<?php
$db_host = "localhost";
$db_name = "DB_name";
$db_username = "DB_username";
$db_password = "DB_pass";
@mysql_connect("{$db_host}", "{$db_username}", "{$db_password}") or die("Could not connect");
@mysql_select_db("{$db_name}") or die("Could not select database");
print <<<EOF
<form method="post" action="?act=do">
Tìm kiếm: <input type="text" name="keyword" value="{$_POST['keyword']}"> <input type="submit" name="submit" value="Submit">
</form>
EOF;
if ( $_GET["act"] == "do" )
{
$keyword = addslashes ( htmlspecialchars ( $_POST["keyword"] ) );

$sql_query = @mysql_query ("SELECT * FROM members WHERE name LIKE '%{$keyword}%'");

if ( @mysql_num_rows ( $sql_query ) > 0 )
{
print "<hr />";

while ( $result = @mysql_fetch_array ( $sql_query ) )
{

print "+ {$result['name']}<br />";

}
}
}
?>