Yes, perhaps the input should come in seperated by commas, but I think when it comes to writing the query surely
you should be implementing it by splitting the string on the commas and looking for matches.
Perhaps we should step back a touch and you should explain exactly what you are trying to achieve, how does the user interact with the system, what actions do they need to do and what are they expected to get in return?
Sean