You will need to add this IF statement to hide these boxes if the admin isn't logged in. If not then anybody that gets to your Admin panel will see these input boxes.
Add this right before the opening <form> line of each form.
Add this right after the closing </form> line of each form.
If you just want to copy & past then replace each form of the previous code I gave with this:
This is the Order Search form
Code:
{if $login ne ''}
<form action="order.php">
Order ID:<input type="text" name="orderid"><input type="submit" value="find">
</form>
{/if}
This is the Product Search form
Code:
{if $login ne ''}
<!--
*****************************************************************************************************************************************
* The radio button value 1 will search by Product ID/SKU *
* The radio button value 2 will search by the productid which is the product id that is the autoincrement in the database! *
*****************************************************************************************************************************************
-->
<form action="product_modify.php" method="POST">
Item ID:<input type="text" name="search_id">
<input type="radio" id="search_types" name="search_types" value="1" checked="checked" />{$lng.lbl_sku}
<input type="radio" id="search_types" name="search_types" value="2" />PID
<input type="submit" value="find">
</form>
{/if}