[jilawatan]

Hello Guys,

I am just a beginner in PHP. I am learning PHP from tutorials. I just tried to make a simple PHP search feature and connect it to my database to search the keywords from my database table. The tutorial is according to the PHP Version 4. But, my hosting server consist of PHP version 5. I think thats why it is not working. When I am trying to submit the keyword to search through an html form. It is showing me all the keywords from the table. But, it should match up with only that keyword, which i am entering in the html form. It is showing me all the records from database table.
Kindly, help me out in this. Here is my PHP and HTML code.

HTML CODE:

PHP Code:

<form action="result.php" method="POST">



<input type="text" name="name"><BR><BR>



<input type="submit" value="Search">



</form> 

PHP CODE:

PHP Code:

<?



if (!$name) {



echo "No Search Result";

exit;

}





$db = mysql_connect("localhost", "sqlusername", "sqlpassword");

mysql_select_db("sqldatabase", $db);



$query = "SELECT people.name, people.Height, people.Date

FROM people WHERE name LIKE '%".$name."%'";



$result = mysql_query($query);



while ($record = mysql_fetch_assoc($result)) {



while ( list($fieldname, $fieldvalue) = each($record)) {





echo $fieldname . ": <b>" . $fieldvalue . "</b><br>";



}

echo "<br>";



}



?>

I will appreciate the help from you guys.

[mdhall]

$query = "SELECT people.name, people.Height, people.Date
FROM people WHERE name LIKE '".$name."'";

The "%" symbols make the search less strict, so you get more irrelevant results.

[End User]

Sanitize your data- never, ever pass variables into your database without screening them.