[outatime88]

I need to know how I can make the where clause point to what someone searches for in a form. Here is what I'm talking about:

$result = mysql_query("SELECT * FROM info WHERE City=''");

I have a column named City in my mysql db. I want to know what I need to put in there to make it look for what someone searches for.

thanks

Edited by outatime88, 28 December 2006 - 10:07 AM.

[Advertisements]

Well I would guess you would have an input box like this in a forum

<form method="post" action="something.php">
<input type="text" name="city">
<input type="submit" value="Submit">
</form>

And the php would be like this.

$city = $_POST['city'];

$result = mysql_query("SELECT * FROM info WHERE City LIKE '$city'");

I use the LIKE because then CITY is the same as city if you know what I mean.

[Michael]

Well I would guess you would have an input box like this in a forum

<form method="post" action="something.php">
<input type="text" name="city">
<input type="submit" value="Submit">
</form>

And the php would be like this.

$city = $_POST['city'];

$result = mysql_query("SELECT * FROM info WHERE City LIKE '$city'");

I use the LIKE because then CITY is the same as city if you know what I mean.

[outatime88]

hey michael, that worked great thanks a lot.

[Michael]

Opps I forgot something important, you should do this

$city = mysql_real_escape_string($_POST['city']);

This stops the input being treated as part of the MySql string. Someone with bad intent could do some damage other wise.

I should remember not to post when I am tired