sanitizeInput() won't convert null to empty strings