Busca com risco de sql injection :)