removed "-" from allowed characters, since it made a lot of trouble within sql queries.