Using or_like active record method instead of sql clause to prevent error and mysql injections

If someone searchs for ", it gives an mysql error, and potentially makes
possible a mysql injection