通过html找php代码,从HTML表单中搜索PHP代码

几分钟前，我在这里提出了一个关于已排序的语法错误的问题。我需要获得帮助才能使这个脚本工作，或者至少让某人指向正确的方向。

这是一个搜索脚本，可通过多个字段进行搜索。 search()数组可以正常工作，并且是一系列带有以下代码的复选框：

邮编框是一个带有以下代码的文本框：当我在olevel框中打勾时，它将返回olevel字段中包含“是”的所有记录。这符合我的预期。

如果我在邮编中输入任何内容，它将不会返回任何结果。

这里是搜索引擎的php代码。

include ('c1.php');

if ($_COOKIE["auth"] == "1") {

$display_block = "

You are an authorized user.

";

} else {

header("Location: userlogin.html");

exit;

}

doDB();

$display_block = "

Results

";

if (isset($_POST['search']) && !empty($_POST['search'])) {

foreach ($_POST['search'] as $key => $value) {

if ($value == 1)

$search[] = "$key";

$searchstring = implode(' AND ', $search);

$post_map = array(

'postcode' => 'candididate_contact_details.postcode'

);

}

if (isset($_POST['postcode']) && !empty($_POST['postcode'])) {

foreach ($_POST['postcode'] as $key => $value) {

if (array_key_exists($key, $post_map))

$search[] = $post_map[$key] . '=' . mysql_real_escape_string($value);

echo $searchstring;

echo $search;

$query = "SELECT candidate_id.master_id, candidate_contact_details.first_name, candidate_contact_details.last_name, candidate_contact_details.home_phone, candidate_contact_details.work_phone, candidate_contact_details.mobile_phone, candidate_contact_details.email FROM candidate_id, candidate_contact_details, qualifications, security_experience, previous_career WHERE qualifications.active = 'finished' and candidate_id.master_id = candidate_contact_details.master_id and candidate_id.master_id = qualifications.master_id and candidate_id.master_id = security_experience.master_id and candidate_id.master_id = previous_career.master_id and $searchstring";

$query_res = mysqli_query($mysqli, $query)

or die(mysqli_error($mysqli));

// $search = mysqli_query($mysqli, $query)or die(mysqli_error($mysqli));

{

$display_block .= "

Registration Number	First Name	Last Name	Home Number	Work Number	Mobile Number	E-Mail

while ($result = mysqli_fetch_array($query_res)) {

$regnum = $result['master_id'];

$first_name = $result['first_name'];

$last_name = $result['last_name'];

$home_phone = $result['home_phone'];

$work_phone = $result['work_phone'];

$mobile_phone = $result['mobile_phone'];

$email = $result['email'];

$display_block .= "

$regnum $first_name $last_name $home_phone $work_phone $mobile_phone $email ";

}

$display_block .= "

";

}

}

}

}

?>

Display results

我知道我做错了什么，但不能完全弄明白。提前致谢。