格式化数据库查询的结果

到目前为止，我有以下的PHP，它允许用户搜索数据库的特定列并显示所有结果。格式化数据库查询的结果

<?php 
require("header.php"); 
if(isset($_REQUEST['searching'])){ //check if form has been submitted 
echo"<h2>Results</H2><p>"; 
connect('final');//connect to DB 
//set the values from search form 
$field = $_POST['field']; 
$query = $_POST['query']; 

    $query = htmlspecialchars($query); // stop HTML characters 
    $query = mysql_real_escape_string($query); //stop SQL injection 

    $data = mysql_query("SELECT * 
    FROM customer 
    INNER JOIN address ON customer.ID = address.customer_ID 
    LEFT OUTER JOIN sites ON address.ID = sites.address_ID 
    WHERE customer.ID IN (SELECT customer.ID 
    FROM customer 
    INNER JOIN address ON customer.ID = address.customer_ID 
    LEFT OUTER JOIN sites ON address.ID = sites.address_ID 
    WHERE upper(customer.$field) LIKE'%$query%')") ;//query the DB with search field in colleumn selected// 

    //$data = mysql_query("SELECT * FROM customer INNER JOIN address ON customer.ID = address.Customer_ID LEFT OUTER JOIN sites ON address.ID = sites.address_ID WHERE upper(customer.$field) LIKE'%$query%'") ; 

    if($data === FALSE) { 
    $error = 'Query error:'.mysql_error(); 
    echo $error; 
    } 
    else 
    { 
    while($results = mysql_fetch_array($data)){// puts data from database into array, loops until no more 
      echo "<br>"; 
      echo $results['First_Name']; 
      echo " "; 
      echo $results['Surname']; 
      echo " "; 
      echo $results['Company_Name']; 
      echo " "; 
      echo $results['Telephone']; 
      echo " "; 
      echo $results['Alt_Telephone']; 
      echo " "; 
      echo $results['line_1']; 
      echo " "; 
      echo $results['line2']; 
      echo " "; 
      echo $results['town']; 
      echo " "; 
      echo $results['postcode']; 
      echo " "; 
      echo $results['site_name']; 


      //posts results from db query 
     } 
    } 


     $anymatches=mysql_num_rows($data); //checks if the querys returned any results 
      if ($anymatches == 0) 
        { 
         echo "Sorry, but we can not find an entry to match your query<br><br>"; 
        } 

    }

然而，由于我使用的回声输出它只是显示所有页面的最顶端的成果，并推动我所有的HTML内容的楼下吧。

我该如何格式化它以便它出现在我的html内容中？例如在搜索按钮下方。

来源

2013-04-25 Dan Barr

由于'$ field'，您可能会注入SQL。 – 2013-04-25 08:54:44

解决方案不会回显它将在顶部显示的内容，因为PHP先处理代码然后加载html，因此它会回显页面顶部的数据。

解决方案将结果分配给while循环中的数组，然后使用该数组在html中显示它。

来源

2013-04-25 07:43:53

也许，结束标记'p'会有帮助吗？尝试添加

echo "</p>";

最后。

来源

2013-04-25 07:43:42 bbldzr

依我看你错过了某些HTML标记在那里，例如：

 echo "<div>"; 
     echo $results['First_Name']; 
     echo " "; 
     echo $results['Surname']; 
     echo ", "; 
     echo $results['Company_Name']; 
     echo "</div><address>"; 
     echo $results['Telephone']; 
     echo "<br>"; 
     echo $results['Alt_Telephone']; 
     echo "<br>"; 
     echo $results['line_1']; 
     echo "<br>"; 
     echo $results['line2']; 
     echo "<br>"; 
     echo $results['town']; 
     echo " "; 
     echo $results['postcode']; 
     echo "</address><div>"; 
     echo $results['site_name']; 
     echo "</div>";

如果允许稍微OT的答案，你的代码暗示我说，你在学习PHP。

如果是这样，请记住，在线PHP教程常常是在几年前编写的，并处于过时的状态，并附带示例代码，显示您可能做的最糟糕的事情。

假设我的评估是正确的，可以考虑在设计良好的框架下学习PHP。 Silex的是比较容易在这方面回暖：

其他框架，你可能要考虑：

还有很多很多。

来源

2013-04-25 09:18:56

格式化数据库查询的结果

回答

相关问题