config->get('config_language_id') . "' AND ( pd.name LIKE '" . $this->db->escape($data['query']) . "%' OR p.model LIKE '" . $this->db->escape($data['query']) . "%' OR p.sku LIKE '" . $this->db->escape($data['query']) . "%' ) GROUP BY p.product_id ORDER BY pd.name ASC LIMIT 5"; $query = $this->db->query($sql); return $query->rows; } public function getCategories($data = array()) { $sql = "SELECT cp.category_id AS category_id, GROUP_CONCAT(cdpath.name ORDER BY cp.level SEPARATOR '  >  ') AS name, cmain.image FROM " . DB_PREFIX . "category_path cp LEFT JOIN " . DB_PREFIX . "category cmain ON (cp.category_id = cmain.category_id) LEFT JOIN " . DB_PREFIX . "category cpath ON (cp.path_id = cpath.category_id) LEFT JOIN " . DB_PREFIX . "category_description cdmain ON (cp.category_id = cdmain.category_id) LEFT JOIN " . DB_PREFIX . "category_description cdpath ON (cp.path_id = cdpath.category_id) WHERE cdpath.language_id = '" . (int)$this->config->get('config_language_id') . "' AND cdmain.language_id = '" . (int)$this->config->get('config_language_id') . "' AND cdmain.name LIKE '%" . $this->db->escape($data['query']) . "%' GROUP BY cp.category_id ORDER BY name ASC LIMIT 5"; $query = $this->db->query($sql); return $query->rows; } public function getManufacturers($data = array()) { $sql = "SELECT DISTINCT m.manufacturer_id, m.name, m.image FROM " . DB_PREFIX . "manufacturer m LEFT JOIN " . DB_PREFIX . "manufacturer_description md ON (m.manufacturer_id = m.manufacturer_id) WHERE m.name LIKE '" . $this->db->escape($data['query']) . "%' ORDER BY m.name ASC LIMIT 5"; $query = $this->db->query($sql); return $query->rows; } public function getCustomers($data = array()) { $sql = "SELECT customer_id, email, CONCAT(c.firstname, ' ', c.lastname) AS name FROM " . DB_PREFIX . "customer c WHERE c.firstname LIKE '" . $this->db->escape($data['query']) . "%' OR c.email LIKE '" . $this->db->escape($data['query']) . "%' OR c.lastname LIKE '" . $this->db->escape($data['query']) . "%' ORDER BY name ASC LIMIT 5"; $query = $this->db->query($sql); return $query->rows; } public function getOrders($data = array()) { $sql = "SELECT o.order_id, CONCAT(o.firstname, ' ', o.lastname) AS customer, o.total, o.currency_code, o.currency_value, o.date_added, o.email FROM `" . DB_PREFIX . "order` o WHERE o.order_status_id > '0' AND (o.order_id = '" . (int)$this->db->escape($data['query']) . "' OR o.firstname LIKE '" . $this->db->escape($data['query']) . "%' OR o.email LIKE '" . $this->db->escape($data['query']) . "%' OR o.lastname LIKE '" . $this->db->escape($data['query']) . "%' OR CONCAT(o.invoice_prefix, o.invoice_no) LIKE '" . $this->db->escape($data['query']) . "%') ORDER BY o.order_id ASC LIMIT 5"; $query = $this->db->query($sql); return $query->rows; } }