View difference between Paste ID: KcWhWJv7 and iyTCRs9v
SHOW: | | - or go back to the newest paste.
1
	
2
3
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
4
    <html xmlns="http://www.w3.org/1999/xhtml">
5
    <head>
6
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
7
    <title>Book-O-Rama Search Results</title>
8
    </head>
9
     
10
    <body>
11
    <h1>Book-O-Rama Search Results</h1>
12
    <?php
13
    // create short variable names
14
    $searchtype=$_POST['searchtype'];
15
    $searchterm=trim($_POST['searchterm']);
16
    if (!$searchtype || !$searchterm) {
17
    echo 'You have not entered search details. Please go back and try again.';
18
    exit;
19
    }
20
    if (!get_magic_quotes_gpc()){
21
    $searchtype = addslashes($searchtype);
22
    $searchterm = addslashes($searchterm);
23
    }
24
    @ $db = new mysqli('213.171.200.57', 'bookorama', 'password', 'books');
25
    if (mysqli_connect_errno()) {
26
    echo 'Error: Could not connect to database. Please try again later.';
27
    exit;
28
    }
29
    $query = "SELECT * FROM books WHERE ".$searchtype." like '%".$searchterm."%'";
30
    $result = $db->query($query);
31
    $num_results = $result->num_rows;
32
    echo "<p>Number of books found: ".$num_results."</p>";
33
    for ($i=0; $i <$num_results; $i++) {
34
    $row = $result->fetch_assoc();
35
    echo "<p><strong>".($i+1).". Title: ";
36
    echo htmlspecialchars(stripslashes($row['title']));
37
    echo "</strong><br />Author: ";
38
    echo stripslashes($row['author']);
39
    echo "<br />ISBN: ";
40
    echo stripslashes($row['isbn']);
41
    echo "<br />Price: ";
42
    echo stripslashes($row['price']);
43
    echo "</p>";
44
    }
45
    $result->free();
46
    $db->close();
47
    ?>
48
    </body>
49
    </html>