<?php
    include("database_connection.php");

    $search_query = mysqli_escape_string($sqli_con, strip_tags($_GET['query']));
    $email = strip_tags($_SESSION['source_email']);

    if(strlen($search_query) > 0) {
        $query = $sqli_con->query("SELECT id, username, avatar, first_name, last_name, country, gender, user_level FROM members WHERE username LIKE '%$search_query%'");

        if($query->num_rows > 0) {
            while($row = $query->fetch_array(MYSQLI_ASSOC)) {
                if($row['gender'] == "m") {$row['gender'] = "Male";} else {$row['gender'] = "Female";}
                if($row['user_level'] == "a") {$row['user_level'] = "Administrator";} else if($row['user_level'] == "m") {$row['user_level'] = "Moderator";} else {$row['user_level'] = "Member";}
                echo "<div id='search_result'>
                    <a href='profile.php?id=". $row['id'] ."'><img src='". $row['avatar'] ."' /></a><div id='sr_info'><a href='profile.php?id=".  $row['id'] ."'>". $row['username'] ."</a>
                    <br /><p>". $row['first_name'] ." ".  $row['last_name'] ."</p><br />";

                if($row['country'] != NULL) {
                    echo "<p>".  $row['country'] ."</p><br />";
                }

                echo "  <p>".  $row['gender'] ."</p><br />
                    <p>".  $row['user_level'] ."</p>
                    </div>
                </div>";
            }
        }

        $query->free();
        $sqli_con->close();
    }

?>