escape special character for user input data
admin: view all customers