Use placeholder in SQL query. Fixes #856
Display the search query warts and all

Otherwise sanitised queries are confusing, e.g. if you search for
'2042\' previously it would say 'search results for 2042' which isn't
right