Thank you all for the various suggestions. It now works with this: $find = strip_tags($find); $find = trim($find); $data = mysql_query("SELECT * FROM news_items WHERE headline LIKE '%$find%'"); Another "newb" question: does strip_tags() help at all in preventing SQL injection attacks? Kind regards David