sanitized LDAP inputs to prevent injection