Anonymous

<html><head><title>Find me</title></head><body><form action="?" method="post">Name: <input type="text" name="dude" /><input type="submit" name="find" /></form><form action="?" method="post">ID: <input type="text" name="id" /><input type="submit" name="find2" /></body></html><?phpif(isset($_POST['dude']) or isset($_POST['id'])){	    if (isset($_POST['dude']))		{		$dude=addslashes($_POST['dude']);		if(strlen($dude) < 2)		{exit("Please Enter at least 2 Characters");}		$result=mysql_query("SELECT * FROM houses WHERE name LIKE '%".$dude."%'");		}	    elseif (isset($_POST['id']))	    {$id=addslashes($_POST['id']);		$result=mysql_query("SELECT * FROM houses WHERE id = '$id'");		}		$total=mysql_num_rows($result);		if ($total == 0){			exit("No property has been found");		}	    ?><br><table border="1" cellpadding="2" cellspacing="0" rules="none" width="100%"><tr align="center"><td align="center"><b>Properties found (<? echo $total; ?>)</b></td></tr><tr><td><hr></td></tr><tr><td><b>ID</td><td><b>Name</b></td><td><b>Price</b></td></tr><?$l=0;}	while($l < $total){		$a=mysql_result($result, $l, "name");		$b=mysql_result($result, $l, "id");		$c=mysql_result($result, $l, "price");		$l++;		echo "<tr><td><a href=\"houses.php?view=$b\">$b</a></td>";		echo "<td><a href=\"houses.php?view=$b\">$a</a></td>";			echo "<td><a href=\"houses.php?view=$b\">$c</a></tr></td>";	}?></table>