Reputation: 163
$result = mysqli_query($conn, "SELECT * FROM ProcessTrackingSystem.ProcessDetails WHERE Sample_name LIKE '$userinput' OR Client_name LIKE '$userinput1%'") or die(mysqli_error($conn));
I am trying to execute above query, but its outputting full details from mysql database.
how to fix this issue?
thanks in advance!!
Upvotes: 2
Views: 53
Reputation: 31749
Missing %
-
Sample_name LIKE '%$userinput%' OR Client_name LIKE '%$userinput1%'
Upvotes: 2
Reputation: 1593
you missed %
sign in $userinput
$result = mysqli_query($conn, "SELECT * FROM ProcessTrackingSystem.ProcessDetails WHERE Sample_name LIKE '%$userinput%'") or die(mysqli_error($conn));
Upvotes: 0
Reputation: 11173
You have to use '%' operator. A Like
always expect a %
. Try this -
$result = mysqli_query($conn, "SELECT * FROM ProcessTrackingSystem.ProcessDetails WHERE Sample_name LIKE '%$userinput'") or die(mysqli_error($conn));
Upvotes: 0