$con = mysql_connect("localhost", "tyggy2", "bo11ock5"); mysql_select_db("waterhyd_tyggy"); $result = mysql_query("SELECT `partt-id`, `part` FROM type;"); Function clean($item){ $item=stripslashes($item); $item=strip_tags($item); $item=htmlentities($item); $item=str_replace("<", "xxx", $item); $item=str_replace(">", "xxx", $item); return $item; } $type=clean($_GET['type']); $rs= mysql_query($sqel); if (!$result){exit("E1".$type);} while ($row = mysql_fetch_assoc($result)) { $optid[]=$row['partt-id']; $opt[]=$row['part']; } //mysql_close($con); if($type==""){ $sqel="SELECT v.variant FROM variant v;"; }else{ $sqel="SELECT variant ,`variant-id` FROM variant WHERE `type-id`=".$type.";"; } $rs= mysql_query($sqel); if (!$rs) {exit("E2");} while ($row=mysql_fetch_assoc($rs)) { $vari[]=$row['variant']; $variid[]=$row['variant-id']; } ?>