Dera2

<?php$host = "localhost";$dbuser = "dera";$dbpass = "dera888";mysql_connect($host,$dbuser,$dbpass);mysql_select_db("thoutqdb");$search = $_POST['search'];function search($search){    $result = mysql_query("SELECT * FROM quests WHERE title LIKE '%$search%' ORDER BY title ASC");    print "<dataSet>\n";    while($row = mysql_fetch_array($result)){        print "<search>\n";        print "<questname>".$row['title']."</questname>\n";		$solution = str_replace("<BR>","\n",$row['solution']);		$solution2 = str_replace("<","&lt;",$solution);		$solution3 = str_replace(">","&gt;",$solution2);		print "<Solution>".$solution3."</Solution>\n";        print "<Submited>".$row['author']."</Submited>\n";            print "<Reward>".$row['reward']."</Reward>\n";        print "</search>\n";    }    print "</dataSet>\n";}search($search);?>