Thanks but could you please recommend a script that can do this task.

About your script, does it handle ' " % and these characters well if the user enters these characters in the query?