You should be able to use the value they enter into the form field (via $_POST['field']) and use that in your SQL query to determine what data to return. The only thing I would suggest on top of that, is validate your form input. Make sure if you need an integer, you're getting an integer, for example.
-m