Retter search_query() så den bruker prepared-statements.