diff --git a/grep.php b/grep.php
new file mode 100644
index 0000000..ab5e324
--- /dev/null
+++ b/grep.php
@@ -0,0 +1,16 @@
+<?php
+header('Content-type: application/json');
+if (empty($_GET['q'])) { die(); }
+
+// Is this the correct way to sanitise args to shell from PHP?
+$QUERY=urldecode(escapeshellarg(urlencode($_GET['q'])));
+
+// Debug Logging
+//$fp = fopen('debug.log', 'a');
+//fwrite($fp, $_GET['q'] . " : " . $QUERY . "\n");
+//fclose($fp);
+
+exec("grep -hi $QUERY tweets.txt", $array);
+$data = json_encode($array);
+echo $_GET['jsoncallback'] . '(' . $data . ');';
+?>