Please use a urlencode function here to prevent any funny situations where someone's managed to get something URL-like through your validation.