Php form help

I have a php code that suppose to have a user enter a number in and it out puts all people in my database who is the same age or younger. Instead of it working it give me the error:

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%39%' at line 1

Code:

<html>
  <head>
    <title>Display Records</title>
  </head>
  <body>
    <?php
      $conn = new mysqli("localhost", "proxy_user",
            "my*password", "m9");
      if (mysqli_connect_errno()){
          echo 'Cannot connect to database: ' .
              mysqli_connect_error($conn);
      }
      else{
         //read keyword from user
         if(!empty($_POST["keyword"])){
            $keyword = "%".$_POST["keyword"]."%";
             // create prepared statement
           if ($query = mysqli_prepare($conn,
          "SELECT FirstName, LastName, Age, Hometown, Job FROM people WHERE age <= $keyword ")) {

          // bind parameters
          mysqli_stmt_bind_param ($query, "i", $keyword);

            //run the query and keep results in $result variable
            mysqli_stmt_execute($query);

            // bind variables to prepared statement
            mysqli_stmt_bind_result($query, $FirstName, $LastName, $Age, $Hometown, $Job);

            // fetch values
            while (mysqli_stmt_fetch($query)) {
                 echo "<strong>$LastName, $FirstName</strong> from $Hometown<br/>age: $Age, occupation: $Job <br/><br/>";
             }

           //free memory used by a result handle
           mysqli_stmt_close ($query);
            } else //problem with a query
              echo "Error: " . mysqli_error($conn);
          } else { //no keyword
              echo "No keyword was specified";
          }

         mysqli_close($conn);
     }
?>
  </body>
</html>

2

Contributors

3

Replies

4 Hours

Discussion Span

1 Year Ago

Last Updated

4

Views

Question
Answered

whojstall11

Newbie Poster

7 posts since Mar 2012

Reputation Points: 10

Solved Threads: 0

Skill Endorsements: 0

1 Year Ago

0

Add single quotes around $keyword:

"SELECT FirstName, LastName, Age, Hometown, Job FROM people WHERE age <= '$keyword' "

Also use CODE tags when posting to the forum, bye :)

cereal

Veteran Poster

1,146 posts since Aug 2007

Reputation Points: 344

Solved Threads: 223

Skill Endorsements: 22

1 Year Ago

0

Thank you it works but it still gives me an error on 22:
Warning: mysqli_stmt_bind_param() [function.mysqli-stmt-bind-param]: Number of variables doesn't match number of parameters in prepared statement in E:\xampp\htdocs\m9\findRecords2.php on line 22

<html>
  <head>
    <title>Display Records</title>
  </head>
  <body>
    <?php
      $conn = new mysqli("localhost", "proxy_user", 
            "my*password", "m9");
      if (mysqli_connect_errno()){
          echo 'Cannot connect to database: ' . 
              mysqli_connect_error($conn);
      }
      else{
         //read keyword from user
         if(!empty($_POST["keyword"])){
            $keyword = $_POST["keyword"]; 
             // create prepared statement 
           if ($query = mysqli_prepare($conn, 
          "SELECT FirstName, LastName, Age, Hometown, Job FROM people WHERE age <= '$keyword'")) {

	       // bind parameters
	       mysqli_stmt_bind_param ($query, "i", $keyword);
             
            //run the query and keep results in $result variable
            mysqli_stmt_execute($query);

            // bind variables to prepared statement 
            mysqli_stmt_bind_result($query, $FirstName, $LastName, $Age, $Hometown, $Job);

            // fetch values 
            while (mysqli_stmt_fetch($query)) {
                 echo "<strong>$LastName, $FirstName</strong> from $Hometown<br/>age: $Age, occupation: $Job <br/><br/>";
             }

           //free memory used by a result handle 
	        mysqli_stmt_close ($query);
            } else //problem with a query
              echo "Error: " . mysqli_error($conn);
          } else { //no keyword 
              echo "No keyword was specified";
          }
         
         mysqli_close($conn);
     }
?>
  </body>
</html>

whojstall11

Newbie Poster

7 posts since Mar 2012

Reputation Points: 10

Solved Threads: 0

Skill Endorsements: 0

1 Year Ago

0

Right, then change it to:

"SELECT FirstName, LastName, Age, Hometown, Job FROM people WHERE age <= ?"

As explained here: http://php.net/manual/en/mysqli-stmt.bind-param.php

cereal

Veteran Poster

1,146 posts since Aug 2007

Reputation Points: 344

Solved Threads: 223

Skill Endorsements: 22

Question Answered as of 1 Year Ago by cereal

Php form help

This question has already been solved: Start a new discussion instead