add some protection to mail addresses

there's a bug on args="p1=sdgsjh&p2=dkdjfhfdsj"