<?php
include("admin/includes/config.php");

if(isset($_POST['searchQuery'])){
    $searchQuery = "%{$_POST['searchQuery']}%";

    // Secure database query using prepared statements
    $stmt = $conn->prepare("SELECT * FROM blogs WHERE title LIKE ? OR lo_dec LIKE ?");
    $stmt->bind_param("ss", $searchQuery, $searchQuery);
    $stmt->execute();
    $result = $stmt->get_result();

    if($result->num_rows > 0){
        while($row = $result->fetch_assoc()){
            echo "<div class='search-result-item'>";
            echo "<h3><a href='blogdtls.php?id=".$row['id']."'>".$row['title']."</a></h3>";
            echo "<p>".substr($row['lo_dec'], 0, 100)."...</p>"; // Show a snippet
            echo "</div>";
        }
    } else {
        echo "<p>No results found.</p>";
    }

    $stmt->close();
}
?>