<html>
<head>
<title>arnack.com Gaming Wesbite Database</title>
</head>
<body>
<h2>Search</h2>
<form name="search" method="post" action="<?=$PHP_SELF?>">
Seach for: <input type="text" name="find" /> in
<select NAME="field">
<option VALUE="fname">First Person Shooters</option>
<option VALUE="lname">Role PLaying Games</option>
<option VALUE="info">Real Time Strategy</option>
</select>
<input type="hidden" name="searching" value="yes" />
<input type="submit" name="search" value="Search" />
</form>
<?
$searching = $_POST['searching'];
$find = $_POST['find'];
//This is only displayed if they have submitted the form
if ($searching =="yes") {
echo "<h2>Results</h2><p>";
//If they did not enter a search term we give them an error
if ($find == "") {
echo "<p>You forgot to enter a search term";
exit;
}
// Otherwise we connect to our Database
mysql_connect("localhost", "arnackco_Arnack", "oompa123") or die(mysql_error());
mysql_select_db("arnackco_search") or die(mysql_error());
// We preform a bit of filtering
$find = strtoupper($find);
$find = strip_tags($find);
$find = trim ($find);
//Now we search for our search term, in the field the user specified
$data = mysql_query("SELECT * FROM users WHERE upper($field) LIKE'%$find%'");
if ($data) {
//And we display the results
while($result = mysql_fetch_array( $data )) {
echo $result['fname'];
echo " ";
echo $result['lname'];
echo "<br>";
echo $result['info'];
echo "<br>";
echo "<br>";
}
//This counts the number or results - and if there wasn't any it gives them a little message explaining that
$anymatches=mysql_num_rows($data);
if ($anymatches == 0) {
echo "Sorry, but we can not find an entry to match your query<br><br>";
}
//And we remind them what they searched for
echo "<b>Searched For:</b> " .$find;
} else {
echo "Error while sending query";
}
}
?>
</body>
</html>
Give this a try, I didn't test it though. All I did was add an if statement to check the
$data variable before going through the results. I think you could also try changing this line
$data = mysql_query("SELECT * FROM users WHERE upper($field) LIKE'%$find%'"); to
$data = mysql_query("SELECT * FROM users WHERE upper($field) LIKE'%$find%'") or die("Query Error");