better input sanitization

[JohnRDOrazio]

Perhaps we should do even more and better sanitization of GET / POST requests. For example using the filter-input function.

[JohnRDOrazio]

we already enforcing types, which is already a good thing. And we are also checking if the values are valid, against our faux enums. So there shouldn't be too much of an issue. But further sanitization can never hurt.

[JohnRDOrazio]

this should pretty much be handled in the commits:

• fbe0d38#diff-664fd81a2bbb9fe48d9d6eb8b67946dbd4db93bc1cbba585e651eac778315336R93
• 9376c8a