use sanitize to protect from attacking