diff --git a/public/page/search.php b/public/page/search.php index 3734a59..99e36a5 100644 --- a/public/page/search.php +++ b/public/page/search.php @@ -8,16 +8,22 @@ $results = []; if ($q !== '' && $pdo) { $like = '%' . $q . '%'; - $stmt = $pdo->prepare( - 'SELECT id, title, teaser_public, description, city, region, starts_at, visibility, allow_kids, location_label - FROM events - WHERE starts_at >= NOW() - AND status != "cancelled" - AND (title LIKE :q OR teaser_public LIKE :q OR description LIKE :q OR city LIKE :q OR region LIKE :q OR zip LIKE :q) - ORDER BY starts_at ASC - LIMIT 100' - ); - $stmt->execute(['q' => $like]); + $sql = 'SELECT id, title, teaser_public, description, city, region, starts_at, visibility, allow_kids, location_label + FROM events + WHERE starts_at >= NOW() + AND status != "cancelled" + AND (title LIKE :q1 OR teaser_public LIKE :q2 OR description LIKE :q3 OR city LIKE :q4 OR region LIKE :q5 OR zip LIKE :q6) + ORDER BY starts_at ASC + LIMIT 100'; + $stmt = $pdo->prepare($sql); + $stmt->execute([ + ':q1' => $like, + ':q2' => $like, + ':q3' => $like, + ':q4' => $like, + ':q5' => $like, + ':q6' => $like, + ]); $results = $stmt->fetchAll(PDO::FETCH_ASSOC) ?: []; } ?>