<?php


session_start();


if (isset($_POST['submit'])) {
if (isset($_GET['go'])) {
if (preg_match("^/[A-Za-z]+/", $_POST['name'])) {
$name = $_POST['name'];

$host = "localhost";
$user = "root";
$pass = "";
$db = "";

mysql_connect($host, $user, $pass);
mysql_select_db($db);

$sql = "SELECT * FROM movies WHERE name='$name'";

$result = mysql_query($sql);

while ($row = mysql_fetch_array($result)) {
$moviename = $row['moviename'];
$id = $row['id'];

echo "<a href=\"search.php?id=$id\">" . $moviename . "</a>";

}
}
}
else {
echo "Please enter a search query";
}
}


?>