Question

我在这段代码中遇到麻烦，如果用户从选择下拉菜单中选择“全部显示”，我只想从表格行中获取所有数据。

这是选择菜单！

所以，这个菜单从这个表中获取数据，但是如果他选择All，那么在选项值之间回显的代码是什么：）

<b>speciality:</b>  <select id="main_mav" name="speciality">
<option value="none">Select speciality:</option>
<option value=""> All specialities </option>
<?php

        $result = mysql_query('SELECT speciality FROM visits') or die(mysql_error());
        while ($row = mysql_fetch_assoc($result)) {
                echo '<option value="'.$row['speciality'].'">'.$row['speciality'].'</option>';
        }
?>
</select><br />

这是提交表格！

if ($region=="All regions" ){


              $region=$_POST['""'];  
            }
            else ( $region=$_POST['region']);

            $date1 =$_POST['from_date'];
            $date2 = $_POST['to_date'];
            $product=$_POST['product'];
            $speciality=$_POST['speciality'];
            $type=$_POST['visit_type'];

sql="SELECT id, customer_name, seller_1_name, seller_2_name FROM visits Where (speciality ='$speciality') AND (visit_type ='$type') AND (product ='$product') AND (region ='$region') AND (visit_date BETWEEN '$date1' AND '$date2')";
$result=mysql_query($sql); ## This line is new.
$num=mysql_numrows($result);
$row = mysql_fetch_array($result);

如果用户选择“在下拉菜单中显示所有内容”，输入的代码是什么？！

Answer 1

您确实需要清理输入，至少使用mysql_real_escape_string！

关于您的实际问题：只检查$speciality是否为空，并生成不带(speciality ='$speciality')条件的其他查询。

Answer 2

由于您的HTML引用了“特色”，而您的PHP引用了“区域”，我只会坚持使用“区域”，但这就是理念。

    if ($region=="All regions" ){
        $sql = 'SELECT id, customer_name, seller_1_name, seller_2_name, FROM visits';
    } else {
        $region     = mysql_real_escape_string($_POST['region']);
        $date1      = mysql_real_escape_string($_POST['from_date']);
        $date2      = mysql_real_escape_string($_POST['to_date']);
        $product    = mysql_real_escape_string($_POST['product']);
        $speciality = mysql_real_escape_string($_POST['speciality']);
        $type       = mysql_real_escape_string($_POST['visit_type']);
        $sql        = "SELECT id, customer_name, seller_1_name, seller_2_name FROM visits Where (speciality ='$speciality') AND (visit_type ='$type') AND (product ='$product') AND (region ='$region') AND (visit_date BETWEEN '$date1' AND '$date2')";
    }

$result = mysql_query($sql); ## This line is new.
$num    = mysql_numrows($result);
$row    = mysql_fetch_array($result);

获取where子句中的所有值

2 个答案: