You just need to add a balnk option tho the select list:
<option value="">Show All</option>
I take it that these should only be available to the client for adding more listings?
to protect the update and delete pages, you would need to use security assist, using security assist you can create a login form for the admin to loginto, and restrict access to the update and delete pages so that only a logged in user can access them
security assist also offers a Show region utility, you can use the security assist show region utility to only show the update and delete buttons on the results page if the user is logged in.
you can use the image column from a recordset in the image source tag:
<img border="0" src="path/to/images/folder<?php echo $row_recordsetName['ImageColumn']; ?>" />