Adding "WHERE" query without ssp.

Adding "WHERE" query without ssp.

nroeder07nroeder07 Posts: 5Questions: 2Answers: 0

Want to limit results to only ones that are equal to $idUser

<?php
$idUser = 1;
/* IF Query comes from DataTables do the following */
if (!empty($_POST) ) {

    /*
     * Database Configuration and Connection using mysqli
     */

    define("HOST", "");
    define("USER", "");
    define("PASSWORD", "");
    define("DB", "");
    define("MyTable", "");

    $connection = mysqli_connect(HOST, USER, PASSWORD, DB) OR DIE("Impossible to access to DB : " . mysqli_connect_error());

    /* END DB Config and connection */

    /*
     * @param (string) SQL Query
     * @return multidim array containing data array(array('column1'=>value2,'column2'=>value2...))
     *
     */
    function getData($sql){
        global $connection ;//we use connection already opened
        $query = mysqli_query($connection, $sql) OR DIE ("Can't get Data from DB , check your SQL Query " );
        $data = array();
        foreach ($query as $row ) {
            $data[] = $row ;
        }
        return $data;
    }

    /* Useful $_POST Variables coming from the plugin */
    $draw = $_POST["draw"];//counter used by DataTables to ensure that the Ajax returns from server-side processing requests are drawn in sequence by DataTables
    $orderByColumnIndex  = $_POST['order'][0]['column'];// index of the sorting column (0 index based - i.e. 0 is the first record)
    $orderBy = $_POST['columns'][$orderByColumnIndex]['data'];//Get name of the sorting column from its index
    $orderType = $_POST['order'][0]['dir']; // ASC or DESC
    $start  = $_POST["start"];//Paging first record indicator.
    $length = $_POST['length'];//Number of records that the table can display in the current draw
    /* END of POST variables */

    $recordsTotal = count(getData("SELECT * FROM ".MyTable));

    /* SEARCH CASE : Filtered data */
    if(!empty($_POST['search']['value'])){

        /* WHERE Clause for searching */
        for($i=0 ; $i<count($_POST['columns']);$i++){
            $column = $_POST['columns'][$i]['data'];//we get the name of each column using its index from POST request
            $where[]="$column like '%".$_POST['search']['value']."%'";
        }
        $where = "WHERE ".implode(" OR " , $where);// id like '%searchValue%' or name like '%searchValue%' ....
        /* End WHERE */

        $sql = sprintf("SELECT * FROM %s %s ", MyTable , $where);//Search query without limit clause (No pagination)

        $recordsFiltered = count(getData($sql));//Count of search result

        /* SQL Query for search with limit and orderBy clauses*/
        $sql = sprintf("SELECT * FROM %s %s ORDER BY %s %s limit %d , %d ", MyTable , $where ,$orderBy, $orderType ,$start,$length  );
        $data = getData($sql);
    }
    /* END SEARCH */
    else {
        $sql = sprintf("SELECT * FROM %s ORDER BY %s %s limit %d , %d ", MyTable ,$orderBy,$orderType ,$start , $length);
        $data = getData($sql);

        $recordsFiltered = $recordsTotal;
    }

    /* Response to client before JSON encoding */
    $response = array(
        "draw" => intval($draw),
        "recordsTotal" => $recordsTotal,
        "recordsFiltered" => $recordsFiltered,
        "data" => $data
    );

    echo json_encode($response);

} else {
    echo "NO POST Query from DataTable";
}
?>

This question has an accepted answers - jump to answer

Answers

  • allanallan Posts: 61,840Questions: 1Answers: 10,134 Site admin

    You should probably add it around line 54 or thereabouts. Did you write the above script?

    Allan

  • nroeder07nroeder07 Posts: 5Questions: 2Answers: 0
    edited September 2016

    No, working on project for a friend after original programmer quit. Adding the the WHERE clause to the below limits the initial results however it doesn't limit the filtered results from the search.

        /* END SEARCH */
        else {
            $sql = sprintf("SELECT * FROM %s WHERE idUser='$idUser' ORDER BY %s %s limit %d , %d ", MyTable ,$orderBy,$orderType ,$start , $length);
            $data = getData($sql);
    
            $recordsFiltered = $recordsTotal;
        }
    

    Not sure if this is even the proper place to add it. I assumed it should be placed in the function getData($sql) but limiting the results there appears to break the search and sort function.

    Nick

  • allanallan Posts: 61,840Questions: 1Answers: 10,134 Site admin
    Answer ✓

    For general PHP help you would be better porting on StackOverflow or a PHP specific forum I'm afraid. I'd be happy to take look under the DataTables support options, but generally thirdparty code is not something I would support.

    Allan

This discussion has been closed.