updated search.php sql query