Multiple SQL conditions problems

bduncan

I have attempted to search the past posting to no avail, so I must not be searching for the right keywords. Someone must have run into this before!
What I am trying to do is to let users search a database by filling out a form, and entering as many or as little options as they desire.

On the search page I have a form that passes $product_number, $program, $customer, $prefix, $base, $suffix, $plant and $order to the second page.

The second page I have $result=mysql_query "SELECT * from allnum WHERE
((ProductNumber=$product_number) OR (ProductNumber='None')) AND
((Program=$program) OR (Program='None')) AND
... through all of the variables ending with ORDER by $order";

I changed the database do that there were no NULL values in it, and replaced them all with 'None' instead. The query that I had before did not give me any records that did not have a prefix, or a suffix etc.

How can I make this work?

Thanks for any assistance you can give.

Anon

Not sure exactly what's going on in your script, but for searches first check to make sure that the user is using the specific search field, and not leaving it blank, and then in your sql query try SELECT * FROM table WHERE (product LIKE '%$product%') OR (variable LIKE '%$variable%')

The % character is a wildcard character in SQL language

gid__

Remember, you're using php so you can build the sql query dynamically, no need to populate your database with dummy data. Try something like:

unset($sql);
if($product_number) {
  $sql .= "ProductNumber=". addslashes($product_number);
}
if($Program) {
  if($sql) $sql .= " AND ";
  $sql .= "Program=". addslashes($Program);
}
// etc ......
mysql_query("SELECT * FROM allnum WHERE $sql ORDER BY $order"):

the SQL command LIKE might also come in handy as Todd suggested.

bduncan

Well thanks for the help I am going to try this right after I send this message. I did forget the actual error I'm getting didn't I? I'm getting a parse error on line 12, which is the begining of the query. I did forget the addslashes though, thank you Steve for pointing that out. You know sometimes it is the simplest basics...