View difference between Paste ID: ZUcAcEtR and CkwW8A1V

 <!-- Yahoo Answers: http://answers.yahoo.com/question/index?qid=20130614195000AAV5Uey
 <form action="show.php" method="post">
 <input type="text" value="Enter Site ID" name="a" class="textfield_effect" maxlength="30" onfocus="this.value=''">
 </td>
 </tr>
-            <td align="center" style="font-family:Calibri">
+
-<input type="submit"  value=""/>
+    <td align="center" style="font-family:Calibri">
     <input type="submit"    value=""/>
 </form>
 
 
-$con=mysqli_connect("mysql.crunkboxhost.com","CHANGED","CHANGED","CHANGED");
+
-// Check connection
+
-if (mysqli_connect_errno())
+    <tr>
-  {
+        <th>ID</th>
-  echo "Failed to connect to MySQL: " . mysqli_connect_error();
+        <th>Post Code</th>
-  }
+        <th>Taxi Name</th>
         <th>Price per mile</th>
-$a= $_POST["a"];
+        <th>Rating</th>
-$result = mysqli_query($con,"SELECT *
+        <th>Location</th>
-FROM  `datasearch`
+        <th>Are they online?</th>
-WHERE  `TAXINAME` LIKE  '$a'
+        <th>Are they busy?</th>
-LIMIT 0 , 30");
+    </tr>" . PHP_EOL;
-$query = "SELECT * FROM datasearch WHERE ID LIKE '%".$_POST['search']."%'";
+
 if( $_SERVER['REQUEST_METHOD'] === 'POST'){
     $con = mysqli_connect("mysql.crunkboxhost.com","CHANGED","CHANGED","CHANGED");
     // Check connection
-<th>ID</th>
+    if (mysqli_connect_errno()) {
-<th>Post Code</th>
+        echo '<tr><td colspan="8">Failed to connect to MySQL: </td></tr><tr><td colspan="8">' . mysqli_connect_error($con) . '</td></tr>';
-<th>Taxi Name</th>
+    }else{
-<th>Price per mile</th>
+
-<th>Rating</th>
+        $a = mysqli_real_escape_string( trim( $_POST["a"] ) ); // SQL Injection protection (Not Best, but better than nothing)
-<th>Location</th>
+        $result = mysqli_query($con,"SELECT * FROM datasearch WHERE TAXINAME LIKE '%$a%' LIMIT 0,30"); // Don't forget the wildcards
-<th>Are they online?</th>
+        if( !$result ){ // Malformed Query Statement
-<th>Are they busy?</th>
+            echo '<tr><td colspan="8">Internal Error: </td></tr><tr><td colspan="8">' . mysqli_error($con) . '</td></tr>';
-</tr>";
+        }else if( $result->num_rows === 0){ // No Rows Returned / Not matches
             echo '<tr><td colspan="8">No results found for "' . $a . '".</td></tr>';
-while($row = mysqli_fetch_array($result))
+        }else{ // Matches
-  {
+            // $query = "SELECT * FROM datasearch WHERE ID LIKE '%".$_POST['search']."%'"; // No IDEA what this is trying to accomplish, unless it's some attempt at a caching system
-  echo "<tr>";
+
-  echo "<td>" . $row['ID'] . "</td>";
+            while($row = mysqli_fetch_assoc($result)) {
-  echo "<td>" . $row['POSTCODE'] . "</td>";
+                echo "<tr>";
-  echo "<td>" . $row['TAXINAME'] . "</td>";
+                echo "<td>" . $row['ID'] . "</td>";
-  echo "<td>" . $row['PRICEPERMILE'] . "</td>";
+                echo "<td>" . $row['POSTCODE'] . "</td>";
-  echo "<td>" . $row['RATING'] . "</td>";
+                echo "<td>" . $row['TAXINAME'] . "</td>";
-  echo "<td>" . $row['RATING'] . "</td>";
+                echo "<td>" . $row['PRICEPERMILE'] . "</td>";
-  echo "<td>" . $row['LOCATION'] . "</td>";
+                echo "<td>" . $row['RATING'] . "</td>";
-  echo "<td>" . $row['ONLINE'] . "</td>";
+                echo "<td>" . $row['LOCATION'] . "</td>";
-  echo "<td>" . $row['BUSY'] . "</td>";
+                echo "<td>" . $row['ONLINE'] . "</td>";
-  echo "<td>" . $row[''] . "</td>";
+                echo "<td>" . $row['BUSY'] . "</td>";
-  echo "</tr>";
+                echo "</tr>";
-  }
+            }
-echo "</table>";
+        }
-mysqli_close($con);
+
     }
     if( is_resource($con) ){
         mysqli_close($con);
     }
 }else{
     echo '<tr><td colspan="8">Please Enter Site ID to search.</td></tr>';
 }
 echo "</table>";