[wambulance]

say i have a table in mysql and in that table has the name "john, doe" in the name field. so in the search form someone types john, doe but nothing shows because when it send it to the view results page it has this in the url www.something.com/search.php?s=john%2+doe. so on the search page nothing shows up. i'm use the SELECT to find things and im using LIKE to find it. any help please because.

[Flamer]

Use the urldecode function:

PHP Code:

<?php

echo urldecode("john%2C+doe");

?>

Hope this helps.

[job0107]

If your search string looks like this: "john, doe".
Then this:
www.something.com/search.php?s=john%2+doe,
should look like this:
www.something.com/search.php?s=john%2C+doe

You are using the GET method.
and you should be receiving the data using:

PHP Code:

$some_variable = $_GET["s"]; 

And $some_variable should be used in your query

PHP Code:

"SELECT * FROM table_name WHERE name LIKE '$some_variable'" 

Or like this:

PHP Code:

"SELECT * FROM table_name WHERE name LIKE '".$_GET["s"]."'" 

I setup the same scenario in my database, and it works just fine.

If you can't figure it out from this information, then you will need to post
your code if you want us to figure out the problem.

[job0107]

Originally Posted by Flamer

Use the urldecode function:

PHP Code:

<?php
echo urldecode("john%2C+doe");
?>

Hope this helps.

Please read:

A reminder: if you are considering using urldecode() on a $_GET variable, DON'T!

Evil PHP:

<?php
# BAD CODE! DO NOT USE!
$term = urldecode($_GET['sterm']);
?>

Good PHP:

<?php
$term = $_GET['sterm'];
?>

The webserver will arrange for $_GET to have been urldecoded once already by the time it reaches you!

Using urldecode() on $_GET can lead to extreme badness, PARTICULARLY when you are assuming "magic quotes" on GET is protecting you against quoting.

Hint: script.php?sterm=%2527 [...]

PHP "receives" this as %27, which your urldecode() will convert to "'" (the singlequote). This may be CATASTROPHIC when injecting into SQL or some PHP functions relying on escaped quotes -- magic quotes rightly cannot detect this and will not protect you!

This "common error" is one of the underlying causes of the Santy.A worm which affects phpBB < 2.0.11.

[wambulance]

thanks that worked but what if they leave a field blank?

[job0107]

What exactly do you mean?
A field in the table?
A field in the form?
Or what?

Could you please be very specific in your explanation.

[wambulance]

if they left a field blank in the form so when they send it, its just blank on the insert.php

[job0107]

As far as I can tell, it shouldn't do anything. It just won't return any results.

But if you are having a problem, then post your code, along with a explanation
of the problem.

[wambulance]

PHP Code:

<?php





mysql_connect("localhost", "root", "") or die(mysql_error());

mysql_select_db("Order") or die(mysql_error());



$name = $_GET[newname];

$buy = $_GET[newbuy];

$month = $_GET[newmonth];



$result = mysql_query("SELECT * FROM stuff WHERE name LIKE '$name'

AND buy LIKE '$buy'

AND month LIKE '$month'

")



or die(mysql_error());  



$num_rows = mysql_num_rows($result);

If($num_rows == 0)

{

 echo "No items found.";

 }

else

{

then below ihave it being shown. my problem is if someone leaves the $month blank then it shows nothing but i want it so maybe they everything by that one person. or just by one thing they ordered(not a ecommerence(SP) site. or maybe if they only enter in 2 fields instead of 3 it shows everything that they entered but not the field they left blank.

[job0107]

Now I see your dilemma.

You could try using OR instead of AND in your query.
Or you can use different queries for different conditions.
Or you could use RLIKE and regex expressions in your query.
But I don't know regex very well.

If you choose to try regex, then maybe you can coax mab into
helping you.