sanitizing the code before enter to database