468,121 Members | 1,347 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 468,121 developers. It's quick & easy.

Simple php sql question

I need some help. I want to know using php sql to use OR in a query.

Let me explain in detail:

I have a html form which asks the user for country,state,city,zip_code

I will use these values to query the database for specific data for those specific inputs.

I want the city and zip_code to be logicly use as OR. Meaning that the user only needs to select a city or type the exact zip_code. Either one should still be able to grab the data from the database.

Here is the code I used:
Code:
Expand|Select|Wrap|Line Numbers
  1. SELECT * 
  2. FROM postings  
  3. WHERE state ='".$state."' AND Country ='".$country."' 
  4.   AND city ='".$city."' OR zipcode ='".$zipcode."'
  5.   AND item ='".$item."' 
  6. LIMIT $s,$limit"
I tried to use Where(first values goes here meaning with city value) Or (value of zip code);

when I tried that code concept. I get a white screen with an error saying the syntax is wrong where limit starts at.


The query is supposed to grab all data based on that users form inputs. I am creating a paging effect. That is why I use the limit code.

Yet I want the user to input either the city name or zip_code.

how should I be doing this? I played around with the code but got nothing right now.

Currently the code only works when you input the country,state,city name. It won't allow to have the city name blank and use a zip code.
May 11 '19 #1
2 809
Luuk
1,043 Expert 1GB
"when I tried that code concept. I get a white screen with an error saying the syntax is wrong where limit starts at."
It would be nice if you showed the statement that you actually tried, and the error it gave.

You are using 'item' in your where clause, and you are not referring to in in your question above.

Next solution might be what you are looking for (given above 'notes'):
Expand|Select|Wrap|Line Numbers
  1. SELECT * FROM postings  
  2. WHERE 
  3.   (
  4.     (
  5.       ( state ='".$state."' AND 
  6.         Country ='".$country."' AND 
  7.         city ='".$city."' 
  8.       )
  9.       OR 
  10.         zipcode ='".$zipcode."' 
  11.     )
  12.     AND 
  13.       item ='".$item."' 
  14.    )
  15. LIMIT $s,$limit"
May 11 '19 #2
You can use 'mysqli_error' (or similar) PHP function to get a more meaningful error message. Given the limited information in your question I can't be sure where the error comes from, but here are a few possibilities:

1. 'item' is not an SQL column. If so, then you need to remove it from the query.

2. Either $s or $limit variable does't actually contain a valid number.

3. The $item variable contains a string with a quote mark in it. If so, then you need to at least replace "'" with "\'" in that string, e.g: $s=str_replace("'","\\'",$s). And in general, you should do this (and more) for every string you get from a user, otherwise an attacker can hack your entire database by filling your form with SQL injection code.

On a more general note, you should require the 'country' column even if zip is provided instead of a city, since different countries can have identical zip codes for different cities, so a zip code is't sufficient to identify a country and a city.
May 11 '19 #3

Post your reply

Sign in to post your reply or Sign up for a free account.

Similar topics

7 posts views Thread by gene.ellis | last post: by
2 posts views Thread by Kirk | last post: by
2 posts views Thread by Anurag | last post: by
3 posts views Thread by Peter | last post: by
1 post views Thread by Chris | last post: by
7 posts views Thread by abcd | last post: by
2 posts views Thread by Allain Bøge | last post: by
17 posts views Thread by AlBen | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.