Using SELECT statement from user input

[bob1660]

I am new to PHP and MYSQL. I have a Database table with 4 field. FirstName, LastName, DateofBirth and MemberNumber. I would like to have a form where a user can fill in the FirstName, LastName and date of birth, and a select statement will return the membernumber bases on the user input.

This is how i would execute a script without user input. How do i change it to user input.

SELECT DISTINCT `MEMBERNO`
FROM `table`
WHERE `DATEOFBIRTH` = '1960-06-01'
AND `FIRSTNAMES` LIKE CONVERT( _utf8 'Name'
USING latin1 )
COLLATE latin1_swedish_ci
AND `SURNAME` LIKE CONVERT( _utf8 'Surname'
USING latin1 )
COLLATE latin1_swedish_ci

[Please use CODE tags when posting source code. Thanks! --pbmods]

Can Someone PLEASE HELP

[kovik]

You'd use the input in the $_POST array.

[bob1660]

You'd use the input in the $_POST array.

I am a ABSOLUTE NOVICE, can u please explain in more detail, and how to set up the form. THX in advance

[kovik]

You'd be better off on a tutorial. I haven't written any tutorials to this end because there are too many security topics that I'd end up confusing new programmers with.

Google the _POST array.

[ak1dnar]

I am new to PHP and MYSQL. I have a Database table with 4 field. FirstName, LastName, DateofBirth and MemberNumber. I would like to have a form where a user can fill in the FirstName, LastName and date of birth, and a select statement will return the membernumber bases on the user input.

This is how i would execute a script without user input. How do i change it to user input.
SELECT DISTINCT `MEMBERNO`
FROM `table`
WHERE `DATEOFBIRTH` = '1960-06-01'
AND `FIRSTNAMES` LIKE CONVERT( _utf8 'Name'
USING latin1 )
COLLATE latin1_swedish_ ci
AND `SURNAME` LIKE CONVERT( _utf8 'Surname'
USING latin1 )
COLLATE latin1_swedish_ ci


Can Someone PLEASE HELP

Create a HTML form to get the user inputs.

<input type="text" name="firstname" value="">
// Other Inputs Goes here 
 

Submit this form(using GET/POST) to a .php script. and get the User Inputs,

<?php 
$first_name = htmlspecialchars($_POST['firstname']);
// Like wise get the other inputs
?>
 

See here for more details.Give it a try by your self.