1

I am trying to build a basic search but am getting a small code issue here, i want to paginate my searched result set and this is what i have 1) an input field named "input", a and within a form of post method 2) when user submits the form it calls search.php with the follow code bellow.

The problem

the pagination returns a properly paginated result set but when i move to next page all records in the search table are returned including those that do not meet the criteria in the where clause.

Here is the code: Let me know if it's too much code here. I can paste somewhere else and provide a link; Thanks guys

<?php

    $input = $_POST['input'];
    $categories = $_POST['category'];
    $state = $_POST['state'];

    $targetpage = "search.php";
    $limit = 3;

    //This query checks for data
    $qq = " SELECT * FROM classified where confirm='0' ";
    $qq = $db->prepare($qq);
    $qq->execute();

    $total_pages =$qq->rowCount();

    $stages = 3;
    $page = ($_GET['page']);
    if ($page){
        $start = ($page - 1) * $limit;
    } else {
        $start = 0;
    }

    $rows = $qq->fetchAll();
    if ($rows > 0){
        $q = " SELECT * FROM classified where confirm='0' ";
        if (!empty( $input)) {
            $q .= "AND title LIKE '%".$input."%' ";
        }
        if (!empty($_POST['search_category']) ) {
            $q .= "AND id_cat = ".$categories." ";
        }

        if (!empty($_POST['state']) ) {
            $q .= "AND id_state = ".$state." ";
        }
        $q .= "ORDER BY date DESC LIMIT $start, $limit ";
    }
    $q = $db->prepare($q);
    $q->execute();
    //// Just for testing purposes to see what's coming out
    print_r($q);

    /*** echo number of columns ***/
    $resultt = $q->fetchAll();
    // Initial page num setup
    if ($page == 0){
        $page = 1;
    }
    $prev = $page - 1;
    $next = $page + 1;

    $lastpage = ceil($total_pages/$limit);
    $LastPagem1 = $lastpage - 1;

    $paginate = '';
    if ($lastpage > 1) {
        $paginate .= "<div class='paginate'>";
        // Previous
        if ($page > 1){
            $paginate.= "<a href='$targetpage?page=$prev'>Previous</a>";
        } else {
            $paginate.= "<span class='disabled'>Previous</span>";
        }
        // Pages
        if ($lastpage < 7 + ($stages * 2)) { // Not enough pages to breaking it up
            for ($counter = 1; $counter <= $lastpage; $counter++) {
                if ($counter == $page) {
                $paginate.= "<span class='current'>$counter</span>";
                } else {
                    $paginate.= "<a href='$targetpage?page=$counter'>$counter</a>";
                }
            }
        } else if ($lastpage > 5 + ($stages * 2)) {// Enough pages to hide a few?
            // Beginning only hide later pages
            if ($page < 1 + ($stages * 2)) {
                for ($counter = 1; $counter < 4 + ($stages * 2); $counter++) {
                    if ($counter == $page) {
                        $paginate.= "<span class='current'>$counter</span>";
                    } else {
                        $paginate.= "<a href='$targetpage?page=$counter'>$counter</a>";
                    }
                }
                $paginate.= "...";
                $paginate.= "<a href='$targetpage?page=$LastPagem1'>$LastPagem1</a>";
                $paginate.= "<a href='$targetpage?page=$lastpage'>$lastpage</a>";
            } else if ($lastpage - ($stages * 2) > $page && $page > ($stages * 2)) { // Middle hide some front and some back
                $paginate.= "<a href='$targetpage?page=1'>1</a>";
                $paginate.= "<a href='$targetpage?page=2'>2</a>";
                $paginate.= "...";
                for ($counter = $page - $stages; $counter <= $page + $stages; $counter++) {
                    if ($counter == $page) {
                        $paginate.= "<span class='current'>$counter</span>";
                    } else {
                        $paginate.= "<a href='$targetpage?page=$counter'>$counter</a>";
                    }
                }
                $paginate.= "...";
                $paginate.= "<a href='$targetpage?page=$LastPagem1'>$LastPagem1</a>";
                $paginate.= "<a href='$targetpage?page=$lastpage'>$lastpage</a>";
            } else { // End only hide early pages
                $paginate.= "<a href='$targetpage?page=1'>1</a>";
                $paginate.= "<a href='$targetpage?page=2'>2</a>";
                $paginate.= "...";
                for ($counter = $lastpage - (2 + ($stages * 2)); $counter <= $lastpage; $counter++) {
                    if ($counter == $page) {
                        $paginate.= "<span class='current'>$counter</span>";
                    } else {
                        $paginate.= "<a href='$targetpage?page=$counter'>$counter</a>";
                    }
                }
            }
        }
        // Next
        if ($page < $counter - 1) {
            $paginate.= "<a href='$targetpage?page=$next'>Next</a>";
        } else {
            $paginate.= "<span class='disabled'>Next</span>";
        }
        $paginate.= "</div>";
    }
    // pagination
    echo $total_pages.' Results';
    echo $paginate;
    ////////
    if (count($resultt) !== 0) {
        foreach ($resultt as $row) {
            echo $row['title'];
            echo $row['categories'];
            echo $row['state'];
        }
    } else {
        echo "No data available";
    }
2
  • 1
    your code is vulnerable to sql injection Jan 3, 2013 at 4:45
  • 1
    You are using PDO incorrectly: you should use prepared statements instead of string concatenation. Right now, your code is vulnerable to SQL injection...
    – uınbɐɥs
    Jan 3, 2013 at 5:31

1 Answer 1

1

It's certainly because when you go to a next page, you don't send again these values :

$input = $_POST['input'];
$categories = $_POST['category'];
$state = $_POST['state'];

which correspond to your filters values. Surely they become empty.

Hope this helps.

3
  • I can't figure out where to implement those values! Could you give a hint?
    – Che Jug
    Jan 2, 2013 at 3:47
  • 1
    There are many ways. You can keep it in session for example. Or you can simply do a paginator with in place of anchor links, submit buttons to access to the different pages and you add the 3 hidden post values ('input', 'category', 'state') properly inquired. Hope this helps you. Jan 2, 2013 at 4:00
  • Could someone try to help me please?
    – Che Jug
    Jan 2, 2013 at 18:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.