PHP search error

i wrote this simple code to search for data in the database but i get this error

if ($_POST['search']) {
	$productname=$_POST['productname'];
	$key=$_POST['keyword'];
	$cat=$_POST['cat'];
	
	$sql="select * from products where product_name like %$productname% and category='$cat' limit 8";

	$result=mysql_query($sql) or die(mysql_error());

PHP:

any help to fix it??

Thanks

 

There should be single quotes around:

'%$productname%'

PHP:

 

thanks...silly mistake

 

Btw, take a look at this:
www.php.net/mysql_real_escape_string

(For your own security)