使用用户输入

时间:2016-08-26 16:50:03

标签: php database querying

我正在编写一些代码,允许用户输入一年中的位置和月份,并在当月显示可从其位置查看的星标。我已经完成了我的数据库并且在mySQl上进行查询但是尝试在网页上实现它并遇到了一些困难,我有两个用户可以输入的输入和下面运行该功能的程序,如果有人能发现任何错误,输入位置和月份时,该功能不会输出任何数据,但是当没有输入任何数据并按下提交时,它会输出事件,但无法找出原因。

搜索功能在下面,然后是事件。 php低于那个

<?php
/**
* Performs a search
*
* This class is used to perform search functions in a MySQL database
*
*
*  
*/
class search {
/**
* MySQLi connection
* @access private
* @var object
*/
private $mysqli;

/**
* Constructor
*
* This sets up the class
*/
public function __construct() {
// Connect to our database and store in $mysqli property
$this->connect();
}
/**
* Database connection
* 
* This connects to our database
*/
private function connect() {
$this->mysqli = new mysqli( 'localhost', 'conor', 'trevor29', 'site_db' );
}

/**
* Search routine
* 
* Performs a search
* 
* @param string $search_term The search term
* 
* @return array/boolen $search_results Array of search results or false
*/
public function search($search_term, $search_term1) {
// Sanitize the search term to prevent injection attacks
$sanitized = $this->mysqli->real_escape_string($search_term);
$sanitized1 = $this->mysqli->real_escape_string($search_term1);


// Run this Query
$query =$this ->mysqli->query("
SELECT event_name FROM event
INNER JOIN event_month
ON event.event_id = event_month.event_id
INNER JOIN month
ON event_month.month_id = month.month_id
INNER JOIN location
ON location.hemisphere = event.hemisphere
WHERE month_name LIKE '%{$sanitized}%'
AND city LIKE '%{$sanitized1}%'
");

// Run the query
//$query = $this->mysqli->query("
//SELECT *
//FROM event inner join location
//ON event.event_id = location.event_id 
//WHERE city LIKE'%{$sanitized}%'
//");

// Check results
if ( ! $query->num_rows ) {
  return false;
}

// Loop and fetch objects
while( $row = $query->fetch_object() ) {
  $rows[] = $row;
}

// Build our return result
$search_results = array(
  'count' => $query->num_rows,
  'results' => $rows,
);

return $search_results;
}
}

以下代码是调用上述搜索功能的事件页面     ?PHP的

//getname
session_start();

//Check if search data was submitted

$search_results="";

if  (isset( $_GET['s'])){

// Include the search class
require_once( dirname( __FILE__ ) . '/class-search.php' );

// Instantiate a new instance of the search class
$search = new search();

// Store search term into a variable
$search_term =($_GET['s']);
$search_term1 =($_GET['m']);


// Send the search term to our search class and store the result
$search_results = $search->search($search_term, $search_term1);


}
?>

以下是用户输入其位置和月份的位置     

搜索事件

                   搜索     “&GT;

<form action= "" method = "get">
<div class= "form-field">
<label for="search-field">Search</label>
<input type = "type" name ="m" placeholder = "Enter the month" results="5" value = "<?php $search_term1; ?>">
<input type ="submit" value = "Search">
 </div>

如果有人能看到任何错误或错误,那么我的工作就会越多,就越有帮助

1 个答案:

答案 0 :(得分:0)

我从这样的有限快照中看到的最容易出错的错误是,您正在通过$search_term1通过city $sanitized1 .table { margin-bottom: 0; } ,这让我相信你在查询中将月份和城市反转。