Sanitise user input