      $search_term = mysql_real_escape_string($_POST['search_box']);      $sql .= "WHERE first_name= '{$search_term}'";      $sql .= " OR last_name= '{$search_term}'";     $query=mysql_query($sql) or die(mysql_error()); 