php - Filtering Database using Search button -
i have codes here, , im stock errors:
warning: mysql_query() expects parameter 1 string, resource given in c:\xampp\htdocs\xampp\elev8log\pages\tables\task.php on line 396
here code:
<?php $sql = mysql_query('select * taskview dept_id=(select deptid users username="'.$_session['username'].'")'); //where empname="'.$_session['username'].'" , req_dateapprove null'); //where req_approveuser="'.$_session['username'].'" , req_dateapprove null' if(isset($_post['search'])) { $search_term = mysql_real_escape_string($_post['search_box']); $search_term=mysql_real_escape_string($_post['search_box']); $sql.="where req_code '%{$search_term} %'"; $sql.="or req_date '%{$search_term} %'"; $sql.="or req_status '%{$search_term} %'"; $sql.="or req_dateneeded '%{$search_term} %'"; $sql.="or req_approveuser '%{$search_term} %'"; $sql.="or req_noteuser '%{$search_term} %'"; $sql.="or req_datenote '%{$search_term} %'"; $sql.="or form_name '%{$search_term} %'"; $sql.="or itrf_type '%{$search_term} %'"; $sql.="or username '%{$search_term} %'"; $sql.="or itrf_details '%{$search_term} %'"; $sql.="or itrf_date '%{$search_term} %'"; $sql.="or comp_name '%{$search_term} %'"; $sql.="or dept_name '%{$search_term} %'"; $sql.="or dept_code '%{$search_term} %'"; $sql.="or dept_id '%{$search_term} %'"; // $sql.="or descriptionsql '%{$search_term}%'"; } //this line 396------->>>>>>$query = mysql_query($sql) or die(mysql_error()); ?> <!-- main content --> <section class="content"> <div class="row"> <div class="col-xs-12"> <div class="box"> <div class="box-header"> <h3 class="box-title">list of pending task</h3> </div><!-- /.box-header --> <div class="box-body"> <table id="example2" class="table table-bordered table-hover"> <label><input type="radio" name="all" value="all" checked> all </label> <label><input type="radio" name="all" value="wait"> waiting feedback </label><thead> <label><input type="radio" name="all" value="closed"> closed</label><thead> <form name="search_form" method="post" action="task.php"> search: <input type="text" name="search_box" value="" /> <input type="submit" name="search" value="search...."> </form> <tr> <th>date of request</th> <th>requestor name</th> <th>form type</th> <th>request type</th> <th>date needed</th> <th>status</th> <th>action</th> </tr> </thead> <?php // if(isset($_get['req_code'])){ // } while($row = mysql_fetch_array($query)) { ?> <tr> <td><?php echo date($row['req_date']); ?></td> <td class="left"><?php echo htmlentities($row['username'], ent_quotes, 'utf-8'); ?></a></td> <td><?php echo htmlentities($row['form_name'], ent_quotes, 'utf-8'); ?></td> <td> <?php echo ($row['itrf_type']);?></td> <td> <?php echo ($row['req_dateneeded']);?></td> <td> <?php echo ($row['req_status']);?></td> <td class="left"><a href="#proceed-<?php echo $row['req_code'];?>" data-toggle="modal"><button type="submit" class="btn btn-primary" name="approved">manage task</button></a> </tr>
your sql not formatted. use this
$sql = "select * taskview dept_id=(select deptid users username='".$_session['username']."') "; if (isset($_post['search'])) $search_term = mysql_real_escape_string($_post['search_box']); $sql .= "and (req_code '%{$search_term}%' "; $sql .= "or req_date '%{$search_term}%' "; $sql .= "or req_status '%{$search_term}%' "; $sql .= "or req_dateneeded '%{$search_term}%' "; $sql .= "or req_approveuser '%{$search_term}%' "; $sql .= "or req_noteuser '%{$search_term}%' "; $sql .= "or req_datenote '%{$search_term}%' "; $sql .= "or form_name '%{$search_term}%' "; $sql .= "or itrf_type '%{$search_term}%' "; $sql .= "or username '%{$search_term}%' "; $sql .= "or itrf_details '%{$search_term}%' "; $sql .= "or itrf_date '%{$search_term}%' "; $sql .= "or comp_name '%{$search_term}%' "; $sql .= "or dept_name '%{$search_term}%' "; $sql .= "or dept_code '%{$search_term}%' "; $sql .= "or dept_id '%{$search_term}%')"; } and after thousand or's lol use this
$query = mysql_query($sql) or die(); you using 2 where's , there no spacing in sql. try exact codes have provided.
but please mysql deprecated try using mysqli or pdo.
Comments
Post a Comment