added sanitize_array() and sanitize() to helper

sanitize_array() and sanitize work to prevent cross site scripting