";
                echo "</tr>\n";
            }
            echo "<tr class='foot'><td colspan='6'>";

            // placeholder for external applications
            if (empty($target)) {
                echo "<select name='fct'><option value='users'>" . _DELETE . "</option><option value='mailusers'>" . _MA_USER_SENDMAIL . "</option>";
                echo "</select>&nbsp;";
                echo icms::$security->getTokenHTML() . "<input type='submit' value='" . _SUBMIT . "' />";

                // Add selected users
            } else {
                echo "<input type='button' value='" . _MA_USER_ADD_SELECTED . "' onclick='addusers();' />";
            }
            echo "<input type='hidden' name='token' value='" . htmlspecialchars($token, ENT_QUOTES) . "' />\n";
            echo "</td></tr></table></form>\n";
        }

        // @todo this needs major evaluation
        $hiddenform = "<form name='findnext' action='findusers.php' method='post'>";
        foreach ($_POST as $k => $v) {
            if ($k == 'XOOPS_TOKEN_REQUEST') {
                // regenerate token value
                $hiddenform .= icms::$security->getTokenHTML() . "\n";
            } else {
                $hiddenform .= "<input type='hidden' name='" . htmlSpecialChars($k, ENT_QUOTES) . "' value='" . htmlSpecialChars(icms_core_DataFilter::stripSlashesGPC($v), ENT_QUOTES) . "' />\n";
            }
        }

        if (!isset($limit)) {
            $hiddenform .= "<input type='hidden' name='limit' value='" . $limit . "' />\n";
        }
        if (!isset($start)) {
            $hiddenform .= "<input type='hidden' name='start' value='" . $start . "' />\n";
        }
        $hiddenform .= "<input type='hidden' name='token' value='" . htmlspecialchars($token, ENT_QUOTES) . "' />\n";
        if (!isset($total) || ($totalpages = ceil($total / $limit)) > 1) {
            $prev = $start - $limit;
            if ($start - $limit >= 0) {
                $hiddenform .= "<a href='#0' onclick='javascript:document.findnext.start.value=" . $prev . ";document.findnext.submit();'>" . _MA_USER_PREVIOUS . "</a>&nbsp;\n";
            }
            $counter = 1;
            $currentpage = ($start + $limit) / $limit;

            if (!isset($total)) {

                while ($counter <= $currentpage) {
                    if ($counter == $currentpage) {

                        $hiddenform .= "<strong>" . $counter . "</strong> ";
                    } elseif (($counter > $currentpage - 4 && $counter < $currentpage + 4) || $counter == 1) {
                        $hiddenform .= "<a href='#" . $counter . "' onclick='javascript:document.findnext.start.value=" . ($counter - 1) * $limit . ";document.findnext.submit();'>" . $counter . "</a> ";

                        if ($counter == 1 && $currentpage > 5) {
                            $hiddenform .= "... ";
                        }
                    }

                    $counter++ ;
                }

            } else {

                while ($counter <= $totalpages) {
                    if ($counter == $currentpage) {

                        $hiddenform .= "<strong>" . $counter . "</strong> ";
                    } elseif (($counter > $currentpage - 4 && $counter < $currentpage + 4) || $counter == 1 || $counter == $totalpages) {
                        if ($counter == $totalpages && $currentpage < $totalpages - 4) {
                            $hiddenform .= "... ";
                        }
                        $hiddenform .= "<a href='#" . $counter . "' onclick='javascript:document.findnext.start.value=" . ($counter - 1) * $limit . ";document.findnext.submit();'>" . $counter . "</a> ";

                        if ($counter == 1 && $currentpage > 5) {
                            $hiddenform .= "... ";
                        }
                    }
                    $counter++ ;
                }
            }

            $next = $start + $limit;
      
            if ((isset($total) && $total > $next) || (!isset($total) && count($foundusers) >= $limit)) {
                $hiddenform .= "&nbsp;<a href='#" . $total . "' onclick='javascript:document.findnext.start.value=" . $next . ";document.findnext.submit();'>" . _MA_USER_NEXT . "</a>\n";
            }
        }
        $hiddenform .= "</form>";

        echo "<div>" . $hiddenform;
        if (isset($total)) {
            echo "<br />" . sprintf(_MA_USER_USERSFOUND, $total) . "&nbsp;";
        }
        echo "<a href='#' onclick='javascript:document.findnext.start.value=0;document.findnext.user_submit.value=0;document.findnext.submit();'>" . _MA_USER_SEARCHAGAIN . "</a>\n";

        echo "</div>";
    }
}


xoops_footer();