sanitize input from  superglobal, add comment to reference escaping