Sanitized input and output to prevent SQL injection and XSS