#!/usr/bin/perl -wT
############################################################
## Written and copyright 2002 by 
## Jacqueline D. Hamilton (kira@cgi101.com)
##
## This code is excerpted from "CGI Programming 201"
## (http://www.cgi101.com/advanced)
##
## You may use this code on your own website, however
## you may not publish or sell any copy or derivative work
## without permission of the author.
#############################################################
use strict;
use lib '.';
use MyBoard;

my($forum_id, $sth, $rv, $f);

# untaint the query string
if ($ENV{QUERY_STRING} =~ /^(\d+)$/) {
	$forum_id = $1;
} else {
	&dienice("$ENV{QUERY_STRING} isn't a valid forum number.");
}

# get the name & info on this forum from the forums table
$sth = $dbh->prepare("select * from forums where id=$forum_id") or &dbdie;
$rv = $sth->execute;
$f = $sth->fetchrow_hashref;
&do_header("Search the $f->{name} Forum");
print qq(<h2>Search the $f->{name} Forum</h2>\n);

print <<EndHTML;

<form action="search2.cgi" method="POST">
<input type="hidden" name="forum" value="$forum_id">
Search for: <input type="text" name="keywords" size=40>
<input type="submit" value="Search">
</form>
<p>

EndHTML

&do_footer;