automatic mysql query in PHP

Question

How do i write a code that builds a mysql query depending on what values drop lists have?

If nothing is chosen in a drop list, then the drop list value is 001 so then the query should not include this drop list in the search!

Please help...

I have this so far:

            foreach($_GET as $key => $value) {
    if ($value != '001') {
                 Do something smart...like add to a query...
                     }
        }

what do you have so far? You haven't given anyone anything to work with... what does your manual query look like? what does the html look like? — Jonathan Fingland
– Jonathan Fingland, Commented Oct 13, 2009 at 14:50
If you explicity set the option's value to nothing <option value="">[Select Something]</option> then nothing will get sent to the server in case that helps. — karim79
– karim79, Commented Oct 13, 2009 at 14:55
You may consider ORM-like solutions, that give you proper level of abstraction and allow you to achieve what you requested (adding elements of the query) in a very clean way. — Tadeck
– Tadeck, Commented May 28, 2011 at 22:22

Johan · Accepted Answer · 2011-05-28 22:18:18Z

1

Send the form to a PHP file called (say) script.php with method GET (or POST, if you prefer - in which case replace the references to GET below):

In script.php include the following:

<?php
if (!isset($_GET['yourdroplistname']) {
  $value = 001;
} else {
  $value = mysql_real_escape_string($_GET['yourdroplistname']);
}
mysql_query("YOUR QUERY, CONTAINING $value WHERE APPROPRIATE");
?>

edited May 28, 2011 at 22:18

Johan

77.4k28 gold badges205 silver badges346 bronze badges

answered Oct 13, 2009 at 14:55

tog22

5761 gold badge4 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Lukáš Lalinský Over a year ago

Never use direct user input to construct raw SQL query. Use a placeholder variable, escape special characters in the value or cast it to int to make sure it contains a number.

Julius F · Accepted Answer · 2009-10-13 14:55:45Z

0

I recommend to use a switch($droplist) to filter what PHP should do.

switch($droplist)
case '1':
$query = 'SELECT 1 FROM xy WHERE userid = 1';
break;
case '2':
// etc.

answered Oct 13, 2009 at 14:55

Julius F

3,4544 gold badges32 silver badges45 bronze badges

Collectives™ on Stack Overflow

automatic mysql query in PHP

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related