Podminka where

<form action="index.php" method="post">
        <select name="hodnota_vyber">
        <option value="IKEA">Stul</option>
        <input type="submit" value="Odesli">
        </select>
        </form>

<?php

$db=mysql_connect("localhost","nabytek", heslo");

if (!$db)
 { 
 die (mysql_error() );
    }

$escapehodnota = isset($POST['hodnota_vyber']) ? $_POST['hodnota_vyber'] : "";

echo $escapehodnota;  //tady hodnotu vidim "IKEA"

$vyber="SELECT * FROM nabytek WHERE id= '$escapehodnota'";

$data=mysql_query("test", $vyber, $db);

while ($zaznam = mysql_fetch_array($data)) {

echo "<table border='1'>";
echo "<tr>";
echo "<td>" . $zaznam['barva'] . "</td>";
echo "<td>" . $zaznam['rozmer'] . "</td>";
echo "<td>" . $zaznam['vaha'] . "</td>";
echo "<td>" . $zaznam['id'] . "</td>"; 
echo "<td>" .'<a href="delete-info.php?id='.$zaznam['id_udalost'].'">Smazat</a>'."</td>";
echo "</tr>";
echo "</table>";
}

mysql_close($db);

?>

$vyber="SELECT * FROM nabytek WHERE id= '$escapehodnota' DESC LIMIT 50";