</form>

<?php


$condition1 = @$_GET['cond1'] ;
$condition2 = @$_GET['cond2'] ;
$condition3 = @$_GET[#cond3'] ;

mysql_connect("dbhost","dbuser","dbpass") or die("Unable to connect to server");; 
mysql_select_db("dbname") or die("Unable to select database"); 

$query = SELECT *, from paintings where artist = condition1 and period = condition2 and  value <= condition3 ;


 $numresults=mysql_query($query);
 $numrows=mysql_num_rows($numresults);

if ($numrows == 0)
  {
  echo "<p>Sorry, nothing found that matches your request etc</p>";

$condition1 = @$_GET['cond1'] ;
$condition2 = @$_GET['cond2'] ;
$condition3 = @$_GET['cond3'] ;
 
mysql_connect("dbhost","dbuser","dbpass") or die("Unable to connect to server");
mysql_select_db("dbname") or die("Unable to select database"); 
 
$query = sprintf("	select * 
				from paintings 
				where artist = '%s' 
				and period = '%s' 
				and  value <= '%s' "
				, mysql_real_escape_string($condition1)
				, mysql_real_escape_string($condition2)
				, mysql_real_escape_string($condition3)
			); 
 
$result = mysql_query($query);