</form>
 
<?php
 
 
$condition1 = @$_GET['cond1'] ;
$condition2 = @$_GET['cond2'] ;
$condition3 = @$_GET[#cond3'] ;
 
mysql_connect("dbhost","dbuser","dbpass") OR die("Unable to connect to server");; 
mysql_select_db("dbname") OR die("Unable to select database"); 
 
$query = SELECT *, FROM paintings WHERE artist = condition1 AND period = condition2 AND  value <= condition3 ;
 
 
 $numresults=mysql_query($query);
 $numrows=mysql_num_rows($numresults);
 
if ($numrows == 0)
  {
  echo "<p>Sorry, nothing found that matches your request etc</p>";

$condition1 = @$_GET['cond1'] ;
$condition2 = @$_GET['cond2'] ;
$condition3 = @$_GET['cond3'] ;
 
mysql_connect("dbhost","dbuser","dbpass") or die("Unable to connect to server");
mysql_select_db("dbname") or die("Unable to select database"); 
 
$query = sprintf("	select * 
				from paintings 
				where artist = '%s' 
				and period = '%s' 
				and  value <= '%s' "
				, mysql_real_escape_string($condition1)
				, mysql_real_escape_string($condition2)
				, mysql_real_escape_string($condition3)
			); 
 
$result = mysql_query($query);