OpencachingDeutschland / oc-server3

        // get findername from finderid

        $options['finderid'] = isset($options['finderid']) ? $options['finderid'] + 0 : 0; // Ocprop

        if (isset($options['finder']) && $options['finderid'] > 0) {

            $rs_name = sql("SELECT `username` FROM `user` WHERE `user_id`='&1'", $options['finderid']);

            if (sql_num_rows($rs_name) == 1) {

                $record_name = sql_fetch_array($rs_name);

                $options['finder'] = $record_name['username'];

            }

            unset($record_name);

            sql_free_result($rs_name);

        }

        // get ownername from ownerid

        $options['ownerid'] = isset($options['ownerid']) ? $options['ownerid'] + 0 : 0; // Ocprop

        // get ownername from ownerid

        $options['ownerid'] = isset($options['ownerid']) ? $options['ownerid'] + 0 : 0; // Ocprop

        if (isset($options['owner']) && $options['ownerid'] > 0) {

            $rs_name = sql("SELECT `username` FROM `user` WHERE `user_id`='&1'", $options['ownerid']);

            if (sql_num_rows($rs_name) == 1) {

                $record_name = sql_fetch_array($rs_name);

                $options['owner'] = $record_name['username'];

            }

            unset($record_name);

            sql_free_result($rs_name);

        }

        // map obsolete search types

        if ($options['searchtype'] == 'bydistance') {

        $options['ownerid'] = isset($_REQUEST['ownerid']) ? $_REQUEST['ownerid'] : 0;

        $options['owner'] = isset($_REQUEST['owner']) ? stripslashes($_REQUEST['owner']) : '';

        if (isset($options['owner'])) {

            $rs_name = sql("SELECT `user_id` FROM `user` WHERE `username`='&1'", $options['owner']);

            if (sql_num_rows($rs_name) == 1) {

                $record_id = sql_fetch_array($rs_name);

                $options['ownerid'] = $record_id['user_id'];

                $user = new user($options['ownerid']);

            }

            unset($record_id);

            sql_free_result($rs_name);

        }

    } elseif (isset($_REQUEST['searchbyfinder'])) { // Ocprop

        $options['searchtype'] = 'byfinder';

        $options['finder'] = isset($_REQUEST['finder']) ? stripslashes($_REQUEST['finder']) : '';

        $options['logtype'] = isset($_REQUEST['logtype']) ? $_REQUEST['logtype'] : '1,7'; // Ocprop

        if (isset($options['finder'])) {

            $rs_name = sql("SELECT `user_id` FROM `user` WHERE `username`='&1'", $options['finder']);

            if (sql_num_rows($rs_name) == 1) {

                $record_id = sql_fetch_array($rs_name);

                $options['finderid'] = $record_id['user_id'];

                $user = new user($options['finderid']);

            }

            unset($record_id);

            sql_free_result($rs_name);

        }

    } elseif ((isset($_REQUEST['searchbyortplz']) && is_numeric($_REQUEST['ortplz']))

              || isset($_REQUEST['searchbyplz'])) {

        $options['searchtype'] = 'byplz';