changed structer of sanitize_cgi, the last cstring passed to it should be null