if (($action == "view")|($action == "delete")|($action == "deleteyes")|($action == "deletefile")|($action == "deletefileyes")) {
  if ($action == "view") {
   $clientid = $_GET['clientid'];
   $query = "SELECT * FROM insurance WHERE clientid='$clientid'";
   $result = mysql_query($query) or die (mysql_error());
   $num_rows = mysql_num_rows($result);
   if ($num_rows == "") {
    echo "Could Not Select CLIENTID";
    return 0;
   }
   while($rows = mysql_fetch_assoc('$result')) {
    $name = $rows["name"];
    $policyno = $rows["policyno"];
    $type = $rows["type"];
    $clientid = $rows["clientid"];
    echo "<br>";
    echo "<dd><dd><dd><dd><dd><dd>NAME: $name<br>";
    echo "<dd><dd><dd><dd><dd><dd>POLICY NUMBER: $policyno<br>";
    echo "<dd><dd><dd><dd><dd><dd>POLICY TYPE: $type<br>";
    echo "<dd><dd><dd><dd><dd><dd>CLIENT ID: $clientid<br>";
   }
   echo "<center><br>";
   // open this directory 
   $blank = "";
   $dir = "$clients".$clientid."".$blank;
   $myDirectory = opendir($dir);
   // get each entry
   while($entryName = readdir($myDirectory)) {
    $dirArray[] = $entryName;
   }
 
   // close directory
   closedir($myDirectory);
 
   //count elements in array
   $indexCount = count($dirArray);
   // sort 'em
   sort($dirArray);
   // print 'em
   print("<TABLE border=1 cellpadding=5 cellspacing=0 class=whitelinks width=60%>\n");
   print("<TR><TH align=left>Filename</TH><TH>Action</th></TR>\n");
   // loop through the array of files and print them all
   for($index=0; $index < $indexCount; $index++) {
           if (substr("$dirArray[$index]", 0, 1) != "."){ // don't list hidden files
     print("<TR><TD width=80%><a href=\"Z:/Clients/$clientid/$dirArray[$index]\">$dirArray[$index]</a></td>");
     print("<td width=16%><a href='Z:/Clients/$clientid/$dirArray[$index]'>[view]</a> <a href='insurance.php?action=deletefile&clientid=$clientid&file=$dirArray[$index]'>[remove]</a></td>");
     print("</TR>\n");
    }  
   }
   print("</TABLE>\n");
   echo "<br><center>[scan] [attach]<br><a href='insurance.php?'>[home]</a></center>";
  }

 if (($value1 == "name")|($value1 == "policyno")|($value1 == "type")) { 
  # do some sense checking...
  if ($value2 == "") { 
   $substring1 = "";
  } else {
   $substring1 = "AND $value2 = '$field2'";
  }
  if ($value3 == "") { 
   $substring2 = "";
  } else {
   $substring2 = "AND $value3 = '$field3'";
  }
  if ($value4 == "") {
   $substring3 = "";
  } else {
   $substring3 = "AND $value4 = '$field4'";
  }
  # replace all spaces with MySQL wildcards...
  $field1 = str_replace(" ","%",$field1);
  $field2 = str_replace(" ","%",$field2);
  $field3 = str_replace(" ","%",$field3);
 
  # set the query string...
  $query = "SELECT * FROM insurance WHERE $value1 LIKE ('%$field1%') $substring1 $substring2 $substring3";
 
  # execute the query...
  $result = mysql_query($query);
 
  # split the results and set further variables...
  $num_rows = mysql_num_rows($result);
  $num_fields = mysql_num_fields($result);
  if ($num_rows == 0) {
   echo "No Results<br>";
   return 0;
  }
  echo "<center>";
  echo "<table border=1 width=65%>";
  echo "  <tr>";
  echo "      <th>NAME</th>";
  echo "      <th>CLIENT ID</th>";
  echo "  </tr>";
  while($row = mysql_fetch_row($result)) {
   for ($i=0;$i<=$num_rows;$i++) {
    $id = "$row[$i]";
    $query = "SELECT * FROM insurance WHERE id=$id";
    $results = mysql_query($query);
    while($rows = mysql_fetch_assoc($result)) {
     $name = $rows["name"];
     $policyno = $rows["policyno"];
     $type = $rows["type"];
     $clientid = $rows["clientid"];
     echo "  <tr>";
     echo "    <td width=44%>";
     echo "      <a href='insurance.php?action=view&clientid=$clientid'>$name</a>";
     echo "    </td>";
     echo "    <td width=44%>";
     echo "      <a href='insurance.php?action=view&clientid=$clientid'>$clientid</a>";
     echo "    </td>";
     echo "    <td width=6%>";
     echo "      <a href='insurance.php?action=view&clientid=$clientid'>[view]</a>";
     echo "    </td>";
     echo "    <td width=6%>";
     echo "      <a href='insurance.php?action=delete&clientid=$clientid'>[remove]</a>";
     echo "    </td>";
     echo "   </tr>";
    }
   }
  }