multiple word search

[Lungaz]

I want to search for 3 people, I figured out what I can do is to use a statement like this

$sql_query=" SELECT * from contacts where name IN ($search) OR surname IN ($search) OR institution IN ($search)";

In a search box I type words separated by a comma, but what is needed is strings in quotation marks separated by comma.

Something like changing - we are here to 'we','are','here'

help!

[bradgrafelman]

So add a single quote before and after the submitted string, and replace each comma with ',' ?

Also note that you want to sanitize the data coming in (e.g. with [man]mysql_real_escape_string/man), else you're leaving yourself vulnerable to SQL injection attacks as well as simple query errors.