多下拉查询过滤器

编辑：我发现我的原始代码中的一个大缺陷。对于我的选择，我对“full_name”和“city”使用了相同的变量名称（复制和粘贴错误）。但我仍然不确定如何输入select语句来根据两个下拉菜单选择行。我在下面发布了我的两部分代码。有任何想法吗？谢谢！多下拉查询过滤器

下拉框代码：

<select name="name"> 
<option value="">--</option> 
<?php 
$sql = "SELECT * FROM ".$SETTINGS["data_table"]." GROUP BY full_name ORDER BY full_name"; 
$sql_result = mysql_query ($sql, $connection) or die ('request "Could not execute SQL query" '.$sql); 
while ($row = mysql_fetch_assoc($sql_result)) { 
    echo "<option value='".$row["full_name"]."'".($row["full_name"]==$_REQUEST["full_name"] ? " selected" : "").">".$row["full_name"]." </option>"; 
} 
?> 
</select>&nbsp;&nbsp; 
<label>City</label> 
<select name="city"> 
<option value="">--</option> 
<?php 
$sql = "SELECT * FROM ".$SETTINGS["data_table"]." GROUP BY city ORDER BY city"; 
$sql_result = mysql_query ($sql, $connection) or die ('request "Could not execute SQL query" '.$sql); 
while ($row = mysql_fetch_assoc($sql_result)) { 
    echo "<option value='".$row["city"]."'".($row["city"]==$_REQUEST["city"] ? " selected" : "").">".$row["city"]."</option>"; 
} 
?> 
</select>

，并选择行代码：

<?php 

if ($_REQUEST["city"]<>'') { 
$search_city = " WHERE city='".mysql_real_escape_string($_REQUEST["city"])."'"; 
} 
if ($_REQUEST["full_name"]<>'') { 
$search_full_name = " AND full_name='".mysql_real_escape_string($_REQUEST["full_name"])."'"; 
} 

if ($_REQUEST["from"]<>'') { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"].$search_string.$search_city.$search_full_name; 
} else if ($_REQUEST["to"]<>'') { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"].$search_string.$search_city.$search_full_name; 
} else { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"].$search_string.$search_city.$search_full_name; 
} 

$sql_result = mysql_query ($sql, $connection) or die ('request "Could not execute SQL query" '.$sql); 
if (mysql_num_rows($sql_result)>0) { 
while ($row = mysql_fetch_assoc($sql_result)) { 
?>

来源

2012-03-23 Mike McG

看起来一目了然，你只需将字符串

$search_city = ''; 
$search_full_name = ''; 

if ($_REQUEST["city"]<>'') { 
$search_city = " AND city='".mysql_real_escape_string($_REQUEST["city"])."'"; 
} 
if ($_REQUEST["full_name"]<>'') { 
$search_full_name = " AND full_name='".mysql_real_escape_string($_REQUEST["full_name"])."'";  
} 

if ($_REQUEST["from"]<>'') { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"]." WHERE from_date >= '".mysql_real_escape_string($_REQUEST["from"])."'".$search_string.$search_city.$search_full_name; 
} else if ($_REQUEST["to"]<>'') { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"]." WHERE to_date <= '".mysql_real_escape_string($_REQUEST["to"])."'".$search_string.$search_city.$search_full_name; 
} else { 
$sql = "SELECT * FROM ".$SETTINGS["data_table"]." WHERE id>0".$search_string.$search_city.$search_full_name; 
} 

$sql_result = mysql_query ($sql, $connection) or die ('request "Could not execute SQL query" '.$sql); 
if (mysql_num_rows($sql_result)>0) { 
while ($row = mysql_fetch_assoc($sql_result)) {

来源

2012-03-23 21:36:52

我选择了你的方法，但只注意到了我的代码中的一个致命缺陷。我为“城市”所做的“full_name”使用相同的变量，因此“full_name”会被覆盖？我认为。看到我上面的修订。我也会将from_date和to_date简化一下。 – 2012-03-24 01:23:05

你可以使用一个用于动态添加条件到查询的数组。喜欢的东西 -

$criteria = array(); 

if ($_REQUEST['city'] <> '') { 
    $criteria['city'] = $_REQUEST['city']; 
} 

if ($_REQUEST['full_name'] <> '') { 
    $criteria['full_name'] = $_REQUEST['full_name']; 
} 

if ($_REQUEST['from'] <> '') { 
    $criteria['from_date'] = array($_REQUEST['from'], '>='); 
} 

if ($_REQUEST["to"]<>'') { 
    $criteria['to_date'] = array($_REQUEST['to'], '<='); 
} 

$sql = "SELECT * FROM $SETTINGS['data_table'] WHERE id > 0"; 

foreach ($criteria as $field => $filter) { 

    $comparator = is_array($filter) ? $filter[1] : '='; 
    $value = mysql_real_escape_string(is_array($filter) ? $filter[0] : $filter); 
    $sql .= " AND $field $comparator '$value'"; 

} 

$sql_result = mysql_query ($sql, $connection) or die ('request "Could not execute SQL query" '.$sql); 
if (mysql_num_rows($sql_result)>0) { 
    while ($row = mysql_fetch_assoc($sql_result)) {

来源

2012-03-23 21:46:10 nnichols

有这个代码去：

<?php 

// only process if the request is POST 
if (!empty($_POST)) { 
    // prepare the base select 
    $sql = 'SELECT * 
      FROM ' . $SETTINGS['data_table']; 

    // list of where conditions 
    $where = array(); 

    // map of POST => DB fields 
    $maps = array(
     'from'  => 'from_date', 
     'to'  => 'to_date', 
     'city'  => 'city', 
     'full_name' => 'full_name', 
    ); 

    // process all possible POST fields 
    foreach ($maps as $postName => $fieldName) { 
     if (!empty($_POST[$postName])) { 
      $where[] = sprintf('? = "?"', $fieldName, mysql_real_escape_string($_POST[$postName])); 
     } 
    } 

    // append the WHERE statement if required 
    if (!empty($where)) { 
     $sql .= ' WHERE ' . join(' AND ', $where); 
    } 

    // execute and process the query 
    $qry = mysql_query($sql, $connection); 
    if ($qry === false) { 
     throw new Exception(mysql_error(), mysql_errno()); 
    } 

    while ($row = mysql_fetch_assoc($qry)) { 
     // process the row 
    } 
}

来源

2012-03-23 21:50:36 Andris

终于得到它的工作！我用这个：

$whereClauses = array(); 
if (! empty($_POST['full_name'])) $whereClauses[] ="full_name='".mysql_real_escape_string($_POST['full_name'])."'"; 
if (! empty($_POST['city'])) $whereClauses[] ="city='".mysql_real_escape_string($_POST['city'])."'"; 
$where = ''; 
if (count($whereClauses) > 0) { $where = ' WHERE '.implode(' AND ',$whereClauses); } 
$sql = mysql_query("SELECT * FROM data".$where);

我在另一篇文章使用这种试图放弃了，开始是这样，放弃了这种方式，又回到第一种方式，得到了它的工作。

来源

2012-03-24 04:28:15

多下拉查询过滤器

回答

相关问题