fix the advanced search SQL backend

[swagfag]

• its apparently still possible to DDOS the forum by searching Posts and Messages with a single wildcard * (put some limits on that query or optimize it so it actually works)
• some forum ids cant be searched. include them in the queries
  eg v2 scripts & functions search.php?keywords=*&terms=any&author=&fid%5B%5D=83&sc=1&sf=titleonly&sr=topics&sk=t&sd=d&st=7&ch=300&t=0&submit=Search

[joedf]

@tank
Perhaps we could also give this "Sphinx" search backend a try? apparently is it much faster...

[swagfag]

DDOS the forum by searching Posts and Messages with a single wildcard *

lol, still not fixed apparently...

[joedf]

I'll send tank a direct message and ask him again.

[tank]

i dunno what you mean by DDOS with a single wildcard. Yes YOUR session will become unusable during the course but it would take many such sessions occuring at the same time to DDOS and there are other mechinisms in place to account for that

[swagfag]

ah ok, i dont see whats going on with the rest of the forum in the background once i lock myself out. i just get a cloudflare page so i assumed everybody did

then maybe reduce the query timeout down to like 5 mins. i just retested it and it locked me out for about an hour

[joedf]

It looks like sphinx could be the fastest option, but no guarantee and it does require some setup with possible significant space usage/overhead