DB operations, sanitized GET/POST params