$_GET

$q = $_GET [ "q" ] ;

"SELECT * FROM users WHERE user=' $q '"

$sql = "SELECT * FROM users WHERE user=' $q '" ;