sql testdatabas

<?PHP
session_start();
$_SESSION['adress'] = $_POST['adress'];
$_SESSION['datab'] = $_POST['datab'];
$_SESSION['user'] = $_POST['user'];
$_SESSION['pw'] = $_POST['pw'];
?>

<form action="<?=$PHP_SELF?>" method="POST">
Ange ett SQL-kommando: <br /><br>
Host: <input type="text" name="adress" value="<?=$_SESSION['adress']?>"> 
Anändarnamn: <input type="text" name="user" value="<?=$_SESSION['user']?>">
Lösenord: <input type="password" name="pw" value="<?=$_SESSION['pw']?>"/> 
Databas: <input type="text" name="datab" value="<?=$_SESSION['datab']?>"> <br>
Fråga: <input type="text" size="70" name="sql" />
<input type="submit" name="skicka" value="Skicka" /> Hjälp: <a href="http://dev.mysql.com/doc/refman/4.1/en/sql-syntax.html"></a><br /><br />
</form>

<?PHP



if(isset($_POST['sql'])){


$connect = mysql_connect($_POST['adress'],$_POST['user'],$_POST['pw']);
?>

SQL-kommando:<br />
<?PHP
$temp = $_POST['sql'];
$temp = str_replace("\'","'",$temp);
echo $temp;
?>
<br /><br />
<?PHP
$test = substr($temp,0,6);




if(strcasecmp($test,"SELECT")==0)
{
$result = mysql_db_query($_POST['datab'],$temp);
?>

<table border="1" cellpadding="5">
<tr>
<?
for($i=0; $i<=(mysql_num_fields($result))-1; $i++){
echo "<th>" . mysql_field_name($result,$i)."</th>"; 

}

?>
</tr>
<?PHP

while($rad=mysql_fetch_row($result)){
echo "<tr>";
for($i=0; $i<=(mysql_num_fields($result))-1; $i++){
echo "<td>" .$rad[$i]. "</td>";
}
echo "</tr>";
} 

?></table>
<?PHP
} else {
mysql_db_query($_POST['datab'],$temp);
$ant_post = mysql_affected_rows($connect);
echo "$ant_post post/poster berördes av operationen.";
}

mysql_close($connect);
}

?>

SELECT * FROM help_keywords