PHP从MySQL搜索匹配firstname和lastname后，如何展示全部字段？

Hey there! Let's get your search script displaying all four fields (Firstname, Lastname, Birthday, Reason) instead of just a generic "Found" message. I'll use Python with SQLite as an example (the core logic works for other languages/databases too—just adjust the syntax a bit).

First, let's look at what your original code might resemble #

Chances are you're running a query that only checks if a record exists, like this:

import sqlite3

conn = sqlite3.connect('your_database.db')
cursor = conn.cursor()

# Get user input
search_first = input("Enter first name: ")
search_last = input("Enter last name: ")

# Only check for existence
cursor.execute("SELECT EXISTS(SELECT 1 FROM your_table WHERE firstname = ? AND lastname = ?)", 
               (search_first, search_last))
result = cursor.fetchone()

if result[0]:
    print("Found")
else:
    print("Not found")

conn.close()

The Fix: Fetch and Display All Fields #

Instead of checking for existence, we'll modify the query to retrieve all four fields, then loop through the results to print each detail:

import sqlite3

conn = sqlite3.connect('your_database.db')
cursor = conn.cursor()

search_first = input("Enter first name: ")
search_last = input("Enter last name: ")

# Query to get all four fields (explicit column names are safer than SELECT *)
cursor.execute("SELECT firstname, lastname, birthday, reason FROM your_table WHERE firstname = ? AND lastname = ?", 
               (search_first, search_last))
matching_records = cursor.fetchall()

if matching_records:
    print("Matching records found:")
    # Loop through each record and print every field
    for record in matching_records:
        print(f"First Name: {record[0]}")
        print(f"Last Name: {record[1]}")
        print(f"Birthday: {record[2]}")
        print(f"Reason: {record[3]}")
        print("---")  # Add a separator between records
else:
    print("No matching records found.")

conn.close()

Key Changes to Note #

• Updated Query: Replaced SELECT EXISTS(...) with a query that explicitly selects the four fields you need. Using explicit column names is better practice than SELECT * because it avoids unexpected columns and makes your code clearer.
• Fetch All Results: Used fetchall() to get all matching rows (in case multiple records have the same first/last name).
• Loop Through Results: Iterated over each record to print every field's value instead of just a "Found" message.

Example for PHP (If That's Your Stack) #

If you're using PHP with MySQL, the logic is identical—just adjust the syntax:

<?php
$servername = "localhost";
$username = "your_db_user";
$password = "your_db_pass";
$dbname = "your_database";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);

// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Get user input (always sanitize user input to prevent SQL injection!)
$search_first = $_POST['firstname'];
$search_last = $_POST['lastname'];

// Use prepared statements to avoid SQL injection
$stmt = $conn->prepare("SELECT firstname, lastname, birthday, reason FROM your_table WHERE firstname = ? AND lastname = ?");
$stmt->bind_param("ss", $search_first, $search_last);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows > 0) {
    echo "Matching records found:<br>";
    while($row = $result->fetch_assoc()) {
        echo "First Name: " . $row["firstname"] . "<br>";
        echo "Last Name: " . $row["lastname"] . "<br>";
        echo "Birthday: " . $row["birthday"] . "<br>";
        echo "Reason: " . $row["reason"] . "<br>";
        echo "---<br>";
    }
} else {
    echo "No matching records found.";
}

$stmt->close();
$conn->close();
?>

Critical Security Note #

Always use prepared statements (like the examples above) instead of directly inserting user input into your SQL queries. This prevents SQL injection attacks, which are a major security risk.

内容的提问来源于stack exchange，提问作者Jerome