photo formats + sanitize input