log_error2db( $lang_sytem['INVAILD_LINK_ENTRY'], $_SERVER['PHP_SELF'], $_SERVER['REMOTE_ADDR'], $user='',$Gobal_error_log_db,'android' ); //error log //echo $ER_APP_RESPONSE_FAIL; exit; }else{ //////////////////////////DATABASE $sql = new class_mysql; $sql->Database = $Gobal_Database; $sql->mysql_server_add = $Gobal_mysql_server_add; $sql->mysql_user = $Gobal_mysql_user; $sql->mysql_password = $Gobal_mysql_password; $sql->Connect_db(); $sql->MysqlQuery("SET NAMES 'utf8'"); //set DB using UTF8 //////////////////////////////////end $search_type = $check->quotes_all($_GET['search_type']); switch ($search_type) { case 1: $sql_search_type = " product_type LIKE "; break; case 2: $sql_search_type = "Code LIKE "; break; } //search keyword if ( strlen($_GET['keyword']) != 0 ){ $serach_keyword = ' AND '.$sql_search_type." '%".$check->quotes_all($_GET['keyword'])."%' "; } //////LOGINED if ( !empty($_COOKIE['user_id']) ) require_once('session_login_check_noredirect.php') ; if ( !$SUCCESS_LOGIN ){//no login yet, just search basic product $sql_member_zone = " AND permission = '1' "; } //$cat_type = 1; $catid = $check->quotes_all($_GET['category']); switch ($catid) { case 99: $sql_cat_type = " 1=1 "; break; case 1: case 2: case 3: case 4: case 5: $sql_cat_type = "Product_cat = '".$catid."' "; break; default: $sql_cat_type = ''; } $sorting = $check->quotes_all($_GET['sorting']); switch ($sorting) { case 99: $sql_sotring = " "; break; case 1: $sql_sotring = " ORDER BY Code ASC"; break; case 2: $sql_sotring = " ORDER BY product_type ASC"; break; default: $sql_sotring = '1=1'; } /////////////CHECK Permission $ary_product = $sql->get_row2array(" $manroyce_product " , " * ", " WHERE ".$sql_cat_type." ".$serach_keyword." ".$sql_member_zone." ".$sql_sotring." LIMIT ".$list_length." "); /* if ( $ary_permission[0]['account_disable'] == 'Yes' ){ $xml_show_data = false; } */ } //print_r($ary_product); ?>