No database abstraction layer?
No checking of vars for malicios input before you use them in queries?
Calling mysql_close() on a connection that, from what I've seen, hasn't even been opened?
Ugly indents ( but that might just be the forum )?
I personally hate functions that just echo() data too, its nicer if they return; it so that I can manipulate it later and its a little more reusable, but thats just a matter of prefernece.