fixed doc.php sanitization