Question

I am newbie to php.I have coded auto-complete text box using php,and i have a submit button.i have not given form action.

This is the HTML form code that i used for autocomplete textbox.this autocomplete textbox selects the value

<form  method="post" autocomplete="off">
    <p>
        <b>Theater Name</b> <label>:</label>
        <input type="text" name="theater" id="theater" />
    </p>
    <input type="submit" value="Submit" />
</form>

I have another php function that retrieves the values based on where clause.in the where statement i want to use selected value from form.

for ex: select address from theaters where theater_name =”form value”

How to use the form value in php function?can any one help me?

 <?php
$con = mysql_connect("localhost","root");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("theaterdb", $con);

$result = mysql_query("SELECT * FROM theter
WHERE theater_name="<!-- This could be value that we get after clicking submit button-->);

while($row = mysql_fetch_array($result))
  {
  echo $row['thearer_name'];
  echo "<br />";
  }
?> 

Thanks in advance……

Answer 1

You could get the value from $_POST by $_POST['theater'].

And note, you should not use this value directly in the sql, you need to escape it to prevent sql injection.

$theater = mysql_escape_string($_POST['theater']);
$result = mysql_query("SELECT * FROM theter WHERE theater_name='$theater'";

Last, you could take a look at PDO, which is suggested over the old mysql_* functions.