IF statement in mysql request

 $query = "SELECT * FROM items WHERE brand IN ('" . implode("','", $brand) . "') "; if(!empty($color)){ $query .= "AND color IN ('" . implode("','", $color) . "')"; } if(!empty($style)){ $query .= "AND style IN ('" . implode("','", $style) . "')"; } ." "; $query .= ';'; 

1. And did not try to remove AND color IN in brackets? And further in the text.
2. The construction as a whole is strange. This is not a screen output, but a concatenation.
3. Generating dynamic queries this way is very bad

code

 $db = mew mysqli(данные для коннекта); $brandWhere = 'brand IN ('.str_pad('',count($brand)*2-1,'?,').')'; $colorWhere = empty($color))?'':' AND color IN ('.str_pad('',count($color)*2-1,'?,').')'; $styleWhere = empty($style))?'':' AND style IN ('.str_pad('',count($style)*2-1,'?,').')'; $bind = str_pad('',count($brand)+count($color)+count(style),'s'); $stmt = $db->prepare("SELECT * FROM items WHERE ".$brandWhere.$colorWhere.$styleWhere;) $params = [$bind]; foreach($brand as &$e) $params[] = &$e; foreach($color as &$e) $params[] = &$e; foreach($style as &$e) $params[] = &$e; call_user_func_array([$stmt,'bind_param'], $params); $stmt->execute(); 

If I understand correctly, you need to add sample terms. You have two solutions:

1) Select data from the database, and then in php (can be any other language) perform a comparison. For example, in php, check that you received data from byzy: is_null () . And then already if, else, elseif or case ... See for yourself what will be more convenient for you to use.

2) Select data, and compare them in the DBMS . For example: SELECT IF (brand > 'ваше значение', brand, NULL) FROM items;

Can so

 class DbHelper { public static function attachBatchParams(&$query, &$binds, $placeholder, $values) { $placeholders = array(); foreach ($values as $key => $value) { $parameter = "{$placeholder}_{$key}"; $binds[$parameter] = $value; $placeholders[] = $parameter; } $query = str_replace($placeholder, implode(', ', $placeholders), $query); } } $binds = array(); $query = " SELECT * FROM items WHERE 1 "; if ($brands) { $query .= "AND brand IN (:brands) "; DbHelper::attachBatchParams($query, $binds, ':brands', $brands); } if ($colors) { $query .= "AND color IN (:colors) "; DbHelper::attachBatchParams($query, $binds, ':colors', $colors); } if ($styles) { $query .= "AND style IN (:styles) "; DbHelper::attachBatchParams($query, $binds, ':styles', $styles); } 

Such code is easier to read, Plus, at the output, get a query with ready placeholders and an array of parameters that need to be attached via bindParam

PDO http://php.net/manual/en/pdostatement.bindparam.php

MySQLi http://php.net/manual/en/mysqli-stmt.bind-param.php

This will make your code more secure.

- UPDATED -

I think the author would be able to find it using the links from the documentation I indicated, but added half a page of code for rjhdby

 $db = new \PDO('mysql:host=127.0.0.1;dbname=test', 'root', ''); //Код указанный выше $sth = $db->prepare($query); foreach ($binds as $placeholder => $value) { $sth->bindParam($placeholder, $value); } $sth->execute();