Beginner: php and mysql table issue

Question

very new to php and mysql so all help is greatly appreciated. I have tried to search the forums but not entirely sure specifically what I need to be searching for. I have a form which ask users to select a product and make a comment.

I need the information for a particular product to show on my product page instead of all of the information. (for example, I want the reviews for iPads to show on the ipad page)

This is the code that send the data to the database:

<?php
session_start();
include('connection.php');
$name=$_POST['name'];
$product=$_POST['product'];
$star=$_POST['star'];
$comment=$_POST['comment'];
mysql_query("INSERT INTO tt_review(name, product, star, comment)VALUES('$name', '$product', '$star','$comment')");
header("location: https://scm-intranet.tees.ac.uk/users/l1071039/tablet-takeover/index.html");
mysql_close($con);
?>

This is the current code to fetch the data onto my page:

<?php
include('connection.php');
$result = mysql_query("SELECT * FROM tt_review");

echo "<table border='1'>
<tr>

</tr>";

while($row = mysql_fetch_array($result)) //This function is calling the results variable and displaying them within the rows below
{
echo "<tr>"; //this code tells the page to output the table rows that are defined above
echo "<td>" . $row['name'] . "</td>";  
echo "<td>" . $row['date'] . "</td>"; //each row is then executed using the table data function
echo "<td>" . $row['product'] . "</td>";
echo "<td>" . $row['star'] . "</td>";
echo "<td>" . $row['comment'] . "</td>";

echo "</tr>";
}
echo "</table>";

?>

This is a screenshot of the table on my webpage (as I say, I need it to only show the ipad reviews.

enter image description here

Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial. — esqew
– esqew, Commented Jul 22, 2014 at 13:31
Danger: You are vulnerable to SQL injection attacks that you need to defend yourself from. — Quentin
– Quentin, Commented Jul 22, 2014 at 13:32
if you are beginning with php/mysql, I suggest you take good habits early and stop using the mysql_* functions. they are deprecated in favor of mysqli_* see php.net/manual/fr/mysqli.overview.php — njzk2
– njzk2, Commented Jul 22, 2014 at 13:33
You seem to be asking how to perform queries with WHERE in them, that's very basic SQL and something better addressed by a tutorial than a SO question. — Quentin
– Quentin, Commented Jul 22, 2014 at 13:33
The basic fix would be to add a WHERE-clause to your SELECT query (WHERE product='Apple iPad'). However, there are a few things that you want to fix/change before making it live. For example, esqew's and Quentin's comments. — Chris Forrence
– Chris Forrence, Commented Jul 22, 2014 at 13:33

Pierre · Accepted Answer · 2014-07-22 13:36:03Z

2

To select only one kind of product, you should add a where clause on your sql query:

SELECT * FROM tt_review WHERE product = 'Apple iPad'

answered Jul 22, 2014 at 13:36

Pierre

6461 gold badge8 silver badges38 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Arun Ravilla · Accepted Answer · 2014-07-22 13:38:17Z

0

You can give like this

"SELECT * FROM tt_review WHERE Product_name ='ipad'"

It will display only the information related to Ipad Still If you dont understand please give me the name of the columns you used in the table

answered Jul 22, 2014 at 13:38

Arun Ravilla

935 bronze badges

1 Comment

Chris Forrence Over a year ago

While it's not explicitly stated in the question, you can infer from the PHP snippet that the column name is "product".

Lemuel Botha · Accepted Answer · 2014-07-22 13:46:15Z

0

Firstly, mysql_* functions have been depreciated. Rather, use either PDO or MySQLi.

Secondly, your code is very vulnerable to SQL injection.

Thirdly, fix your select statement to the following:

SELECT * FROM tt_review WHERE product = 'ipad'

edited Jul 22, 2014 at 13:46

answered Jul 22, 2014 at 13:35

Lemuel Botha

6598 silver badges25 bronze badges

2 Comments

Chris Forrence Over a year ago

(psst: I won't edit your answer any more than I had, but it is actually spelled "deprecated". Cheers!)

Lemuel Botha Over a year ago

Sorry, I saw what you did, I initially was saying depreciated, as in loss of value, not deprecated, but I see why you had changed it to deprecated

Collectives™ on Stack Overflow

Beginner: php and mysql table issue

3 Answers 3

Comments

1 Comment

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked