handing upload to vj
fixed search sql special characters
asdfasdf