add unauthorized characters check for database name and hostnames