properly escape search query