what's wrong with it?

[kiplo]

mysql_fetch_array() expects parameter 1 to be resource, boolean given in C:\xamp

 

 

<?php

include('config.php');

include('array.php');

$q=$_GET['q'];

 

 

$sql = "\n"

    . "select * from harta_modal where Siri Pembuat like \'$q%\'\n"

    . "union\n"

    . "select * from harta_modal_printer where Siri Pembuat like \'$q%\'\n"

    . "union\n"

    . "select * from harta_moda_notebook where Siri Pembuat like \'$q%\'\n"

. "union\n"

."select * from harta_moda_rangkaian where Siri Pembuat like \'$q%\'\ LIMIT 0, 30 ";

 

$result=mysql_query($sql);

 

 

print "<table border='1'>

<tr>

<th>Jenama</th>

</tr>";

 

while($row = mysql_fetch_array($result))

  {

  echo "<tr>";

  echo "<td>" . $row['Jenama'] . "</td>";

  echo "</tr>";

  }

echo "</table>";

 

 

 

 

?>

[requinix]

If "Siri Pembuat" is actually the name of a field then

1. Shame on you for putting spaces in a field name.

2. Quote it with backticks.

 

And you're vulnerable to SQL injection. Fix it:

$qsafe = mysql_real_escape_string($q);

"select ... like \'$qsafe\'\n"

[kiplo]

okay tq

[kiplo]

btw i was confused with the use of mysql_real_escape_string() =.='