#tips for your search page/engine -2

Don't send the query to search engine as you get from user input. Check and validate. And remove unnecessary special symbols.

A * can break your site 

Or gets all document. If you don't have limited result set this may break your site, too.