Escape SQL wildcards before running query to get user matches
Update name as well