better regex to avoid js injections. It did not avoid a js injection when...

better regex to avoid js injections. It did not avoid a js injection when passing 3,5,7,... '\' inside var_recherche