sanitize post url