[support] sanitizing text box input for sql searches (custom search)