?phpsessionid=\' Or 1=1

In short, you should.

Every ounce of data that a user may imaginably be able to edit or construe somehow should be cleaned.