Matching user input with mysql database and giving different results depending on user input

Question

I have this form page

<!DOCTYPE html>
<html>
    <head>
        <title>Navigation</title>
    </head>

<body>

<form name="form" method="POST" action="capstone.php">
    <fieldset>
        <p>Where are you trying to go? </p>
        <input type="roominput" name="mapinput" id="mapinput">
<br />
<br />
<input type="submit" name="submit" value="Submit">
</fieldset>
</form>
</body>
</html>

I have this php code that matches user input from the form page with the sql database and echos if the room exists or not.

How do I change this code in order to match user input from the form page with the database and post different images depending on the user input from the form?

 <?php
$conn=mysqli_connect("localhost","xxx","xxx","xxx");
if (mysqli_connect_errno())
{
echo "Connect failed: " . mysqli_connect_error();
exit();
}

if (isset($_POST['mapinput']))
{
 $map = $_POST['mapinput'];
 $query = "SELECT * FROM `Rooms` WHERE `Room Number` ='$map'";
 $result = mysqli_query($conn,$query); 

     if (mysqli_num_rows($result))
        {
           echo 'Room already exists';
        } 

else 
{
echo 'Room does not exist, please try again.';
}

}

mysqli_close($conn);

?>

`if (mysqli_num_rows($result) > 0)` change this first to see if u get any rows back — Mario, Mar 22 '17 at 20:29
I have multiple images that need to be displayed depending on the user's input from a search form — Raf Robles, Mar 22 '17 at 20:31
Then after this `if (mysqli_num_rows($result) > 0)` make a variable `$data = mysqli_fetch_array($result);` and use `foreach` or `while` loop to display results from `$data` — Mario, Mar 22 '17 at 20:35
@Mario I am having problems implementing the changes you have told me. Can you kindly help me hardcode on how it would look like? — Raf Robles, Mar 22 '17 at 21:03
Sure just update your original question with form you using. — Mario, Mar 22 '17 at 21:09
@RafRobles can you please post yours database table structure with columns ? — Mario, Mar 22 '17 at 21:17
@RafRobles check answer, but as **Fred -ii-** make in answer and if you are starting to learn, switch to `PDO` because its safe and its not hard to learn, later all will be easier. — Mario, Mar 22 '17 at 21:43

score 1 · Answer 1 · edited May 23 '17 at 12:25

type="roominput" that isn't a valid input type.

It needs to be either "text" or "number" if you plan on using integers. The latter being an HTML5 type.

Reference:

https://developer.mozilla.org/en/docs/Web/HTML/Element/input

Your code is also open to an SQL injection, use a prepared statement:

https://en.wikipedia.org/wiki/Prepared_statement

Note: If the input is to be an integer, then using $map = (int)$_POST['mapinput']; is good to use.

However, you should first check if it is an integer first. There are many ways to check for this, and to name a few:

"How do I change this code in order to match user input from the form page with the database and post different images depending on the user input from the form?"

You fetch results over a successful query with either a while or foreach loop.

Start with http://php.net/manual/en/mysqli-result.fetch-array.php and see other fetching functions to the right of that page.
and http://php.net/manual/en/mysqli-stmt.fetch.php
Note: The while loop needs to be inside the if (mysqli_num_rows($result)){...}

Then, echo the image you wish to show. The source of the image will depend on its location, be it from a folder or a BLOB in your database; that part is unknown and are two different methods entirely.

If from a saved file on the server:

<img src="/path/to/images/image_x.jpg">

or using $image = $row['image_in_column']; from a while loop:

<img src="/path/to/images/$image">

as a BLOB:

PHP display image BLOB from MySQL

More examples:

Mario · Answer 2 · 2017-03-22T21:55:45.733

0

Here, i can give u this answer like this because i don't know names of database table columns.

Mysqli: capstone.php

<?php

$conn = mysqli_connect("localhost","xxx","xxx","xxx");

if (isset($_POST['submit']))
{
    if (isset($_POST['mapinput']))
    {
        $map = mysqli_real_escape_string($conn, $_POST['mapinput']);

        $query = "SELECT * FROM Rooms WHERE Room Number = '$map'";
        $result = mysqli_query($conn,$query); 

        // check if query returns any result
        if (mysqli_num_rows($result) > 0)
        {
            $data = mysqli_fetch_array($result);

            // loop through yours result displaying data u want
            // and lets say u have image path stored in database
            foreach ($data as $dat)
            {
                echo $dat['column_name'] . ' <img src="'.$dat['image_url'].'"><br />';
            }
        }
        else
        {
            echo 'No results found.';
        } 
    }
    else 
    {
        echo 'Please enter room name.';
    }
}

mysqli_close($conn);

?>

Form :

<form method="POST" action="capstone.php">
<fieldset>
    <p>Where are you trying to go? </p>
    <input type="text" name="mapinput" id="mapinput">
    <input type="submit" name="submit" value="Submit">
</fieldset>
</form>

edited Mar 22 '17 at 21:55

answered Mar 22 '17 at 21:41

Mario

518
2
19

the images aren't stored in the database. They're just in /var/www/html folder. Are they supposed to be in the database? Also, lets say the user inputs "bookstore" into the form and matches it with the database, how do you bring up its own personal image? Ex: bookstore has its own image, foodcourt has its own image, etc.. but should only be displayed when the user inputs that room and matches with the database. – Raf Robles Mar 22 '17 at 21:55
For that its best when user upload a image to store image path to database like ( image_folder/user_image.jpg ) so you can use it later like i give u example in this code and it will be `` that is a best solution. If you have already uploaded image you can't know from which user it is. – Mario Mar 22 '17 at 21:59
If its image for a bookstore and you have only 1 image for that, you can use it in `foreach` loop just add if statement `if ($dat['column_name'] == 'bookstore') echo ''` – Mario Mar 22 '17 at 22:06
Just receiving a blank page, like it's stuck or something. – Raf Robles Mar 22 '17 at 22:22
add this on top of script under ` – Mario Mar 22 '17 at 22:24

Matching user input with mysql database and giving different results depending on user input

2 Answers2