﻿/*
	this file check's for XSS in the header's search form
	has the following dependencies, the following libraries must be called first:
		<script src="/jsscripts/js_Common.js"></script>
		<script src="/jsscripts/js_htmlCodeCheck.js"></script>
	
*/ 
function doNCSHeaderSearchKeyDown(e, NCSHeaderSearchField, url) {
	var enterKey = '13';
	var keynum = '';
	
	if (document.all)  // IE
		keynum = e.keyCode;
	else 
		keynum = e.keyCode;

	// alert(keynum);
	// if the enter key was pressed, then submit the form
	if(keynum == enterKey) {
		NCSHeaderSearch(NCSHeaderSearchField,url);
	}
}
function NCSHeaderSearchOnClick(NCSHeaderSearchField) {
	var defa_search_str = "Enter Search Text Here";
	if( NCSHeaderSearchField.value == defa_search_str ) {
		NCSHeaderSearchField.value = "";
	}
}

function NCSHeaderSearch(NCSHeaderSearchField,url) {
	var bContinue = false;
	//alert('NCSHeaderSearchField.value: ' + NCSHeaderSearchField.value);
	bContinue = checkandsubmitNCSHeaderSearch(NCSHeaderSearchField);
	if( bContinue ) {
		window.location.href = url + '?q=' + NCSHeaderSearchField.value;
	}
}

function checkandsubmitNCSHeaderSearch(NCSHeaderSearchField){
	var missing = false;
	var htmlcheck_fail = false;
	var missing_str = "You have not provided the following:\n\n";
	var htmlcheck_fail_str = "";
	var test = "";
	// test for html
	test = htmlCodeCheck(NCSHeaderSearchField, 'The Search String', false, false);
	if( test != "" ) {
		htmlcheck_fail_str += test;
		htmlcheck_fail = true;
	}
	if (!NCSHeaderSearchField.value){
		missing = true;
		missing_str += "Search String\n";
	}
	if (missing){
		alert(missing_str);
		return false;
	}
	else if (htmlcheck_fail){
		alert(htmlcheck_fail_str);
		return false;
	}	
	else{
		return true;
	}
}
