Make a search box and try this...
If(isset($_POST['query'])) { $query = $_POST['query']; $query = preg_replace("#[^a-z]#i","",$query); $query = strrouoper($query); $query = htmlspecialchars($query); $query = mysql_real_escape_string($query);};