No server side query uses in this, it doenson query the sever everytime use inpt leving us vulnarale to SQL Injections. Instead the JS file is localized one time with all wp posts, this searc function relies soley on javascript