value sanitizing and table sanitizing: start