mysql_select_db($dbname, $link);
			$firm_author = $UserID;
			$firm_name = $_POST['firm_name'];

if ($firm_name <> NULL) {
			$sql = 'INSERT INTO firms (firm_name, firm_author) VALUES("'.$firm_name.'","'.$firm_author.'")';
			
			 if(!mysql_query($sql))
 			{$m = 'err';} 
	 			else
	 			{$m = 'add';}
			}
			mysql_query($query, $link);
			mysql_close($link);

$firm = $_POST['firm'];
				if (isset($firm) && ($firm>0)){$firm_sql = '&firm='.$firm;} else {$firm_sql = "";}
					
			# фильтр по фирме			
						printf("<div class='block_message'><form action='messages.php?op=main".$firm_sql."".$project_sql."".$author_sql."' method='post' name='forma'><fieldset>");
						$query = "SELECT * FROM firms WHERE firm_active='1' GROUP BY firm_name ORDER BY firm_name";
						$result = mysql_query($query) or die(mysql_error());
						print '<p>Предприятие: <SELECT name="firm" ><option value=""></option>';
								while ($row2 = mysql_fetch_array($result)) { 
										if($firm == $row2["firm_id"]) {
												print '<option value="'.$row2[firm_id].'" selected >'.$row2[firm_name].'</option>'; 
										}
										else{
												print '<option value="'.$row2[firm_id].'">'.$row2[firm_name].'</option>'; 
												}
								} 
						mysql_free_result($result);
						print ('</select>');