//Clean $search variable
function sanitize ($string) {
trim($string);
strip_tags($string);
stripslashes($string);
return str_replace(array("'\;:,=}{<>[]"),'',$string);
}
//End Sanitize

$search = sanitize($search);