search.php

<?php 
	# IF page is accessed not via post, redirect and kill the script
	if(!$_POST){
		header('Location: index.php');
		die();
	}
	require_once("core/init.php");
	include("includes/head.php"); 
	include("includes/navigation.php");
	include("includes/headerpartial.php");
	include("includes/leftbar.php");

	$sql = "SELECT * FROM products";
	$cat_id = (($_POST['cat'] != '')?sanitize($_POST['cat']):'');
	if($cat_id == ''){
		$sql .= " WHERE archived = 0";
	} else {
		$sql .= " WHERE categories = '$cat_id' AND archived = 0";
	}
	$price_sort = (($_POST['price_sort'] != '')?sanitize($_POST['price_sort']):'');
	$min_price = (($_POST['min_price'] != '')?sanitize($_POST['min_price']):'');
	$max_price = (($_POST['max_price'] != '')?sanitize($_POST['max_price']):'');
	$brand = (($_POST['brand'] != '')?sanitize($_POST['brand']):'');
	if($min_price != ''){
		$sql .= " AND price >= '$min_price'";
	}
	if($max_price != ''){
		$sql .= " AND price <= '$max_price'";
	}
	if($brand != ''){
		$sql .= " AND brand = '$brand'";
	}
	if($price_sort == 'low'){
		$sql .= " ORDER BY price";
	}
	if($price_sort == 'high'){
		$sql .= " ORDER BY price DESC";
	} 
	$productQ = $db->query($sql);
	$category = get_category($cat_id);
?>

		<!--Main Content-->
		<div class="col-md-8">
			<div class="row">
				<?php if($cat_id != ''): ?>
					<h2 class="text-center"><?=$category['parent'].' '.$category['child'];?> - Search Results</h2>
				<?php else: ?>
					<h2 class="text-center">Search Results</h2>
				<?php endif; ?>
				<?php while($product = mysqli_fetch_assoc($productQ)) : ?>
				<div class="col-md-3 text-center">
					<h4><?= $product['title']; ?></h4>
					<?php $photos = explode(',',$product['image']); ?>
					<img src="<?= $photos[0]; ?>" alt="<?= $product['title']; ?>" class="img-thumb"/>
					<p class="list-price text-danger">List Price: <s>£<?= $product['list_price']; ?></s></p>
					<p class="price">Our Price: £<?= $product['price']; ?></p>
					<button type="button" class="btn btn-sm btn-success" onclick="detailsmodal(<?=$product['id'];?>)">Details</button>
				</div>
				<?php endwhile; ?>
			</div>
		</div>

<?php
	include("includes/rightbar.php");
	include("includes/footer.php");
?>