Try removong the // from your query....
//$result = mysql_query($sql,$db) or die (mysql_error());
to this
$result = mysql_query($sql,$db) or die (mysql_error());
"//" makes the line a comment, i believe, so it may be blocking the results from actually being processed.