SQL选择用户并根据经度纬度过滤距离

Question

I have written the following function which searches users based on a search query:

        public function search_quick($query) {
        global $db, $system;
        $results = array();

        $person = $db->query(sprintf("SELECT * FROM users WHERE user_id = %s AND user_token = %s", secure($_COOKIE[$this->_cookie_user_id], 'int'), secure($_COOKIE[$this->_cookie_user_token]) )) or _error(SQL_ERROR_THROWEN);
            if($person->num_rows > 0) {
                $this->_data = $person->fetch_assoc();
            }

        $user_id = $this->_data['user_id'];
        $latitude = $this->_data['latitude'];
        $longitude = $this->_data['longitude']; 
        $user_gender = $this->_data['user_gender'];
        $user_sex = $this->_data['user_sex'];
        $sexual_preference = $this->_data['sexual_preference'];
        $sexual_orientation = $this->_data['sexual_orientation'];
        $age_range = explode(',',$this->_data['age_range']);
        $distance_range = explode(',',$this->_data['distance_range']);


        $people = $db->query(sprintf('SELECT * FROM users WHERE user_fullname LIKE %1$s LIMIT %2$s', secure($query, 'search'), secure($system['min_results'], 'int', false) )) or _error(SQL_ERROR_THROWEN);

    $get_users = $db->query(sprintf('
    SELECT *,
    3956 * 2 * ASIN(SQRT( POWER(SIN((%s - latitude) * pi()/180 / 2), 2) + COS(%s * pi()/180) * COS(latitude * pi()/180) *
    POWER(SIN((%s - longitude) * pi()/180 / 2), 2) )) as
    distance FROM %s
    HAVING distance >= %s AND distance <= %s AND user_id != %s AND user_gender = %s AND user_sex = %s AND age >= %s AND age <= %s', $latitude, $longitude, $longitude, $people, $distance_range[0], $distance_range[1], $user_id, $sexual_preference, $sexual_orientation, $age_range[0], $age_range[1] )) or _error(SQL_ERROR_THROWEN);

        if($get_users->num_rows > 0) {
            while($user = $get_users->fetch_assoc()) {
                $user['user_picture'] = $this->get_picture($user['user_picture'], $user['user_gender']);
                /* get the connection between the viewer & the target */
                $user['connection'] = $this->connection($user['user_id']);
                $user['sort'] = $user['user_fullname'];
                $user['type'] = 'user';
                $results[] = $user;
            }
        }
}

What I'm trying is to have it find the users first based on their user name ($people) and after that, have those users filtered based on distance, gender, age, orientation, etc. ($get_users). Currently it keeps giving a loop (it keeps loading but no results are appearing). If only use the $people SQL query by commenting out $get_users and changing $people into $get_users, it does load results. I have already checked for misspellings in the database (MyISAM). Is there a mistake in my code or have i missed something?

I would like to thank everybody who is helping out in any way beforehand.

Answer 1

To awnser my own question so i can help someone in the future... First of all i didn't place the variables inside a secure() function. Second of all, I adjusted the SQL query so I only need 1. Underneath you will find the right working code.

    public function search_quick($query) {
    global $db, $system;
    $results = array();

    $person = $db->query(sprintf("SELECT * FROM users WHERE user_id = %s AND user_token = %s", secure($_COOKIE[$this->_cookie_user_id], 'int'), secure($_COOKIE[$this->_cookie_user_token]) )) or _error(SQL_ERROR_THROWEN);
        if($person->num_rows > 0) {
            $this->_data = $person->fetch_assoc();
        }

    $user_id = $this->_data['user_id'];
    $latitude = $this->_data['latitude'];
    $longitude = $this->_data['longitude']; 
    $user_gender = $this->_data['user_gender'];
    $user_sex = $this->_data['user_sex'];
    $sexual_preference = $this->_data['sexual_preference'];
    $sexual_orientation = $this->_data['sexual_orientation'];
    $age_range = explode(',',$this->_data['age_range']);
    $distance_range = explode(',',$this->_data['distance_range']);

    $get_users = $db->query(sprintf('SELECT *,
3956 * 2 * ASIN(SQRT( POWER(SIN((%s - latitude) * pi()/180 / 2), 2) + COS(%s * pi()/180) * COS(latitude * pi()/180) *
POWER(SIN((%s - longitude) * pi()/180 / 2), 2) )) as
distance FROM users
HAVING distance >= %s AND distance <= %s AND user_fullname LIKE %s AND user_id != %s AND user_gender = %s AND user_sex = %s AND age >= %s AND age <= %s LIMIT %s', secure($latitude), secure($longitude), secure($longitude), secure($distance_range[0]), secure($distance_range[1]), secure($query, 'search'), secure($user_id), secure($sexual_preference), secure($sexual_orientation), secure($age_range[0]), secure($age_range[1]), secure($system['min_results'], 'int', false) )) or _error(SQL_ERROR_THROWEN);

    if($get_users->num_rows > 0) {
        while($user = $get_users->fetch_assoc()) {
            $user['user_picture'] = $this->get_picture($user['user_picture'], $user['user_gender']);
            /* get the connection between the viewer & the target */
            $user['connection'] = $this->connection($user['user_id']);
            $user['sort'] = $user['user_fullname'];
            $user['type'] = 'user';
            $results[] = $user;
        }
    }

}