[w00t]

I'm not entirely sure I understood the question, but I'll swing at it.

What I'm saying is that all user input, be it from a text box, a get variable, or a post variable, should be completely sanitized before any other code is ran that uses the input.