prepare($parsql); $durr->bind_param("sii", $cim, $tip, $ar); if ($durr->execute()==true){ echo 'sikeres feltöltés'; } } if (isset($_POST["szures"])) { $felt = $_POST["szures"]; $sql = "Select cim,jegyar FROM film WHERE cim like '%".$felt."%' order by cim"; $result = $conn->query($sql); //paraméteres sql lekérdezés $felt = "'%.$felt.%'"; $sqlparam = $conn->prepare("Select cim,jegyar FROM film WHERE cim like ? order by cim"); $sqlparam->bind_param("s", $felt); $sqlparam->execute(); $result = $sqlparam->get_result(); if ($result->num_rows>0) { $i = 1; echo ""; while ($row = $result->fetch_object()) { echo ""; } echo "
Ssz. Cím Ár
".$i++." ".$row->cim." ".$row->jegyar."
"; } else { echo "Nincs adat"; } } require_once("html.php"); $conn->close(); ?>