From: moodler <moodler>
Date: Tue, 26 Aug 2003 12:18:14 +0000 (+0000)
Subject: For students, don't search invisible forums!
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=4cabd35565f54e249e0b75a64d7218b5d2b5e9b9;p=moodle.git

For students, don't search invisible forums!
---

diff --git a/mod/forum/lib.php b/mod/forum/lib.php
index c81417d21e..1a1262b66f 100644
--- a/mod/forum/lib.php
+++ b/mod/forum/lib.php
@@ -547,8 +547,15 @@ function forum_search_posts($searchterms, $courseid, $page=0, $recordsperpage=50
 
     if (!isteacher($courseid)) {
         $notteacherforum = "AND f.type <> 'teacher'";
+
+        $forummodule = get_record("modules", "name", "forum");
+        $onlyvisible = " AND f.id = cm.instance AND cm.visible = 1 AND cm.module = $forummodule->id";
+        $onlyvisibletable = ", {$CFG->prefix}course_modules cm";
     } else {
         $notteacherforum = "";
+
+        $onlyvisible = "";
+        $onlyvisibletable = "";
     }
 
     switch ($CFG->dbtype) {
@@ -607,12 +614,12 @@ function forum_search_posts($searchterms, $courseid, $page=0, $recordsperpage=50
     $selectsql = "{$CFG->prefix}forum_posts p,  
                   {$CFG->prefix}forum_discussions d, 
                   {$CFG->prefix}user u, 
-                  {$CFG->prefix}forum f
+                  {$CFG->prefix}forum f $onlyvisibletable
              WHERE ($messagesearch OR $subjectsearch)
                AND p.userid = u.id 
                AND p.discussion = d.id 
                AND d.course = '$courseid' 
-               AND d.forum = f.id $notteacherforum";
+               AND d.forum = f.id $notteacherforum $onlyvisible";
     
     $totalcount = count_records_sql("SELECT COUNT(*) FROM $selectsql");