You may need to change the code from:
$myrow = mysql_fetch_array(mysql_query("SELECT * FROM Staff WHERE staff_no=$_POST[staff_no]"));
~to~
$myrow = mysql_fetch_array(mysql_query("SELECT * FROM Staff WHERE staff_no='$_POST[staff_no]'"));
The difference above is the addition of the single quotes around '$_POST[staff_no]'. Depending on how you set up your database, this may or may not resolve the problem. If this does not work, you might try breaking it up some, like so:
$result = mysql_query("SELECT * FROM Staff WHERE staff_no='$_POST[staff_no]'");
$myrow = mysql_fetch_array($result);
And, of course, make sure you have a table called "Staff" and a field called "staff_no". And to make it even more complicating, it's case-sensitive, too. Make sure it's "Staff" and not "staff". 😉
This should fix your problem... Good luck! 🙂
~Brian