Fixed ampersand breaking input, added string sanitization for security