connect(); $title = 'Product Search'; $main = ''; $main .= <<

Please enter all or part of a product name:

Leave empty to see all products

EOF; if (isset($_GET['search'])) { $search = validString($_GET['search'], 100); if ($search) { $searchf = htmlspecialchars($search); $search = "%$search%"; $query = $db->prepare("SELECT price, name, image FROM geekproducts WHERE name like ? ORDER BY price, name"); $query->execute(array($search)); $number = $query->rowCount(); $main .= "

$number items contain \"$searchf\"

"; if ($number > 0) { $main .= ''; $main .= ''; foreach ($query->fetchAll() as $row) { $main .= ""; } $main .= '

Price	Item Name	Thumbnail (click to enlarge)
$$row[price]	$row[name]

'; } } else { $searchf = ''; $query = $db->query("SELECT price, name, image FROM geekproducts ORDER BY price, name"); $number = $query->rowCount(); $main .= "

$number items contain \"$searchf\"

"; $main .= ''; $main .= ''; foreach ($query as $row) { $main .= ""; } $main .= '

Price	Item Name	Thumbnail (click to enlarge)
$$row[price]	$row[name]

'; } } require '../utils/simpleTemplate.php'; ?>