Fix unsafe SQL query in search suggestions controller.