looking for something like SQL LIKE Operator - php

Question

i am looking for same code to search things in my table colmon.
i dont want its search something "like" the input search.
i want it to search the exactly Value in the table.
if user search "the walking dead season 3 episode 1"
its search exactly "the walking dead season 3 episode 1" in the "moviename" row..
and dont show me the all results look like thats..
my code now is :
<?php
function connect($host,$username,$database,$password){
$to_connect = mysql_connect($host,$username,$password) or die ("UNFinded ".$username. " DB !");
$db = mysql_select_db($database, $to_connect) or die (mysql_error());
return $db;
}
connect("localhost","idevice2_ariel","idevice2_ariel","ariel123456");
if (!isset($_POST['submit_form'])) {
echo '<form name="search_form1" method="POST" action="search.php">
<input type="text" name="search_name" value="search movie name" />
<input type="submit" value="Submit" name="submit_form" />
</form>';
} else {
$search_name = $_POST['search_name'];
$query = mysql_query ("SELECT * FROM members where `moviename` = $search_name");
$count = mysql_num_rows($query);
while($row = mysql_fetch_array($query)) {
$fname = $row['moviename'];
$lname = $row['links'];
print ''.$row['moviename'].'<br />';
}
}
?>
thanks you! ariel.

Answer 1

if (!isset($_POST['submit_form'])) {
echo '<form name="search_form1" method="POST" action="search.php">
<input type="text" name="search_name" value="search movie name" />
<input type="submit" value="Submit" name="submit_form" />
</form>';
} else {
$mysqli = new mysqli('localhost', 'my_user', 'my_password', 'world');
$search_name = $_POST['search_name'];
$query = $mysqli->prepare("Select * from members where moviename = ? OR links = ?");
$query->bindParam('ss',$search_name,$search_name);
$query->execute();
$query->bind_result($link,$movieName);
while($query->fetch()) {
echo ''.$movieName.'<br />';
}
$query->close();
}
?>
Consider using prepared statements.