search mysql

A

acellec

New Member
Messages
29
Reaction score
0
Points
0
i have this to display mysql database

PHP: 
<body>
<h1>BMK Automobile PArts</h1>
<h2>Search</h2> 
<form name="search" method="post" action="search.php">
Seach for: <input type="text" name="find" /> in 
<Select NAME="field">
<Option VALUE="Pno">First Name</option>
<Option VALUE="Pname">Last Name</option>
<Option VALUE="Desc">Profile</option>
</Select>
<input type="hidden" name="searching" value="yes" />
<input type="submit" name="search" value="Search" />
</form>




<?
$TableName = "automobileparts";
$SQLstring = "SELECT * FROM automobileparts";

require_once("dbconnect.php");
        
echo "<table width='100%' border='1'>";
$Row = $QueryResult->fetch_row();
do {
             echo "<tr><td>{$Row[0]}</td>";
        
        echo "<td align='right'>{$Row[1]}</td>";
        echo "<td align='right'>{$Row[2]}</td>";
        echo "<td align='right'>{$Row[3]}</td>";
        echo "<td align='right'>{$Row[4]}</td>";
        echo "<td align='right'>{$Row[5]}</td>";
        echo "<td align='right'><a href=\"edit.php?id={$Row[0]}\">Edit</a></td>";
        echo "<td align='right'><a href=\"delete.php?id={$Row[0]}\">Delete</a></td>";
        echo "</tr>";
        $Row = $QueryResult->fetch_row();
} while ($Row);
echo "</table>";




$DBConnect->close();


?>

</body>


i have this for the search.php

PHP: 
<? 
//This is only displayed if they have submitted the form 
if ($searching =="yes") 
{ 
echo "<h2>Results</h2><p>"; 

//If they did not enter a search term we give them an error 
if ($find == "") 
{ 
echo "<p>You forgot to enter a search term"; 
exit; 
} 

// Otherwise we connect to our Database 
mysql_connect("localhost", "root", "") or die(mysql_error()); 
mysql_select_db("automobile_parts") or die(mysql_error()); 

// We preform a bit of filtering 
$find = strtoupper($find); 
$find = strip_tags($find); 
$find = trim ($find); 

//Now we search for our search term, in the field the user specified 
$data = mysql_query("SELECT * FROM automobileparts WHERE upper($field) LIKE'%$find%'"); 

//And we display the results 
while($result = mysql_fetch_array( $data )) 
{ 
echo $result['fname']; 
echo " "; 
echo $result['lname']; 
echo "<br>"; 
echo $result['info']; 
echo "<br>"; 
echo "<br>"; 
} 

//This counts the number or results - and if there wasn't any it gives them a little message explaining that 
$anymatches=mysql_num_rows($data); 
if ($anymatches == 0) 
{ 
echo "Sorry, but we can not find an entry to match your query<br><br>"; 
} 

//And we remind them what they searched for 
echo "<b>Searched For:</b> " .$find; 
} 
?>

whats wrong with my code can you help me?
 
M

misson

Community Paragon
Community Support
Messages
2,572
Reaction score
72
Points
48
When asking about code, state the behavior you expect and the behavior you get. We can't necessarily intuit what you're trying to do. If you're getting an error message, post the error message.

Offhand, I'd say the problem is $find isn't defined. register_globals hasn't been set by default since 4.2.0. Use one of the $_GET, $_POST or $_REQUEST superglobals and sanitize your input.
 
A

acellec

New Member
Messages
29
Reaction score
0
Points
0
thanks i got it i should be using post instead..

can you help me again..

how come i cannot display my mysql dbase using this code in my xhosting freeweb ..public_html

my username in my cpanel is acellec

my dbconnect.php code is like this

PHP: 
<?
    $DBConnect = mysqli_connect("localhost", "acellec", "114448");
    $DBConnect->select_db("automobile_parts");
    
    $QueryResult = $DBConnect->query($SQLstring)
            Or die("<p>Unable to execute the query.</p>"."<p>Error code ". $DBConnect->errno . ": " . $DBConnect->error) . "</p>";
?>


PHP: 
<body>
<h1>BMK Automobile PArts</h1>
<h2>Search</h2> 
<form name="search" method="post" action="search.php">
Seach for: <input type="text" name="find" /> in 
<Select NAME="field">
<Option VALUE="Pno">First Name</option>
<Option VALUE="Pname">Last Name</option>
<Option VALUE="Desc">Profile</option>
</Select>
<input type="hidden" name="searching" value="yes" />
<input type="submit" name="search" value="Search" />
</form>

<?
$TableName = "automobileparts";
$SQLstring = "SELECT * FROM automobileparts";

require_once("dbconnect.php");
        
echo "<table width='100%' border='1'>";
$Row = $QueryResult->fetch_row();
do {
             echo "<tr><td>{$Row[0]}</td>";
        
        echo "<td align='right'>{$Row[1]}</td>";
        echo "<td align='right'>{$Row[2]}</td>";
        echo "<td align='right'>{$Row[3]}</td>";
        echo "<td align='right'>{$Row[4]}</td>";
        echo "<td align='right'>{$Row[5]}</td>";
        echo "<td align='right'><a href=\"edit.php?id={$Row[0]}\">Edit</a></td>";
        echo "<td align='right'><a href=\"delete.php?id={$Row[0]}\">Delete</a></td>";
        echo "</tr>";
        $Row = $QueryResult->fetch_row();
} while ($Row);
echo "</table>";




$DBConnect->close();


?>
 
You must log in or register to reply here.
Top