move sanitizing rule queries into db module