ignore special characters to avoid kind of injections