String inputs from forms should be checked and sanitized early in order to avoid artifacts in output (and to improve security).