diff --git a/backend/src/routes/friends.js b/backend/src/routes/friends.js
index e78be3a..9842778 100644
--- a/backend/src/routes/friends.js
+++ b/backend/src/routes/friends.js
@@ -19,9 +19,15 @@ router.get('/search', authMiddleware, asyncHandler(async (req, res) => {
   const users = await query(
     `SELECT id, username, email 
      FROM users 
-     WHERE (username LIKE ? OR email LIKE ?) AND id != ?
+     WHERE (username LIKE ? OR email LIKE ?) 
+     AND id != ?
+     AND id NOT IN (
+       SELECT friend_id FROM friendships WHERE user_id = ?
+       UNION
+       SELECT user_id FROM friendships WHERE friend_id = ?
+     )
      LIMIT 20`,
-    [searchTerm, searchTerm, req.user.userId]
+    [searchTerm, searchTerm, req.user.userId, req.user.userId, req.user.userId]
   );
 
   res.json({ users });