Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 2 of 2
Thread: search query product name
11-05-2012, 03:25 PM #1
- Join Date
- Jun 2008
- Thanked 9 Times in 9 Posts
search query product name
First i want to match the search keyword with the product name in product table.
If the match is found then i want to fetch all the product details from product table for that product.
so i would like to know whether my code is fine or not.
can this be shortened
$searchword = $_REQUEST['searchword'];
$qry = "select product_name from product_table where product_name LIKE '%$searchword%'";
$result = mysql_query($qry);
if(mysql_num_rows($result) > 0)
$searchqry = "select * from product_table where product_name LIKE '%$searchword%'";
$searchresult = mysql_query($searchqry);
while($searchrow = mysql_fetch_array($searchresult))
11-05-2012, 05:22 PM #2
- Join Date
- May 2007
- Thanked 12 Times in 12 Posts
use addslashes() when putting user input into an SQL query or else the presence of an apostrophe in it can cause problems
$qry = "select product_name from product_table where product_name LIKE '%".addslashes($searchword)."%'";
The CodingForums Funny Images thread ** Now with 20+ pages!! ** - http://www.codingforums.com/showthread.php?t=245405