the sanitize function is not needed any more due to our PDO bindings