searchUrl="http://server.com/xml.php?action=get_search&search_str="+escape (str); products_xml.load(searchUrl)