Properly sanitize user input