[RESOLVED] Comparing 2 URL variables with GET for filter and search.

lakeripple

Basically what I'm trying to do is make it so that the colomn filter is changeable from a drop down menu as well as the actual search text. Both are in a GET form with a submit button. It's recieiving the url variables but it won't let me change both filter and search, it only works with one or the other. It doesn't show any data at all, just the empty table.

It makes more sense if you look at the code.

<?php require_once('Connections/zero.php'); ?>
<?php
$maxRows_Recordset1 = 9999;
$pageNum_Recordset1 = 0;
if (isset($_GET['pageNum_Recordset1'])) {
  $pageNum_Recordset1 = $_GET['pageNum_Recordset1'];
}
$startRow_Recordset1 = $pageNum_Recordset1 * $maxRows_Recordset1;
$colname_Recordset1 = "-1";
if (isset($_GET['search'])) {
  $colname_Recordset1 = (get_magic_quotes_gpc()) ? $_GET['search'] : addslashes($_GET['search']);
}
$filter_Recordset1 = "-1";
if (isset($_GET['filter'])) {
  $filter_Recordset1 = (get_magic_quotes_gpc()) ? $_GET['filter'] : addslashes($_GET['filter']);
}
mysql_select_db($database_zero, $zero);
$query_Recordset1 = sprintf("SELECT * FROM animals WHERE 'filter' = 'search' ORDER BY name ASC", $filter_Recordset1,$colname_Recordset1);
$Recordset1 = mysql_query($query_Recordset1, $zero) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?>

rincewind456

If you change your query to this

$query_Recordset1 = sprintf("SELECT *
FROM animals
WHERE %s = %s
ORDER BY name ASC", 
$filter_Recordset1,
$colname_Recordset1);

and then echo out the query you can see it works.

lakeripple

Thats the default dreamweaver creates...it partially works. With the exception of entering integer values in the text field, everything else gives me "Unknown column 'xxxx' in 'where clause'. Integer values wont give me the error regardless if the column is integer or not in mysql. But i need text values to work as well....thanks though.

rincewind456

Then you can overcome that by using the quote_smart function

function quote_smart($value)
{
   // Stripslashes
   if (get_magic_quotes_gpc()) {
       $value = stripslashes($value);
   }
   // Quote if not integer
   if (!is_numeric($value)) {
       $value = "'" . mysql_real_escape_string($value) . "'";
   }
   return $value;
}
$query_Recordset1 = sprintf("SELECT *
FROM animals
WHERE %s = %s
ORDER BY name ASC", 
quote_smart($filter_Recordset1),
quote_smart($colname_Recordset1));

like this. It adds the necessary quotes to the input value.

lakeripple

Almost working...i'm not getting the error anymore but i'm not getting any results either, not even integers are working now...

rincewind456

Have you echoed out the query to see if it is right?

lakeripple

OK It's all done, thanks for the help! I read up on the quoting, anyway i just removed the "quote_smart" from the filter recordset and it removed the quote from the filter and everything works now, ty.