RightClick

$s= "select userid,proof,rank,name,family from ups where name=trim('$name') and family=trim('$family') and birth=trim('$tavalod') and bank=trim('$bank')  ";
//echo $s;
$q=mysql_query($s) or die("Sql is error");
$result=mysql_fetch_row($q);
$num=mysql_num_rows($q);
//echo "$num";
if($num)
  {
   echo "<table  width=650  >";
echo "<tr>";
while($row=mysql_fetch_array($q))
      {
echo"<td   width=200>";
       echo"<table height=229  width=172  cellpadding=0   align=left  cellspacing=0 border=0>";
        echo"<tr>";
     echo"<td  height=180   width=7  background=SrchBoxLeft.jpg>";
    echo"<td  height=180  align=center  background=SrchBoxMid.jpg>";
   echo"<table  width=150  cellpadding=1 cellspacing=1  border=0  >";
   echo"<tr>";
   echo"<td height=150  valign=middle align=center>";
    echo"</td>";
echo"</tr>";

$sql = "SELECT * FROM `table` WHERE `name` LIKE '%".$name ."%' ";

if(!empty(!$_POST['email'])){
$test = "AND `email` LIKE '%".$email ."%' ";
}
else{$test='';}

$sql = "SELECT * FROM `table` WHERE `name` LIKE '%".$name ."%'  ".$test." ".$test2." ";