special character is not a solution for your store bot attack.
You need to implement web Firewall for your website. You can use services like Cloudflare and Sucuri web firewall.
This hacking need to prevent at the network level. Not the application level.
I have faced the same type of issue, it is resolved by Web firewall.