nits
clean up strings sent by url + user error_log() instead of trigger_error()