refactored store_code preg_match to be save of sql injections