I've added two filters to the products model for wildcard searches on description and name or description and updated the unit test to cover these cases. These are SQL-injection safe. XSS is not an issue for a search. Please let the products model do rhe searching rather than rolling you own SQL!