PHP Match two fields in a row via my search

[jamesmoore]

Hi

I have entered data into my table and now I want to retrieve it via a search engine on my site:

fourwaysdp.co.uk/seaside.php

I have two search boxes because I want to only retrieve rows that match the search terms.

I want each search box to represent each column in my table.

At the moment if i search: 'trainee' in one box and 'london' in the other all rows with trainee are displayed even if they do not have london in the row.

Here is the code:

<form action="seaside.php" method="post">
<input type="text" name="search">
<input type="text" name="search2">
<input type="submit">
</form>
<hr width="100%"></hr>
 
<?php
if(strlen(trim($_POST['search'])) > 0) {
//all of your php code for the search
 
   $search = "%" . $_POST["search"] . "%";
 
  mysql_connect ("", "", "");
  mysql_select_db ("");
 if (!empty($_POST["search_string"])) 
   { 
 
   }  
  $query = "SELECT name,location,msg FROM contact WHERE name LIKE '$search'";
  $result = mysql_query ($query);
  if ($result) {
    while ($row = mysql_fetch_assoc($result)) {
      echo "{$row['name']}<br>".
           "{$row['location']}<br>".
           "{$row['msg']}<br>";
 
    }
  }
}
?>
</body>
</html>
 

Thanks!

James

[dlite922]

First why do you have 2 search boxes? is one for Location and one for name column?

Your query is right. But you're ignoring $_POST['search2']?? Why aren't you also grabbing that.

Finally, look into SQL Injection. If this forum is available on the internet anyone can hack it and destroy your Database. Use the function mysql_real_escape_string() to give you a clean input and prevent injection.

what is $_POST["search_string"]) suppose to do? I don't see an input named search_string.

Cheers,


Dan