<?php
  include("database.php");

  $search = "";
  $query = "SELECT * FROM items";

  if (isset($_GET["mysearch"])) {
    $search = trim($_GET["mysearch"]);
    if (!empty($search)) {
      $cleansearch = mysqli_real_escape_string($connection, $search);
      $query = "SELECT * FROM items WHERE name LIKE '%".$cleansearch."%';";
    }
  }
  $result = mysqli_query($connection, $query);
?>
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Products</title>
  <style>
    div, section {
      padding: 5px 0px;
    }
  </style>
</head>
<body>
  <section>
    <form name="myform" method="get" action="index.php">
      <input type="text" name="mysearch" value="<?=htmlspecialchars($search)?>">
      <input type="submit" name="submit">
    </form>
  </section>
  <section>
    <?php
      foreach($result as $item) {
        echo "<div>";
        echo "<a href=\"details.php?id=".$item["id"]."\">".$item["name"]." ".$item["price"]."</a>";
        echo "</div>";
      }
    ?>
  </section>
</body>
</html>