SANITIZE YOUR FUCKING INPUT