use global replacement in rewrite url so it cannot be tricked presenting the same parameter multiples values in the same url