fixed search sql special characters