<table border="1" cellpadding="1" cellspacing="1" style="width:500px">
<tbody>
<tr>
<td colspan="3"> </td>
</tr>
<tr>
<td colspan="3">
<table border="1" cellpadding="1" cellspacing="1" style="width:500px">
<tbody>
<tr>
<td> </td>
<td> </td>
<td> </td>
</tr>
<tr>
<td colspan="3"> </td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td colspan="3"> </td>
</tr>
</tbody>
</table>
if(isset($_POST['queryString'])) {
if( array_key_exist( 'queryString', $_POST)) {
$query = $db->query("SELECT name FROM MS_store WHERE name LIKE '$queryString%' LIMIT 10");
инъекцияecho '</li><li onclick="fill(''
echo "</li><li onclick=\"fill( '{$result->value}');\">{$result->value}</li>";
хотя бы так