0

I have a table associated with a database mysql, All I want is to add a search box by date.

Although I have tried many methods, but unfortunately all of them did not work for me as I should This is my code:

<form action="" method="GET"">
    <input type="date" name="search" class="form-control" placeholder="Start"  >
    <button type="submit" class="btn btn-primary">Search</button>
</form>
function getRecords($params)
{
    $rp = isset($params['rowCount']) ? $params['rowCount'] : 10;

    if (isset($params['current'])) {
        $page = $params['current'];
    } else {
        $page = 1;
    }
    $start_from = ($page - 1) * $rp;

    $sql = $sqlRec = $sqlTot = $where = '';

    if (!empty($params['searchPhrase'])) {
        $where .= " WHERE ";
        $where .= " ( fullname LIKE '" . $params['searchPhrase'] . "%' ";
        $where .= " OR email LIKE '" . $params['searchPhrase'] . "%' ";

        $where .= " OR phone LIKE '" . $params['searchPhrase'] . "%' )";
    }

    if (!empty($params['sort'])) {
        $where .= " ORDER By " . key($params['sort']) . ' ' . current($params['sort']) . " ";
    }
    // getting total number records without any search
    $sql = "SELECT * FROM `api` where  DATE_FORMAT(created_at, '%Y-%m-%d') = DATE_SUB(CURRENT_DATE(),INTERVAL 1 DAY)";
    $sqlTot .= $sql;
    $sqlRec .= $sql;

    //concatenate search sql if value exist
    if (isset($where) && $where != '') {
        $sqlTot .= $where;
        $sqlRec .= $where;
    }
    if ($rp != -1)
        $sqlRec .= " LIMIT " . $start_from . "," . $rp;
}
Constantine
  • 650
  • 9
  • 15
ouchchane
  • 1
  • 3
  • replace `$where .=" WHERE ";` with `$where .=" AND ";` that should give you at least a valid sql code, still read https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php how to prevent sql injection – nbk Dec 06 '21 at 20:21
  • Thanks for your quick response Unfortunately it didn't work – ouchchane Dec 06 '21 at 20:34
  • echo the result of your run thrugh the lines, maybe there is another error – nbk Dec 06 '21 at 20:36

0 Answers0