You should encode string values while passing in an querystring. We use UrlEncode to Returns a string in which all non-alphanumeric characters except -_. have been replaced with a percent (%) sign followed by two hex digits and spaces encoded as plus (+) signs.
4.5