search query

[eluser]Gavin Blair[/eluser]
If you don't want to do it that way, yes, the best idea is to run the query only if the form validates (the user actually submitted something into both fields, and maybe they are at least, say, 3 characters long). This would be nicer to your database server as well.