sanitized user input using new php format