Escaped some more  variables in searchResults just in case of injection (even if they are pulled directly from the database)