Please Help Want $_POST to be part of a sql Query

psytae

I have tested the current SQL Query in PhpMyAdmin and it prints out to a web page great. but what I would love to be able to do is use the passed $_POST["ItemRequested"] in the query instead of the current static variable I used for testing but everything I try comes back with errors. Please help.

<?php
require_once("dbconn.php");
$IR = [COLOR="Red"]$_POST["ItemRequested"][/COLOR];

?>
<html>
	<head><title>Title Here</title></head>
	<body>
<?
$sql = "SELECT `typeName`
	FROM `Item`
	WHERE `typeName` LIKE '%[COLOR="Red"]125mm[/COLOR]%'
	LIMIT 0 , 30 ";
$runItem = mysql_query($sql) or die ("Query not valid!");
while($item = mysql_fetch_array( $runItem ))
{
	print $item["typeName"] . "<br>";
}
?>
<HR>
</body>
</html>

coldwerturkey

what errors are you getting?. everything looks fine, my guess it's an undefined variable (ItemRequested),

<?php
require_once("dbconn.php");
$IR = (isset($_POST["ItemRequested"])) ? mysql_real_escape_string($_POST["ItemRequested"]) : '';

?>
<html>
	<head><title>Title Here</title></head>
	<body>
<?
$sql = "SELECT `typeName`
	FROM `Item`
	WHERE `typeName` LIKE '%".$IR."%'
	LIMIT 0 , 30 ";
$runItem = mysql_query($sql) or die ("Query not valid!".mysql_error()); //<< added mysql_error() for development aswell
while($item = mysql_fetch_array( $runItem ))
{
	print $item["typeName"] . "<br>";
}
?>
<HR>
</body>
</html>

psytae

Thank you that code worked.