echo a table of links that build and run dynamic sql 1

[knifey]

Hi,
I am very new to php (but not programming) and have just inherited an nhs php website that links to an Access patient db via odbc for patient searching, adding records, etc.
The current setup displays a list of matching patients on screen by table echoing (name, dob, patient number, etc). I would like the patient numbers to be links which will build sql statements with the only variable being the patient number (e.g. SELECT * FROM tbl WHERE tbl.patNum=$patientNumber). So the user can fetch the patients details by clicking the link rather than retyping the patient number each time.
I've seen something similar with url's on this thread:

http://www.daniweb.com/web-developme...threads/111269

Can someone nudge me in the right direction to accomplish the same but with links that build and run sql dynamically when clicked?
Any advice or pointers would be much appreciated.
K

 

[jpadie]

an nhs php website that links to an Access patient db via odbc for patient searching, adding records, etc.

now that explains a lot about the NHS IT projects ...

anyway ...

the easiest way to achieve this is to create a wee function

function getPatientLink($id){
   return 'path/to/patientIDScript.php?patientID=' . urlencode($id);
}

then in your loop that outputs the table do something like this

foreach ($row as odbc_fetch($query)):
    ... table output code ...
    echo "<td><a class='dontunderlineme' href='" . getPatientLink($row['patient_id']) . "' >{$row['patient_lastname']}, {$row['patient_firstname']}</a></td>";
endforeach;

and then a receiving script something like this

//test for authenticated access

// test for presence of ID
if(!isset($_GET['patientID'])) die('must provide valid patient ID');

//test to make sure that the authenticated user is authorised to access this patient record 
/*
do something here
*/

//all authorised and authenticated now
$sql = <<<SQL
SELECT          *
FROM            patient_table
WHERE          `patient_id` = '%s'
SQL;
$query = sprintf($sql, mysql_real_escape_string(trim($_GET['patientID']))); //or use some other appropriate escaping mechanism for access via odbc

 

[knifey]

Hi jpadie,
Ahh sprintf, what a great function. My mind boggles with the uses I could put this to.
Thanks again,
K