map $query_string $qs_error {
    ~*(%20|\+|\ )(and|or|union)(%20|\+|\ )	1;
    ~*%28EXTRACTVALUE%28			1;
    ~*'\\x22					1;
    ~99999					1;
    ~[12][12][12][12][12]			1;
}