added proper dbh->quote() (SQL quoting) of user inputed text for search, added html tag stripping of user inputted search text