Script PHP

Coté serveur, nous avons ce petit script PHP : 

     header("Expires: 0");
     header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
     header("Cache-Control: no-cache, must-revalidate");
     header("Content-type: application/xml"); 

     if(!empty($_REQUEST["foo"])) {
          $rqListBillet = "
               SELECT *
               FROM `blog_blabla`
               WHERE `titre` like '" . $_REQUEST["foo"] . "%'
               ORDER BY `date_parution` DESC";
          $rsListBillet = mysql_query($rqListBillet);
          $xml = "";
          if (mysql_num_rows($rsListBillet) > 0) {
               while ($billet = mysql_fetch_object($rsListBillet)) {
                    $xml .= "\ntitre) . "\" 
                          url=\"/blog/" . $billet->url_page . ".html\" />";
               }

          }
     }
     else {
          $xml = "";
     }
     $xml .= "\n";
     echo utf8_encode($xml);