Display Image in Autocomplete dropdown and Hide image code after selected.

[frshjb373]

I'm using a database to populate a jQuery autocomplete textbox. I am also pulling the value of the image link from the database. The image displays fine in the dropdown menu, but when selected it displays the image code, which obviously, I'd like to hide. Below is a sample of what appears in the textbox after a selection has been made and also the query code. Any help is much appreciated!

<img src="images/catalog-images/1211767440.png" width="100" >Apple iPhone 4S - 16GB

<?php
    $q=$_GET['q'];
	$my_data = str_replace(array("'", '"'), array("", ""), $q);
    //$my_data=mysql_real_escape_string($q);
    $mysqli=mysqli_connect($DB_host,$DB_user,$DB_pass,$DB_name) or die("Database Error");
    $sql="SELECT * FROM cell_brands WHERE name LIKE '%$my_data%' OR keyword1 LIKE '%$my_data%' OR keyword2 LIKE '%$my_data%'";
    $result = mysqli_query($mysqli,$sql) or die(mysqli_error());


if($result)
{
    while($row=mysqli_fetch_array($result))
    {
		// echo "<img src=\"images/catalog-images/" . $row["photo-image"] . "\" width=\"100\" >";
		echo $row["photo-image"];
                    echo $row['name']."\n";
    }
}
mysqli_close($mysqli);
?>

[bradgrafelman]

Perhaps one solution would be to output the image URL, followed by a delimiter, followed by the text you want to appear in the dropdown... perhaps followed by another delimiter and then the value you want to give that option element (assuming you can't use one of the previous two pieces of data somehow).

Then, in your jQuery autocomplete code, you'd use that same delimiter to tokenize the responses received from your PHP script in order to use the separate pieces of data as appropriate.

EDIT: Also note user-supplied data should never be placed directly into a SQL query, else your code will be vulnerable to SQL injection attacks and/or just plain SQL errors. Instead, you must first sanitize the data either by using a function such as [man]mysqli_real_escape_string/man or by using prepared statements.