Sanitize input

[jmechnich]

String inputs from forms should be checked and sanitized early in order to avoid artifacts in output (and to improve security).