Untitled

<html>
<head>
<title>Query Attribute</title>
</head>
<body>
<h3> Query </h3>

<form action="" method="post">
    Which table to query: <input type="text" name="table"> <br> <br>


<form action ="" method = "post">
    Which attribute to query: <input type = "text" name = "attribute"> <br> <br>
        <input type ="submit" name = "Submit"/>
</form>

<?php
$server = "upsql";
$sqlUserName = "sqlusername";
$sqlPassword = "password";
$databaseName= "username";
// enter username for "username" and password for "password"


    $connectionInfo = array('Database'=>$databaseName, 'UID'=>$sqlUserName,
        'PWD'=>$sqlPassword, 'Encrypt'=>'0', 'ReturnDatesAsStrings'=>true);

    $connection = sqlsrv_connect($server, $connectionInfo)
        or die("Error: database perameters are not correct");
    if(!empty($_POST["table"]))
    {
        // get the table name
        $table = $_POST['table'];
       // get the attribute
       $attribute = $_POST['attribute'];

        // prepare the SQL query
        $query = "SELECT $attribute FROM $table";
        echo "Query: " .$query."<br>";
        $result = sqlsrv_query($connection, $query)
            or die("Error: query is wrong");

        echo "<table border=1>";
        echo "<tr>";

        foreach(sqlsrv_field_metadata($result) as $fieldMetadata)
            echo "<th>".$fieldMetadata['Name']."</th>";
        echo "</tr>";

        // fetch rows in the table
        while($row = sqlsrv_fetch_array($result, SQLSRV_FETCH_ASSOC))
        {
            echo "<tr>\n";
            foreach($row as $cell)
            {
                echo "<td> $cell </td>";
            }
            echo "</tr>\n";
        }
        echo "</table>";
    }
    sqlsrv_close($connection);