block some characters for avoid SQL Injection using Nginx