sql injection prevention

How can i sanitize this:

$expire_criteria = new CDbCriteria;

			$expire_criteria->addCondition("name LIKE '%$search%'");


			$expire_criteria->addCondition("approvedStatus = '1'");


			$products = Products::model()->find($expire_criteria);

// replace your condition with search condition

$expire_criteria->addCondition("name LIKE '%$search%'");


// like so

$expire_criteria->addSearchCondition("name", $search);