Sanitize-2

if($_POST['submit']){
  $search = sanitize($_POST['search']);
  $query = "SELECT data FROM table WHERE data = '$search'";
}