How do I make a Search function onto my website?

[Emil_Loenneberg SE]

So I am making a small school project, where I need to make a website which is a website with a Create, Read, Update and Delete functions, but I also need a search function. I made the website for the most part, but I am having a hard time making a search function on my website. 

 

Is there anyway I can make a search function onto my website? 

 

My code and picture of my website is here:

 

https://imgur.com/a/4bGip7V

[Mortenrb]

In essence, it's a matter of running the SELECT mysql command towards the database, but it all depends on how advanced the search is supposed to be.

 

As for the code you've provided, it's not actually very secure, and it would be subject to a lot of potential explots, e.g. XSS and SQL injection to name the most serious flaws.

[Emil_Loenneberg SE]

 

Is there a way to rename the tables from firstname and lastname to name and address?

 

[mariushm]

of course there's a way

 

add an address column/field with the text datatype in the mysql table definition , then if you want drop the lastname and rename firstname to name

 

then go through the code and change all queries to refer to "name" and "address"

 

and learn to escape the input, never trust the user... use mysqli_real_escape_string: https://www.php.net/manual/en/mysqli.real-escape-string.php - see the procedural style which is what you're using.

[mariushm]

your search can be something as simple as 

 

// link is your sql connection

$querystring =  $_REQUEST['searchtext']; 
$queryesc = mysqli_real_escape_string($link,$querystring);

$results = mysqli_query($link,"SELECT * FROM user WHERE firstname LIKE '%".$queryesc."%' OR lastname LIKE '%".queryesc."%'");

 

% is like a * wildcard, means there can be some random text before and after  ... ex  "Johnathan"  will be returned if you search for "nath" because you added % and created  %nath% in the mysql query sent to the mysql server

 

 

[Emil_Loenneberg SE]

Is there a way to rename the tables from firstname and lastname to name and address?

 

 

[minibois]

5 minutes ago, Emil_Loenneberg SE said:

Is there a way to rename the tables from firstname and lastname to name and address?

Can you elaborate a little bit on where you want it changed?

Do you want it changed in your database, HTML page, or the HTML id?

[Sauron]

Just change every instance of those words in your code with the ones you want... and in your database. Since you only have a handful of values it's simpler to just make a new table and use that.

 

And next time use code tags instead of screenshotting your code.

[SansVarnic]

-= Topic Merged =-

Your 3 topic have been merged into the original topic, please do not repost your topic; this is against our forum rules.

[codesidian]

Quote

Is there a way to rename the tables from firstname and lastname to name and address?

Yes. I have no idea what DB you're using but you can do a couple of things. However, (first, last) doesn't go into (name, address). I'm assuming you want to concatenate first and last then add the addresses separately. So I'll cover that. 

 

You could create a new table with name and address, then insert the concatenated name fields like this (The pipes concatenate the fields, there's also a concatenate function but again no idea what DB you use) :

INSERT INTO users_with_address (name)

SELECT firstname || ' ' || lastname FROM users

You can then drop your original table AFTER CHECKING THE DATA IS ALL THERE. Probably not too important in this case, but good to make it a habit. 

 

Some DBs support renaming, no idea if this is the case but the statements are here.