[RESOLVED] adding user defined data into query?

[SJones]

Hello I have a very simple query that list customer info within a date range. I would like to have a interactive form that would allow the customer to choose between two dates and query the DB for information between the two dates entered. it is coded like (WHERE date_purchased > \'2005-08-01 00:00:00\' AND date_purchased < \'2005-09-01 00:00:00\') below is the code but I need help or guidence on how to get the customer input into the query instead of the hard coded area that is there now.
<?php
require_once ('connection/mysql_connect.php');
$query = 'SELECT customers_name , customers_street_address , customers_city , customers_postcode , customers_state , customers_telephone , customers_email_address , date_purchased '
. ' FROM orders '
. ' WHERE date_purchased > \'2005-08-01 00:00:00\' AND date_purchased < \'2005-09-01 00:00:00\' LIMIT 0, 30';
$result = @ ($query);
if ($result) {
echo '<table align="center" cellpadding="2" cellspacing="2">
<tr>
<td align="left"><b>1</b></td>
<td align="left"><b>2</b></td>
<td align="left"><b>3</b></td>
<td align="left"><b>4</b></td>
<td align="left"><b>5</b></td>
<td align="left"><b>6</b></td>
<td align="left"><b>7</b></td>
<td align="left"><b>8</b></td>
</tr>
';
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
echo
"<tr>
<td align=\"left\">$row[0]</td>
<td align=\"left\">$row[1]</td>
<td align=\"left\">$row[2]</td>
<td align=\"left\">$row[3]</td>
<td align=\"left\">$row[4]</td>
<td align=\"left\">$row[5]</td>
<td align=\"left\">$row[6]</td>
<td align=\"left\">$row[7]</td>
</tr>\n";
}
echo '</table>';
mysql_free_result ($result);
} else {
echo '<p>these fields could not be displayed due to a system error</p><p>' . mysql_error() . '</p>';
}
mysql_close();

?>

[mouloud2001]

Well, you'll have to make an html form, with some drop down menu, or field, to allow the user to give the dates. And then in the script, you'll receive the data in the $POST array. Exemple
<form name="chooseDate" action="myscript.php" method="post">
<input type="text" name="year">
<input type="text" name="month">
<input type="text" name="day">
<input type="submit">
</form>
and then in "myscript.php"
you can do something like that :
$query = "SELECT * FROM orders WHERE date_purchased > '".$POST['year']."-".$POST['month']."-".$POST['day']." 00:00:00' AND date_purchased < '2005-09-01 00:00:00' LIMIT 0, 30";

this is very basic php coding, so I hope I understood your question well.

[SJones]

Ok I did exactly what was posted - now I am getting a parse error somewhere between FROM orders and the end can someone take a look and advise the address of the form is Click Here

$query = 'SELECT customers_name , customers_street_address , customers_city , customers_postcode , customers_state , customers_telephone , customers_email_address , date_purchased '
. ' FROM orders '
. ' WHERE date_purchased > '".$POST['start_year']."-".$POST['start_month']."-".$POST['start_day']." 00:00:00' AND date_purchased < '".$POST['end_year']."-".$POST['end_month']."-".$POST['end_day']." 00:00:00' LIMIT 0, 30';

[Weedpacket]

It's probably the fun and games with quotes after the WHERE date_purchased part. Let's use some syntax highlighting (free with this forum and any PHP distribution) and see...

$query = 'SELECT `customers_name` , `customers_street_address` , `customers_city` , `customers_postcode` , `customers_state` , `customers_telephone` , `customers_email_address` , `date_purchased` '
. ' FROM `orders` '
. ' WHERE `date_purchased` > '".$POST['start_year']."-".$POST['start_month']."-".$POST['start_day']." 00:00:00' AND `date_purchased` < '".$POST['end_year']."-".$POST['end_month']."-".$POST['end_day']." 00:00:00' LIMIT 0, 30';

And I would appear to be right.

[SJones]

Not sure what to do at this point, does anyone have any suggestions as to some resources that could point me in the right direction.

[kburger]

$query = "SELECT customers_name, customers_street_address, customers_city, customers_postcode, customers_state, customers_telephone, customers_email_address, date_purchased FROM orders WHERE date_purchased > '" . $POST['start_year'] . "-" . $POST['start_month'] . "-" . $POST['start_day'] . " 00:00:00' AND date_purchased < '" . $POST['end_year'] . "-" . $POST['end_month'] . "-" . $POST['end_day'] . " 00:00:00' LIMIT 0, 30";