sanitizing strings into queries