SQL query using checkboxes

Question

I've seen some questions about this topic around here, but non of them solved my problem. I'm trying to make a simple filter using SQL and check boxes.

So far I got this code:

<form action="#" method="GET" id="filter"> 
    <input type="checkbox" name="omgeving[]" value="Indoor">Indoor<br /> 
    <input type="checkbox" name="omgeving[]" value="Outdoor">Outdoor<br /> 
    <input type="submit" name="kies" value="Kies" /> 
</form>

<?php 
if(isset($_GET['omgeving']) && count($_GET['omgeving'] > 0)) { 
    $catid = implode(',', $_GET['omgeving']);
    $catid = mysql_real_escape_string($catid); 

    $query = mysql_query("SELECT * FROM SomeWhere WHERE Omgeving IN (".$catid.")"); 

    while($row = mysql_fetch_assoc($query)) { 
        $id = $row['Id']; 
        $prod = $row['Product']; 

        echo $prod . "<br />"; 
    }
}
?>

It does something when I click on submit it changes the URL to: filtertest/?omgeving[]=Indoor&kies=Kies but I think the query isn't working like it should because my footer disappears usually this means that my code is incorrect and the page stops loading further. For the love of me I cant figure out why this isn't working...

Is there someone that could help me?

I've checked out this answer but this doesn't solve my problem. The code above is the code that does something at least.

Help... what am I doing wrong here?

Is it me or is there no action script needed if I just want the Query to be updated on the same page... — Jay-oh
– Jay-oh, Commented Mar 28, 2017 at 8:06
@Andreas nice one :'D, Jay-oh you should work a bit on the security php.net/manual/en/security.database.sql-injection.php — smarber
– smarber, Commented Mar 28, 2017 at 8:10
Yeah, I know security is an issue here. I'm just trying to get the code to work, and after that worry about security. This site isn't live yet so I'm the only one using it right now :) — Jay-oh
– Jay-oh, Commented Mar 28, 2017 at 8:11

Sahith Vibudhi · Accepted Answer · 2017-03-28 10:00:53Z

1

Change omgeving[] to omgeving. so, the URL would be ?omgeving=Indoor&kies=Kies

<?php 

if(isset($_GET['omgeving']) || !empty($_GET['omgeving'])){
  $catid = mysql_real_escape_string($_GET['omgeving']); 
  //continue with what you are doing.
  // use var_dump(<variable>); exit(); to debug.
}

?>

Hope it was helpful!

answered Mar 28, 2017 at 10:00

Sahith Vibudhi

5,2452 gold badges36 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Kasun Rajapaksha · Accepted Answer · 2017-03-28 10:23:09Z

0

Change the line

 $catid = implode(',', $_GET['omgeving']);

to

$catid = implode('","', $_GET['omgeving']);
$catid = '"'.$catid.'"';

Finally your query should look like below if you have multiple selected

SELECT * FROM SomeWhere WHERE Omgeving IN ("Indoor","Outdoor")

edited Mar 28, 2017 at 10:23

answered Mar 28, 2017 at 8:12

Kasun Rajapaksha

5361 gold badge5 silver badges22 bronze badges

5 Comments

Kasun Rajapaksha Over a year ago

What do you mean by didn't work, did you get any error

Jay-oh Over a year ago

No, no error. Only that the footer disappears like when I started... to bad.

Kasun Rajapaksha Over a year ago

Can you check the PHP error log and show us the error log

Jay-oh Over a year ago

Well, I don't exactly know how to show you an error log. As far as I can see I don't get an error. I added error_log("You messed up!", 3, "/var/tmp/my-errors.log"); at the end of the script but that's probably wrong ...

Kasun Rajapaksha Over a year ago

Ubuntu - /var/log/apache2/error.log Centos -/var/www/logs/httpd/error_log

윤상현 · Accepted Answer · 2017-03-28 10:19:11Z

-1

$catid = implode("','", $_GET['omgeving']);

answered Mar 28, 2017 at 10:19

윤상현

1

Collectives™ on Stack Overflow

SQL query using checkboxes

3 Answers 3

Comments

5 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

5 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related