The strings from database are not stripped from illegal characters.