Posted by Mike P2 on 05/01/07 20:56

On May 1, 11:58 am, canagonzales <canagonza...@gmail.com> wrote:
> echo $temp;
> mysql_select_db($database_editorialconn, $editorialconn);
> $query_rs_consulta = sprintf("SELECT * FROM lb_libros WHERE '$temp'
> LIKE %s", GetSQLValueString("%" . $colname_rs_consulta . "%",
> "text"));
> $query_limit_rs_consulta = sprintf("%s LIMIT %d, %d",
> $query_rs_consulta, $startRow_rs_consulta, $maxRows_rs_consulta);
> $rs_consulta = mysql_query($query_limit_rs_consulta, $editorialconn)
> or die(mysql_error());
> $row_rs_consulta = mysql_fetch_assoc($rs_consulta);

Things are easier to debug when they are coded in a simple way. Try
again and debug with this:

<?php
$colname_rs_consulta = 'a';
if( isset( $_GET['buscar'] ) )
$colname_rs_consulta =
'%'.mysql_real_escape_string( $_GET['buscar'], $editorialconn ).'%';

if( isset( $_GET['criterio'] ) )
{
if( '1' == $_GET['criterio'] )
$temp = 'lb_libros_titulo';

else if( '2' == $_GET['criterio'] )
$temp = 'lb_libros_autor';
}
else
die( 'Criterio es requerido' );

mysql_select_db( $database_editorialconn, $editorialconn );

$query_rs_consulta = "SELECT * FROM `lb_libros` WHERE '$temp' LIKE
'$colname_rs_consulta'";

$query_limit_rs_consulta = "$query_rs_consulta LIMIT
$startRow_rs_consulta, $maxRows_rs_consulta";

$rs_consulta = mysql_query( $query_limit_rs_consulta, $editorialconn )
or die( mysql_error() );

//the following should be in a loop condition
$row_rs_consulta = mysql_fetch_assoc( $rs_consulta );
?>

It is also more efficient without sprintf().

-Mike PII

• Next in forum: Re: PHP PEAR DB module not working?
• Prev in forum: Re: Security of Unix Pipes (with Application Details)
• Thread view: Re: search with a menu list criteria

[Reply to this message]