From b99239ca6613c0a718a04e93b08f1e034ad63136 Mon Sep 17 00:00:00 2001
From: Lars Gebhardt-Kusche <lars@kusche.berlin>
Date: Mon, 29 Dec 2025 01:51:58 +0100
Subject: [PATCH] asdasd

---
 public/page/search.php | 26 ++++++++++++++++----------
 1 file changed, 16 insertions(+), 10 deletions(-)

diff --git a/public/page/search.php b/public/page/search.php
index 3734a59..99e36a5 100644
--- a/public/page/search.php
+++ b/public/page/search.php
@@ -8,16 +8,22 @@ $results = [];
 
 if ($q !== '' && $pdo) {
     $like = '%' . $q . '%';
-    $stmt = $pdo->prepare(
-        'SELECT id, title, teaser_public, description, city, region, starts_at, visibility, allow_kids, location_label
-         FROM events
-         WHERE starts_at >= NOW()
-           AND status != "cancelled"
-           AND (title LIKE :q OR teaser_public LIKE :q OR description LIKE :q OR city LIKE :q OR region LIKE :q OR zip LIKE :q)
-         ORDER BY starts_at ASC
-         LIMIT 100'
-    );
-    $stmt->execute(['q' => $like]);
+    $sql = 'SELECT id, title, teaser_public, description, city, region, starts_at, visibility, allow_kids, location_label
+            FROM events
+            WHERE starts_at >= NOW()
+              AND status != "cancelled"
+              AND (title LIKE :q1 OR teaser_public LIKE :q2 OR description LIKE :q3 OR city LIKE :q4 OR region LIKE :q5 OR zip LIKE :q6)
+            ORDER BY starts_at ASC
+            LIMIT 100';
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute([
+        ':q1' => $like,
+        ':q2' => $like,
+        ':q3' => $like,
+        ':q4' => $like,
+        ':q5' => $like,
+        ':q6' => $like,
+    ]);
     $results = $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
 }
 ?>