Sanitising $_GET parameters in the everything_fields.php controller

Signed-off-by: Elliot Condon <e@elliotcondon.com>