sanitizing ldap search. I think, in this case it only prevents ldap search