如何使用多个 HTML 文本输入进行 SQL 搜索查询

Question

我有一个包含多个 html 文本输入的表单，我想使用这些输入的值来进行一个搜索查询（例如，我希望它看起来像这样 results.php?input=value1+value2+value3）我试过了，但是我还没有设法得到一个查询来自 3 个输入字段的所有值的查询。

$input = $_GET['input']; //this is for the text input - ignore
$topic = $_GET['topic']; // the first select box value which works well
$location = $_GET['location']; //the second select box value which isn't being inserted into the query
$combined = $input . $topic . $location;
$terms = explode(" ", $combined);
$query = "SELECT * FROM search WHERE input='$input' AND topic ='$topic' AND location='$location' ";'

Answer 1

您可以按照您展示的方式进行操作，但您应该使用内置的 PHP 函数通过准备好的语句转义输入，例如使用 mysqli 的 bind_param：

$db = new mysqli(*your database connection information here*);
$input = $_GET['input']; //this is for the text input - ignore
$topic = $_GET['topic']; // the first select box value which works well
$location = $_GET['location']; //the second select box value which isn't being inserted into the query
$combined = $input . $topic . $location;
$terms = explode(" ", $combined);
$stmt = $db->prepare("SELECT * FROM search WHERE input = ? AND topic = ? AND location = ?");
$stmt->bind_param("sss", $input, $topic, $location);
$stmt->execute();
$stmt->close();

至于获取你想要的 URL 的表单：

<form action="results.php" method="GET">
  <input type="text" name="input">
  <input type="text" name="topic">
  <input type="text" name="location">
</form>

操作设置为results.php 脚本，方法设置为GET，以便将表单输入放入URL。