How to search on multiple fields (SQL, PHP)?

Question

I can not search on multiple fields on php. Conditions of AND and OR are not working in three fields.

Example:

$string_query = mysql_query ("SELECT * FROM Rock WHERE author ="."'".htmlspecialchars($_POST['search'])."' AND name ="."'".htmlspecialchars($_POST['name'])."' OR god="."'".htmlspecialchars($_POST['god'])."' ");

If you fill only the $_POST['search'] and $_POST['name'], the search is successful, but if $_POST['search'], $_POST['name'] and $_POST['god'] is not working. How to be?

Give an example on "not working", such as a table of data with input and result. You are building SQL, not HTML, so don't use htmlspecialchars. Use mysqli_real_escape_string. (Don't use the old mysql extension; it is so deprecated that it is already removed from PHP.) — Sheepy
– Sheepy, Commented Apr 13, 2016 at 6:05

ram singh · Accepted Answer · 2016-04-13 06:21:58Z

2

hey you can use concatenate concept in your sql the following code will help you if any query you can ask

$var='';
$_POST['search']='adas';
$_POST['name']="ram";
$_POST['god']="shankar";
$m=2;
$n=5;
 $c=4;
if ($m==2) {
$var.= "author=htmlspecialchars($_POST[search])" ;
}
if ($n==5) {
$var.=" AND name ="."'".htmlspecialchars($_POST['name'])."' " ;
}
if ($c==4) {
$var.=" OR god="."'".htmlspecialchars($_POST['god'])."' " ;
}

echo "SELECT * FROM Rock WHERE $var ";

answered Apr 13, 2016 at 6:21

ram singh

1496 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to search on multiple fields (SQL, PHP)?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related