prepare($sql); $term = "%$q%"; $stmt->execute([$term, $term, $term]); $results = $stmt->fetchAll(PDO::FETCH_ASSOC); echo json_encode($results); break; default: http_response_code(400); echo json_encode(['error' => 'Invalid action']); } } catch (Exception $e) { http_response_code(500); echo json_encode(['error' => $e->getMessage()]); }