dynamically get data based on different button submission

Question

I have 3 buttons to submit. let's say button A, B, C. Each button press gonna bring data from DB based on the button press. But the template of data is the same.

my question is it possible to dynamically change the query. especially WHERE field in the query.

$sql = "SELECT Name FROM DevicesList WHERE Device='A' ";

What I want is WHERE part should change based on Button press.

//my forms are as follows
    <div class="button_style1">
      <form action="displayData.php" method="get" target="_blank">
        <input type="submit" id ="mybutton1" value="A" />
      </form>
    </div>

    <div class="button_style2">
      <form action="displayData.php" method="get" target="_blank">
        <input type="submit" id ="mybutton2" value="B" />
      </form>
    </div>


    <div class="button_style3">
      <form action="displayData.php" method="get" target="_blank">
        <input type="submit" id ="mybutton3" value="C" />
      </form>
    </div>

//I am trying to avoid creating different pages for each button press. Just one page (displayData.php) but with different data based on button press.

why not just use the value of the button (if you gave all the buttons the same name) - isn't it posted with the form if it is pressed in php? — Pete
– Pete, Commented Apr 1, 2019 at 12:44

Pupil · Accepted Answer · 2019-04-01 12:46:46Z

2

Yes, definitely you can do it.

Give same name to each elements:

<input type="submit" name="submit" id ="mybutton1" value="A" />

And in the posted form, get which button is submitted:

if (isset($_POST['submit')) {
 if ($_POST['submit']) {
  $var = mysqli_real_escape_string($_POST['submit']);
  $sql = "SELECT Name FROM DevicesList WHERE Device='" . $var . "'";
 }
}

At one time, only one submit button will submit.

Therefore, you will every time get the name of the submit button and that is what you are comparing in SQL.

edited Apr 1, 2019 at 12:46

answered Apr 1, 2019 at 12:40

Pupil

24k6 gold badges49 silver badges71 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Cid Over a year ago

This is vulnerable to SQL injections.

Cid Over a year ago

mysqli_real_escape_string isn't safe against SQL injections

Cid · Accepted Answer · 2019-04-01 12:37:11Z

0

You can use hidden fields to pass some datas.

In example :

<div class="button_style1">
  <form action="displayData.php" method="get" target="_blank">
    <input type="hidden" name="MyHiddenData" value="A">
    <input type="submit" id ="mybutton1" value="A" />
  </form>
</div>

<div class="button_style2">
  <form action="displayData.php" method="get" target="_blank">
    <input type="hidden" name="MyHiddenData" value="B">
    <input type="submit" id ="mybutton2" value="B" />
  </form>
</div>


<div class="button_style3">
  <form action="displayData.php" method="get" target="_blank">
    <input type="hidden" name="MyHiddenData" value="C">
    <input type="submit" id ="mybutton3" value="C" />
  </form>
</div>

And then, in displayData.php

$MyDevice = $_GET['MyHiddenData'];

answered Apr 1, 2019 at 12:37

Cid

15.3k4 gold badges33 silver badges49 bronze badges

3 Comments

master_yoda Over a year ago

how to change the WHERE field in query? something like WHERE Device= ".$MyDevice"

Cid Over a year ago

Something like this, yes. You want to use prepared statements with mysqli or PDO or whatever you are using to query your DB to avoid SQL Injections

Cid Over a year ago

Just don't be lazy about prepared statements

Harendra Singh · Accepted Answer · 2019-04-01 13:16:31Z

You can do this like below.

<div class="button_style1">
    <form action="displayData.php" method="get"  target="_blank">
        <input type="submit" name="submit" id ="mybutton1" value="A" />
    </form>
</div>

<div class="button_style2">
    <form action="displayData.php" method="get" target="_blank">
        <input type="submit" name="submit" id ="mybutton2" value="B" />
    </form>
</div>


<div class="button_style3">
    <form action="displayData.php" method="get" target="_blank">
        <input type="submit" name="submit" id ="mybutton3" value="C" />
    </form>
</div>

on the displayData.php

if (isset($_GET['submit']) && in_array($_GET['submit'], array('A', 'B', 'C'))) {
    $variable = mysqli_real_escape_string($con, $_GET['submit']); //$con - database connection object
    $sql = "SELECT Name FROM DevicesList WHERE Device='" + $variable + "' ";
}

Collectives™ on Stack Overflow

dynamically get data based on different button submission

3 Answers 3

2 Comments

3 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related