By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
434,709 Members | 2,153 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 434,709 IT Pros & Developers. It's quick & easy.

Simple php sql question

P: 1
I need some help. I want to know using php sql to use OR in a query.

Let me explain in detail:

I have a html form which asks the user for country,state,city,zip_code

I will use these values to query the database for specific data for those specific inputs.

I want the city and zip_code to be logicly use as OR. Meaning that the user only needs to select a city or type the exact zip_code. Either one should still be able to grab the data from the database.

Here is the code I used:
Code:
Expand|Select|Wrap|Line Numbers
  1. SELECT * 
  2. FROM postings  
  3. WHERE state ='".$state."' AND Country ='".$country."' 
  4.   AND city ='".$city."' OR zipcode ='".$zipcode."'
  5.   AND item ='".$item."' 
  6. LIMIT $s,$limit"
I tried to use Where(first values goes here meaning with city value) Or (value of zip code);

when I tried that code concept. I get a white screen with an error saying the syntax is wrong where limit starts at.


The query is supposed to grab all data based on that users form inputs. I am creating a paging effect. That is why I use the limit code.

Yet I want the user to input either the city name or zip_code.

how should I be doing this? I played around with the code but got nothing right now.

Currently the code only works when you input the country,state,city name. It won't allow to have the city name blank and use a zip code.
May 11 '19 #1
Share this Question
Share on Google+
2 Replies


Expert 100+
P: 1,035
"when I tried that code concept. I get a white screen with an error saying the syntax is wrong where limit starts at."
It would be nice if you showed the statement that you actually tried, and the error it gave.

You are using 'item' in your where clause, and you are not referring to in in your question above.

Next solution might be what you are looking for (given above 'notes'):
Expand|Select|Wrap|Line Numbers
  1. SELECT * FROM postings  
  2. WHERE 
  3.   (
  4.     (
  5.       ( state ='".$state."' AND 
  6.         Country ='".$country."' AND 
  7.         city ='".$city."' 
  8.       )
  9.       OR 
  10.         zipcode ='".$zipcode."' 
  11.     )
  12.     AND 
  13.       item ='".$item."' 
  14.    )
  15. LIMIT $s,$limit"
May 11 '19 #2

P: 6
You can use 'mysqli_error' (or similar) PHP function to get a more meaningful error message. Given the limited information in your question I can't be sure where the error comes from, but here are a few possibilities:

1. 'item' is not an SQL column. If so, then you need to remove it from the query.

2. Either $s or $limit variable does't actually contain a valid number.

3. The $item variable contains a string with a quote mark in it. If so, then you need to at least replace "'" with "\'" in that string, e.g: $s=str_replace("'","\\'",$s). And in general, you should do this (and more) for every string you get from a user, otherwise an attacker can hack your entire database by filling your form with SQL injection code.

On a more general note, you should require the 'country' column even if zip is provided instead of a city, since different countries can have identical zip codes for different cities, so a zip code is't sufficient to identify a country and a city.
May 11 '19 #3

Post your reply

Sign in to post your reply or Sign up for a free account.