sanitize payment request code
fix parse_url