Yeah, but, with all due respect, that's the lazy way out of the code.

Send a search to the DB, and post the results?
What happened to "Advanced Search"... in other words, some intelligence added to the technique. Anyone can hit a database with a hammer...
