Make sure to escape user supplied data for search