Get autocomplete suggests is sql inject safe.