what is this code searching for?
would $user be a number, like user # 4?
or would it be the user name, like "haloplayerman"?
$user = wp_get_current_user();
$query = mysql_query('SELECT * FROM bookmarks WHERE user_id = "' . mysql_real_escape_string ( $_SESSION['$user'] ) . '"' ) or die ( mysql_error () );