public ArrayList<Auction> searchWinner(String username) {
		try {
			ArrayList<Auction> auctions = new ArrayList<Auction>();
			String[] keywords = username.split(" ");
			String sql = "select * from " + tableName + " WHERE ";
			for (int i = 0; i < keywords.length; i++) {
				if (i != 0)
					sql = sql + "OR ";
				sql = sql + "WINNER = " + "'" + keywords[i] + "'";
			}
			s = conn.createStatement();
			rs = s.executeQuery(sql);
			if (!rs.next())
				return null;
			do {
				Auction auction = new Auction();
				auction.setID(rs.getInt("ID"));
				auction.setName(rs.getString("NAME"));
				auction.setDescription(rs.getString("DESCRIPTION"));
				auction.setReserver(rs.getInt("RESERVER"));
				auction.setBuyOut(rs.getInt("BUYOUT"));
				auction.setStartPrice(rs.getInt("STARTINGPRICE"));
				auction.setCurrentPrice(rs.getInt("CURRENTPRICE"));
				auction.setStartTime(rs.getTimestamp("STARTTIME"));
				auction.setAuctionTime(rs.getTimestamp("AUCTIONTIME"));
				auction.setUserName(rs.getString("USERNAME"));
				auction.setWinner(rs.getString("WINNER"));
				auction.setSold(rs.getInt("SOLD"));
				auctions.add(auction);
			} while (rs.next());
			return auctions;
		} catch (Exception e) {
			System.out.print("error SQL");
			return null;
		}
	}