public ActionResult Search(string searchTerm)
{
List customers = new List();
string connectionString = ConfigurationManager.ConnectionStrings["DefaultConnection"].ConnectionString;
using (SqlConnection connection = new SqlConnection(connectionString))
{
connection.Open();
string query = "SELECT * FROM Customers WHERE FirstName LIKE '%' + @searchTerm + '%' OR LastName LIKE '%' + @searchTerm + '%'";
SqlCommand command = new SqlCommand(query, connection);
command.Parameters.AddWithValue("@searchTerm", searchTerm);
SqlDataReader reader = command.ExecuteReader();
while (reader.Read())
{
Customer customer = new Customer();
customer.Id = (int)reader["Id"];
customer.FirstName = reader["FirstName"].ToString();
customer.LastName = reader["LastName"].ToString();
customer.Email = reader["Email"].ToString();
customer.Country = reader["Country"].ToString();
customers.Add(customer);
}
}
return View(customers);
}
@using (Html.BeginForm("Search", "Customer", FormMethod.Get))
{
}
@if (Model.Count > 0)
{
First Name
Last Name
Email
Country
@foreach (Customer customer in Model)
{
@customer.FirstName
@customer.LastName
@customer.Email
@customer.Country
}
}
else
{
No results found.
}
public class Customer
{
public int Id { get; set;