Best way to protect a PHP webapp with an open SQL interface from DDoS

Question

I am currently creating a webapp based on PHP and MySQL. The crown jewel of the app is a search engine where users can query the database to find data that meets certain cri