help please, unable to search 2 words together

[lovephp]

friends in my db table say like customerName holds First and the Last name but in my search if i enter the first name then record shows but if i try to search by entering both First and the Last name in the textbox i do not get any results why?

 

here the query

 
    $srcquery = $_REQUEST['srcquery'];
 
 $query = "SELECT COUNT(*) as num FROM $tableName WHERE customerName LIKE '%".$srcquery."%' OR homePhone LIKE '%".$srcquery."%' OR comments LIKE '%".$srcquery."%' AND  agent = '".$logged."' ORDER BY id DESC";
 

[.josh]

not a sql expert but here's one way to do it...

 

$srcquery = str_replace(" ","|",$_REQUEST['srcquery']);
 
$query = "SELECT COUNT(*) as num FROM $tableName WHERE customerName REGEXP '".$srcquery."' OR homePhone REGEXP '".$srcquery."' OR comments REGEXP '".$srcquery."' AND  agent = '".$logged."' ORDER BY id DESC";

one thing to note here though is you really should look into sanitizing user input before using it in a query. Google sql injection.

[lovephp]

or say this query

 

 

SELECT * FROM $tableName WHERE customerName LIKE '%".$srcquery."%' OR homePhone LIKE '%".$srcquery."%' OR comments LIKE '%".$srcquery."%' ORDER BY id DESC

 

i enter

 

peter i get result

 

i enter

 

peter smith

 

nothing show

 

i enter smith then result shows again.

[lovephp]

not a sql expert but here's one way to do it...

 

$srcquery = str_replace(" ","|",$_REQUEST['srcquery']);
 
$query = "SELECT COUNT(*) as num FROM $tableName WHERE customerName REGEXP '".$srcquery."' OR homePhone REGEXP "'.$srcquery."' OR comments REGEXP '".$srcquery."' AND  agent = '".$logged."' ORDER BY id DESC";

one thing to note here though is you really should look into sanitizing user input before using it in a query. Google sql injection.

 

thanks bro and yes i do use escape strings but just to show here i removed it all to make it simple. ill give it a try with what you gave me hope it sorts my problem. i have never made a search script before so im clueless

[.josh]

check my posted code again, the one you quoted in your post has one of the single/double quotes wrong

[lovephp]

it did not work out brother, no result shows. any help?

[Psycho]

What is the EXACT value of the name field in the database that you think "peter smith" should match?