Interessenten"; if (in_array("Eigene_Interessenten", $_SESSION['Rechte'])) { $in_abfrage = "WHERE TID = \"".$_SESSION['TID']."\" "; } if ("Suchen..." == $_POST['action']) { if ("" == $in_abfrage) { if (("" == $_POST['Nachname']) AND ("" == $_POST['Telefon'])) { } elseif (("" !== $_POST['Nachname']) AND ("" !== $_POST['Telefon'])) { $in_abfrage = "WHERE Nachname = \"".$_POST['Nachname']."\" AND Telefon LIKE \"%".$_POST['Telefon']."%\" "; } elseif ("" == $_POST['Nachname']) { $in_abfrage = "WHERE Telefon LIKE \"%".$_POST['Telefon']."%\" "; } else { $in_abfrage = "WHERE Nachname = \"".$_POST['Nachname']."\" "; } } else { if (("" == $_POST['Nachname']) AND ("" == $_POST['Telefon'])) { } elseif (("" !== $_POST['Nachname']) AND ("" !== $_POST['Telefon'])) { $in_abfrage .= "AND Nachname = \"".$_POST['Nachname']."\" AND Telefon LIKE \"%".$_POST['Telefon']."%\" "; } elseif ("" == $_POST['Nachname']) { $in_abfrage .= "AND Telefon LIKE \"%".$_POST['Telefon']."%\" "; } else { $in_abfrage .= "AND Nachname = \"".$_POST['Nachname']."\" "; } } } $sql = "SELECT ID, Vorname, Nachname FROM inter ".$in_abfrage." ORDER BY Nachname ASC"; $result = $db->query($sql); ?>