I use flat files in that app. Of course I'm whitelisting all the letter of all languages and numbers. All the app works only with a-zA-Z0-9_ chars, except the search needed to generate some random links for seo for all the languages.