Use a prepared statement to prevent sql injection
Clear out the results and do a search on every keystroke
tabs!