action="<?=$_SERVER['PHP_SELF'];?>"

action=""

value="<?php if (!empty($_GET["search"])){  //check the existence of a global variable, else - is empty
							    echo htmlspecialchars($_GET["search"]);
							    }else {echo "";}?>">

header("Location: ".$_SERVER['PHP_SELF']);

header("Location: ".$_SERVER['PHP_SELF']);

<?php
error_reporting (E_ALL);

define ("DB_HOST", "localhost");
define ("DB_LOGIN", "root");
define ("DB_PASSWORD", "");
define ("DB_NAME", "names");

//connect to server
mysql_connect (DB_HOST, DB_LOGIN, DB_PASSWORD)
               or die ("Error when connecting to server: " .mysql_error());
//select "names"
mysql_select_db (DB_NAME)
                or die ("Error when selecting database {DB_NAME}: " .mysql_error());
//////////////////////////////////////////////////////////////////////////////////////////////////// ///////

// rewrite global varieble without magic_quotes_gpc
if (get_magic_quotes_gpc()) {
    function stripslashes_gpc(&$value)
    {
        $value = stripslashes($value);
    }
    array_walk_recursive($_GET, 'stripslashes_gpc');
    array_walk_recursive($_POST, 'stripslashes_gpc');
}


// function for processing the data
function Data ($data, $type = "s") {
	switch($type)
	{
		case "s":
				return mysql_real_escape_string($data);	// returns string with escapes following characters: \x00, \n, \r, \, ', ", \x1a
		case "i":
				return (int)$data;						// returns type integer
		case "h":
				return htmlspecialchars($data);			// convert special characters to HTML entities
	}
}

// receives data and put them in the database
if (!empty($_POST["name"])){
	$name = Data ($_POST["name"]);
	
	mysql_query("INSERT INTO names(name) VALUES('$name')")
                    or die("Error for DB: ".mysql_error());

	header("Location: ".$_SERVER['PHP_SELF']);
	exit;
}

// make select all names
$row = mysql_query("SELECT id,name FROM names ORDER BY id DESC")
                   or die(mysql_error());

// receiving and processing data from the search field
if(!empty($_GET["search"])){
	$search = Data($_GET["search"]);
	
	$found_names = mysql_query("SELECT name FROM names WHERE name LIKE '%". addcslashes($search, "%,_") ."%'")
                                   or die ("Bug in search: ".mysql_error());
}

// receiving and processing data from global variable $_GET["id"] to display the date of registration
if(!empty($_GET["id"])){
	$id = Data($_GET["id"], "i");
	if($id>0)
	{
		$id_date = mysql_query("SELECT date,name FROM names WHERE id = $id")
                                       or die(mysql_error());

		$id_date = mysql_fetch_assoc($id_date);
	}
}

//close connection
mysql_close();
?>

<form action="<?=$_SERVER['PHP_SELF'];?>" method="POST">
	Registration:<br>
	<input type="text" name="name"><br>
	<input type="submit" value="Register"><br>
</form>
		
<form action="<?=$_SERVER['PHP_SELF'];?>" method="GET">
	Searching:<br>
	<input type="text" name="search" value="<?=isset($_GET["search"]) ?$_GET["search"] :NULL?>">
	<br>
	<input type="submit" value="Search"><br>
</form>


<?php
///////////////////OUTPUT///////////////////////////////////////
echo "<p>Total registered: ". mysql_num_rows($row) ." users</p>\n";

// output line date of registration
if(!empty($id_date)){
	echo "<p>User <b>". Data($id_date["name"], "h") ."</b> registered: {$id_date["date"]}"."</p>\n";
}

// output the number of records found
if(!empty($found_names)){
	echo "<p>Found similar records: ". mysql_num_rows($found_names) ."</p>\n";
}

// output the names found
if(!empty($found_names)){
	$match = array();
	?><ul><?php
		while($match = mysql_fetch_assoc($found_names))
		{
			echo "\n\t<li>". Data($match["name"], "h") ."</li>\n";
		}
	?></ul><?php
}

// output all names in cycle
$user = array();
while($user = mysql_fetch_assoc($row)){
	echo "\n<hr> User: <a href='". $_SERVER['PHP_SELF'] ."?id=". $user["id"] ."'>". Data($user["name"], "h") ."</a><br>\n";
}
?>

<?php
error_reporting (E_ALL);

define ("DB_HOST", "localhost");
define ("DB_LOGIN", "root");
define ("DB_PASSWORD", "");
define ("DB_NAME", "names");

//connect to server
mysql_connect (DB_HOST, DB_LOGIN, DB_PASSWORD)
              or die ("Error when connecting to server: " .mysql_error());
//select "names"
mysql_select_db (DB_NAME)
                 or die ("Error when selecting database {DB_NAME}: " .mysql_error());
////////////////////////////////////////////////////////////////////////////////////////////////////  ///////

// rewrite global varieble without magic_quotes_gpc
if (get_magic_quotes_gpc()) {
    function stripslashes_gpc(&$value)
    {
        $value = stripslashes($value);
    }
    array_walk_recursive($_GET, 'stripslashes_gpc');
    array_walk_recursive($_POST, 'stripslashes_gpc');
}


// function for processing the data
function processingData ($data, $type = "s") {
	switch($type)
	{
		case "s":
				return mysql_real_escape_string($data);	// returns string with escapes following characters: \x00, \n, \r, \, ', ", \x1a
		case "i":
				return (int)$data;                       // returns type integer
		case "h":
				return htmlspecialchars($data);          // convert special characters to HTML entities
	}
}

// receives data and put them in the database
if (!empty($_POST["name"])){
	$name = processingData ($_POST["name"]);
	
	mysql_query("INSERT INTO names(name) VALUES('$name')")
                    or die("Error for DB: ".mysql_error());

	header("Location: ".$_SERVER['PHP_SELF']);
	exit;
}

// make select all names
$row = mysql_query("SELECT id,name FROM names ORDER BY id DESC")
                    or die(mysql_error());

// receiving and processing data from the search field
if(!empty($_GET["search"])){
	$search = processingData($_GET["search"]);
	
	$found_names = mysql_query("SELECT name FROM names WHERE name LIKE '%". addcslashes($search, "%_'\\") ."%'")
                                    or die ("Bug in search: ".mysql_error());
}

// receiving and processing data from global variable $_GET["id"] to display the date of registration
if(!empty($_GET["id"])){
	$id = processingData($_GET["id"], "i");
	if($id>0)
	{
		$id_date = mysql_query("SELECT date,name FROM names WHERE id = $id")
                                        or die(mysql_error());

		$id_date = mysql_fetch_assoc($id_date);
	}
}

//close connection
mysql_close();
?>

<form action="<?=$_SERVER['PHP_SELF'];?>" method="POST">
	Registration:<br>
	<input type="text" name="name"><br>
	<input type="submit" value="Register"><br>
</form>
		
<form action="<?=$_SERVER['PHP_SELF'];?>" method="GET">
	Searching:<br>
	<input type="text" name="search" value="<?=isset($_GET["search"]) ?$_GET["search"] :NULL?>">
	<br>
	<input type="submit" value="Search"><br>
</form>


<?php
///////////////////OUTPUT///////////////////////////////////////
echo "<p>Total registered: ". mysql_num_rows($row) ." users</p>\n";

// output line date of registration
if(!empty($id_date)){
	echo "<p>User <b>". processingData($id_date["name"], "h") ."</b> registered: {$id_date["date"]}"."</p>\n";
}

// output the number of records found
if(!empty($found_names)){
	echo "<p>Found similar records: ". mysql_num_rows($found_names) ."</p>\n";
}

// output the names found
if(!empty($found_names)){
	$match = array();
	?><ul><?php
		while($match = mysql_fetch_assoc($found_names))
		{
			echo "\n\t<li>". processingData($match["name"], "h") ."</li>\n";
		}
	?></ul><?php
}

// output all names in cycle
$user = array();
while($user = mysql_fetch_assoc($row)){
	echo "\n<hr> User: <a href='". $_SERVER['PHP_SELF'] ."?id=". $user["id"] ."'>". processingData($user["name"], "h") ."</a><br>\n";
}
?>