search: Properly pagenate search results

Also re-implement the "exclude answered tickets" and "exclude assigned
tickets" from open queue options.

include/class.orm.php

@@ -1637,7 +1637,7 @@ class MySqlCompiler extends SqlCompiler {
      * (string) token to be placed into the compiled SQL statement. For
      * MySQL, this is always the string '?'.
      */
-    function input(&$what, $slot=false) {
+    function input($what, $slot=false) {
         if ($what instanceof QuerySet) {
             $q = $what->getQuery(array('nosort'=>true));
             $this->params = array_merge($q->params);
@@ -2066,7 +2066,12 @@ class MysqlExecutor {
     }
 
     function __toString() {
-        return $this->sql;
+        $self = $this;
+        $x = 0;
+        return preg_replace_callback('/\?/', function($m) use ($self, &$x) {
+            $p = $self->params[$x++];
+            return db_real_escape($p, is_string($p));
+        }, $this->sql);
     }
 }
 

include/class.pagenate.php

@@ -127,5 +127,9 @@ class PageNate {
         return $html;
     }
 
+    function paginate(QuerySet $qs) {
+        return $qs->limit($this->getLimit())->offset($this->getStart());
+    }
+
 }
 ?>

include/class.staff.php

@@ -366,7 +366,7 @@ implements AuthenticatedUser {
     }
 
     function showAssignedTickets() {
-        return $this->group->show_assigned_tickets;
+        return $this->show_assigned_tickets;
     }
 
     function getTeams() {

include/staff/tickets.inc.php

@@ -42,7 +42,10 @@ default:
 case 'open':
     $status='open';
     $results_type=__('Open Tickets');
-    $tickets->filter(array('isanswered'=>0));
+    if (!$cfg->showAnsweredTickets())
+        $tickets->filter(array('isanswered'=>0));
+    if (!$cfg || !($cfg->showAssignedTickets() || $thisstaff->showAssignedTickets()))
+        $tickets->filter(array('staff_id'=>0));
     break;
 }
 
@@ -78,6 +81,7 @@ $tickets->select_related('lock', 'dept', 'staff', 'user', 'user__default_email',
 $pagelimit=($_GET['limit'] && is_numeric($_GET['limit']))?$_GET['limit']:PAGE_LIMIT;
 $page=($_GET['p'] && is_numeric($_GET['p']))?$_GET['p']:1;
 $pageNav=new Pagenate($tickets->count(), $page,$pagelimit);
+$tickets = $pageNav->paginate($tickets);
 
 TicketForm::ensureDynamicDataView();