fixed: sql injection en LIKES