Add Input Sanitization

Find all places where user input is accepted and make sure it’s properly sanitized before use. Add validation, escaping, or parameterized queries as needed to prevent injection attacks.