Escape ze string

www/search.php

@@ -31,8 +31,8 @@ if(isset($_GET["q"]))
 
         
     }
-
-    $stmt = $pdo->prepare("select * from SavedVideo where Title like '%$search%' LIMIT ".strval($offset*20).", 20");
+    $mySearch = $pdo->quote("%".$search."%");
+    $stmt = $pdo->prepare("select * from SavedVideo where Title like $mySearch LIMIT ".strval($offset*20).", 20");
     $stmt->execute();
     $videos = $stmt->fetchAll();