php - Mysqli searching value in multiple fields

Solution:

If you want to find all of the records where:

field1 = someValue

orfield2 = someValue

orfield3 = someValue

then you can use this:

  $query = "SELECT * FROM table1 WHERE city = '$city' AND state = '$state' AND    location = '$location' AND (field1 = '$Value1' OR field2 = '$Value1' OR field3 = '$Value1') ORDER BY date_created LIMIT 5";
    $data = mysqli_query($dbc, $query);
Copy code

Solution:

Replace

AND (field1 = '$field1U' OR field1 = '$field2U' OR field1 = '$field3U')
Copy code

with

AND (field1 = '$search' OR field2 = '$search' OR field3 = '$search')
Copy code

(notice i'm searching for field1, field2 or field3) but please, please, please (!!) escape those $search strings! for example:

$search = mysqli_real_escape_string($link, $search)
Copy code

where $link was set using

$link = mysqli_connect(...)
Copy code

please refer to http://php.net/manual/de/mysqli.real-escape-string.php this is used to prevent SQL Injection (https://en.wikipedia.org/wiki/SQL_injection)

oh, and try to split the text from the variables, as i personally, think that's safer and better coding style. for your use case:

AND (field1 = '" . $search . "' OR field2 = '" . $search . "' OR field3 = '" . $search . "')
Copy code