Using xmlhttprequest post in PHP and Facebox

//link that starts it all  
<a href="email.php?user=doug" rel="facebox">EMAIL ME</a>    
//form that calls to the fucntion  
<? $user = $_GET['user']; ?>
<form method="post" onclick="emailForm();">
<input type="hidden" name="user" id="user" value="<? echo htmlentities($user,ENT_QUOTES); ?>">
<input name="name"  id="name" type="text"></td>
<input name="company"  id="company" type="text"></td>
<input name="email"  id="email" type="text"></td>
<textarea name="message" id="message" rows="5" wrap></textarea></td>
<input type="submit"  id="Submit" name="Submit" value="Send"></td>
</form>    
//ajax script to connect the pages  
<script type="text/javascript">
var time_variable; 
function getXMLObject()  //XML OBJECT
{
   var xmlHttp = false;
   try {
     xmlHttp = new ActiveXObject("Msxml2.XMLHTTP")  // For Old Microsoft Browsers
   }
   catch (e) {
     try {
       xmlHttp = new ActiveXObject("Microsoft.XMLHTTP")  // For Microsoft IE 6.0+
     }
     catch (e2) {
       xmlHttp = false   // No Browser accepts the XMLHTTP Object then false
     }
   }
   if (!xmlHttp && typeof XMLHttpRequest != 'undefined') {
     xmlHttp = new XMLHttpRequest();        //For Mozilla, Opera Browsers
   }
   return xmlHttp;  // Mandatory Statement returning the ajax object created
} 
var xmlhttp = new getXMLObject(); 
function emailForm() {
        var getdate = (new Date()).valueOf();  //Used to prevent caching during ajax call
        
        if (xmlhttp) {
			//define comma-separated list of the fields you wish to send.
			//notice the split() method at the end. It is used to convert that
			//list into an array. So fields is actually an array
	   		var fields="user,name,company,email,message".split(",");
			
			//initialize a variable that will contain the data you will send
	   		var params=""; 
			//go through your field list and get the value for each field
			//once you extract the value encode it and assign it to your params
			//variable
			for( var i=0; i < fields.length; ++i)
			{
				params=fields[i] + "=" + encodeURIComponent( document.getElementById(fields[i]).value ) + "&";
			}
			//append the date value to prevent caching
              params+="nocache="+getdate
                http.open("POST", "send.php", true);
                xmlHttp.onreadystatechange = handleServerResponse;
                xmlhttp.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
                xmlhttp.setRequestHeader('Content-Length', params.length);			 
                xmlHttp.send(params ); 
        } else {
                alert ("Browser does not support HTTP Request");
                return;
        }
} 
function handleServerResponse() {
   if (xmlhttp.readyState == 4) {
     if(xmlhttp.status == 200) {
       document.getElementById("message").innerHTML=xmlhttp.responseText; //Update the HTML Form element 
     }
     else {
        alert("Error during AJAX call. Please try again");
     }
   }
}
</script>    
<?php
//the send.php simplified
// Connects to your Database
include("dbinfo.inc.php");
mysql_connect("$server", $username, $password) or die("Could not connect to the db: " . mysql_error() );
@mysql_select_db($database) or die("Unable to select database: " . mysql_error() ); 
//get posted items from form
$user = mysql_real_escape_string($_POST['user']);
$name = mysql_real_escape_string($_POST['name']);
$company = mysql_real_escape_string($_POST['company']);
$theiremail = mysql_real_escape_string($_POST['email']);
$message = nl2br(mysql_real_escape_string($_POST['message'])); 
//look up email for user
$query = "SELECT email FROM board WHERE name = '$user'";
$results = mysql_query($query);
$youremail = mysql_fetch_array($results); 
//send email out
//code here uses the mail() fucntion
?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99: