Реальная байда

                        
if (isset($_POST['search']))

$db->sql_query("Insert into forum_s set search='".$_POST['search']."',time='".$time."'");



if (isset($_SESSION['search']))

$search=$_SESSION['search'];

if (isset($_POST['search']))

$search=$_POST['search'];

$_SESSION['search']=$search;

if (isset($_SESSION['sear']))

$sear=$_SESSION['sear'];

if (isset($_POST['sear']))

$sear=$_POST['sear'];

$_SESSION['sear']=$sear;

$search=ereg_replace("( ){2,}"," ",$search);

$search=ereg_replace("^( ){1,}|( ){1,}$","",$search);

if (isset($_GET['go']) && $search!=''){

$search_a=explode(' ', $search);

for($i=0;$i<count($search_a);$i++){

$search_a[$i]='#'.preg_quote(esc(trim(stripcslashes(htmlspecialchars($search_a[$i]))))).'#uim';