php, checkbox retrieval from mysql db

@AngieS had the right idea with checkboxes named fc[] (that produces an array on submit). @Member#120589 was also right to suggest while() for fetching rows. The actual bug is that the SQL uses a single variable that ends up holding only the last checked color, so the query returns rows for just one color instead of all selected colors.

A robust fix is to build a single query that matches all chosen values (an SQL IN list) and use prepared statements to avoid injection. Example with PDO (replace connection details):

if (!empty($_POST['fc'])) {
    $colors = array_values($_POST['fc']);          // ensure numeric keys
    $placeholders = implode(',', array_fill(0, count($colors), '?'));
    $sql = "SELECT * FROM findplantsdb WHERE Color IN ($placeholders)";

    $pdo = new PDO('mysql:host=HOST;dbname=DB', 'USER', 'PASS', [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION
    ]);
    $stmt = $pdo->prepare($sql);
    $stmt->execute($colors);

    while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
        // escape before output
        echo htmlspecialchars($row['Name'], ENT_QUOTES);
        // more output...
    }
}

If the Color column actually stores comma-separated values, use a normalized many-to-many table (recommended) or, as a stopgap, FIND_IN_SET() or LIKE '%color%' (less reliable and slower). Also migrate away from mysql_* functions — they were removed in PHP 7 — and always escape HTML output with htmlspecialchars().

Quick checklist: confirm name="fc[]" and isset($_POST['fc']) before using; prefer a single IN query instead of running one query per selected color; validate inputs; and normalize the schema if plants can have multiple colors.