sanitizing query string