From 012d22cbb0d6fe47978c7e7386e57bb09a2ecfb4 Mon Sep 17 00:00:00 2001
From: Danii Saahir <158811885+danii-saahir@users.noreply.github.com>
Date: Fri, 10 May 2024 14:30:41 +0800
Subject: [PATCH] Update search.php

Fixes urlencode() receiving null as a parameter. Add check to ensure that $data is not null.
---
 search.php | 103 +++++++++++++++++++++++++++++++----------------------
 1 file changed, 61 insertions(+), 42 deletions(-)
diff --git a/search.php b/search.php
index 1673129..f0d51e8 100644
--- a/search.php
+++ b/search.php
@@ -1,8 +1,8 @@
 <?php require "misc/header.php"; ?>
 <title>
 <?php
-  $query = htmlspecialchars(trim($_REQUEST["q"]));
-  echo $query;
+$query = htmlspecialchars(trim($_REQUEST["q"]));
+echo $query;
 ?> - Binternet</title>
 </head>
     <body>
@@ -10,23 +10,21 @@
             <h1><a class="no-decoration accent" href="./">Binternet</a></h1>
             <input type="text" name="q" placeholder="Search Image"
                 <?php
-                    $query_encoded = urlencode($query);
+                $query_encoded = urlencode($query);
 
-                    if (1 > strlen($query) || strlen($query) > 64)
-                    {
-                        header("Location: ./");
-                        die();
-                    }
+                if (1 > strlen($query) || strlen($query) > 64) {
+                    header("Location: ./");
+                    die();
+                }
 
-                    echo "value=\"$query\"";
+                echo "value=\"$query\"";
                 ?>
             >
             <!-- <div></div> -->
         </form>
 
 <?php
-
-$query = $_GET['q'];
+$query = $_GET["q"];
 
 $bookmark = null;
 if (array_key_exists("bookmark", $_GET)) {
@@ -46,24 +44,24 @@ class SearchResult
     public $bookmark;
 }
 
-$header_function = function($ch, $rawheader)
-{
+$header_function = function ($ch, $rawheader) {
     global $csrftoken;
     $len = strlen($rawheader);
 
     $header = explode(":", $rawheader, 2);
-    if (count($header) != 2)
+    if (count($header) != 2) {
         return $len;
+    }
 
     // we are only interested in set-cookie header
-    if (trim($header[0]) != "set-cookie")
+    if (trim($header[0]) != "set-cookie") {
         return $len;
+    }
 
     $cookie = explode(";", trim($header[1]), 2);
     $cookie = explode("=", $cookie[0], 2);
 
-    switch ($cookie[0])
-    {
+    switch ($cookie[0]) {
         case "csrftoken":
             $csrftoken = $cookie[1];
     }
@@ -71,74 +69,95 @@ $header_function = function($ch, $rawheader)
     return $len;
 };
 
-$prepare_search_curl_obj = function($query, $bookmark) use ($url, $header_function, $csrftoken)
-{
-    $data_param_obj = array(
-        "options"=>array(
-            "query"=>$query
-        )
-    );
-    if ($bookmark != null)
-        $data_param_obj["options"]["bookmarks"] = array($bookmark);
+$prepare_search_curl_obj = function ($query, $bookmark) use (
+    $url,
+    $header_function,
+    $csrftoken
+) {
+    $data_param_obj = [
+        "options" => [
+            "query" => $query,
+        ],
+    ];
+    if ($bookmark != null) {
+        $data_param_obj["options"]["bookmarks"] = [$bookmark];
+    }
 
     $data_param = urlencode(json_encode($data_param_obj));
 
-    $headers = array();
-    if ($csrftoken != null)
-    {
+    $headers = [];
+    if ($csrftoken != null) {
         $headers[] = "x-csrftoken: $csrftoken";
         $headers[] = "cookie: csrftoken=$csrftoken";
     }
 
     $finalurl = $url;
-    if ($bookmark == null)
+    if ($bookmark == null) {
         $finalurl = "$url?data=$data_param";
+    }
 
     $ch = curl_init($finalurl);
     curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
     curl_setopt($ch, CURLOPT_HEADERFUNCTION, $header_function);
     curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
-    if ($bookmark != null)
-    {
+    if ($bookmark != null) {
         curl_setopt($ch, CURLOPT_POST, true);
         curl_setopt($ch, CURLOPT_POSTFIELDS, "data=$data_param");
     }
     return $ch;
 };
 
-$search = function($query, $bookmark) use($prepare_search_curl_obj)
-{
+$search = function ($query, $bookmark) use ($prepare_search_curl_obj) {
     $ch = $prepare_search_curl_obj($query, $bookmark);
     $response = curl_exec($ch);
     $data = json_decode($response);
-    $images = array();
+    $images = [];
     echo "<div class=img-container>";
-        foreach ($data->{"resource_response"}->{"data"}->{"results"} as $result)
-        {
+    if (
+        $data &&
+        property_exists($data, "resource_response") &&
+        property_exists($data->{"resource_response"}, "data") &&
+        property_exists($data->{"resource_response"}->{"data"}, "results")
+    ) {
+        foreach (
+            $data->{"resource_response"}->{"data"}->{"results"}
+            as $result
+        ) {
             $image = $result->{"images"}->{"orig"};
             $url = $image->{"url"};
             array_push($images, $url);
             echo "<a class=img-result href='/image_proxy.php?url=", $url, "'>";
-            echo "<img loading='lazy' src='/image_proxy.php?url=", $url, "'></a>";
+            echo "<img loading='lazy' src='/image_proxy.php?url=",
+                $url,
+                "'></a>";
         }
+    } else {
+        echo "<p>No results found.</p>";
+    }
     echo "</div>";
     $result = new SearchResult();
     $result->images = $images;
-    if (property_exists($data->{"resource_response"}, "bookmark"))
+    if (
+        $data &&
+        property_exists($data, "resource_response") &&
+        property_exists($data->{"resource_response"}, "bookmark")
+    ) {
         $result->bookmark = $data->{"resource_response"}->{"bookmark"};
+    }
     return $result;
 };
 
 $result = $search($query, $bookmark);
 
-if ($result->bookmark != null)
-{
+if ($result->bookmark != null) {
     $query_encoded = urlencode($query);
     $bookmark_encoded = urlencode($result->bookmark);
-    $csrftoken_encoded = urlencode($csrftoken);
+    $csrftoken_encoded = $csrftoken ? urlencode($csrftoken) : "";
+
     echo "<h2 style=\"text-align: center;\"><a href=\"/search.php?q=$query_encoded&bookmark=$bookmark_encoded&csrftoken=$csrftoken_encoded\">Next page</a></h2><br><br><br>";
 }
 
 include "misc/footer.php";
 
+
 ?>

No results found.