SQL sybtax error

wortmann

I get an error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '= 'koos'' at line 1
(Koos is a name in one of my DB records.

The PHP is as follows:

<?php

//Include connection type
include "connection.php";

$sql ="SELECT * FROM naw";

if (isset($_POST['search'])) {

	$search_term = mysql_real_escape_string($_POST['search_box']);

$sql .= "WHERE name = '{$search_term}'";

}

$query = mysql_query($sql) or die(mysql_error());


?>
<form name="search_form" method="POST" action="display_data.php">

Search: <input type="text" name="search_box" value="" />
<input type="submit" name="search" value="Search the table..."/>
</form>


	<style type="text/css">
    body table {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 14px;
    }
    #toptable {
        font-weight: bolder;
    }
    </style>
<table width="70%" cellpadding="5px" cellspace="5px">

  <tr id="toptable">
    <td>ID</td>
    <td>name</td>
    <td>address1</td>
    <td>address2</td>
    <td>city</td>
    <td>dob</td>
  </tr>

<?php while($row=mysql_fetch_array($query)) {?>
  <tr>
    <td><?php echo $row['ID']; ?></td>
    <td><?php echo $row['name']; ?></td>
    <td><?php echo $row['address1']; ?></td>
    <td><?php echo $row['address2']; ?></td>
    <td><?php echo $row['city']; ?></td>
    <td><?php echo $row['dob']; ?></td>
  </tr>
<?php } ?>

</table>

any suggestions what is wrong?

laserlight

Just before you run mysql_query, print $sql or view its value in a debugger. Does its value look like a valid SQL statement to you? Is it missing say, a space?

By the way, the legacy MySQL extension is deprecated. You should use the MySQLi extension, or say, the PDO extension for MySQL.

wortmann

thanks for the relpy.
I cant find anything wrong with the symtax, but then i'm only a beginner with PHP.

Any other suggestions?

bradgrafelman

What did the query look like when you printed it out?

The hint laserlight was giving you is related to the lack of space you should find between the table name and the 'WHERE' keyword.

wortmann

bradgrafelman;11033099 wrote:
What did the query look like when you printed it out?

The hint laserlight was giving you is related to the lack of space you should find between the table name and the 'WHERE' keyword.

I'm not familiar that much with PHP, sorry.
I dont know how i can use the print syntax.
But i have taken the error handlign out and i now got rid of the first problem.
-- $query = mysql_query($sql); //or die(mysql_error()); --

However i now get the following error:
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\php_test\display_data.php on line 36
Line 36: <?php while ($row = mysql_fetch_array($query)) { ?>

I'm learning PHP onlien at the moment but like to see a solution to this problem.

thanks all for replying.

bradgrafelman

wortmann;11033111 wrote:
I dont know how i can use the print syntax.

Well... printing output to the user is one of the most basic operations you should have learned on day #1 of learning PHP (or just about any programming language). You might want to start (or go back to) learning the basics of PHP before going anywhere near SQL and DBMSes.

wortmann;11033111 wrote:
But i have taken the error handlign out and i now got rid of the first problem.

Surely you don't believe that... right? You didn't get "rid" of any problem... you only removed the helpful output that was telling you a problem occurred.

If a fire sets off the fire alarm in a building, turning off the alarm doesn't extinguish the fire.

wortmann;11033111 wrote:
However i now get the following error:
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\php_test\display_data.php on line 36
Line 36: <?php while ($row = mysql_fetch_array($query)) { ?>

... which you're getting because there is an error in your SQL query that caused [man]mysql_query/man to return boolean FALSE rather than a resource.

dalecosp

PHP Warning:  Unexpected character in input:  'b' (ASCII=98) state=1 in $thread_title on line 1

Programmers are pedantic grammarnazis by nature; and now, young Padawan, you are learning just why.

Part of the issue might be that "c:\xampp", too :p

(If English isn't your native language, please ignore this entire post).