sanitize_sql() for ILIKE and similar; clean up some comments