在根据用户输入创建mysqli连接时，是否必须净化提交表单数据？

I am trying to write a php installer for my client to install my php program. What I mean is, my client can run domain.com/myscript/install/index.php, enter the database name, password hostname etc and once the form is submitted, my installer script will connect to the mySQL database (based on user's input), then create some tables etc.I am trying to write a php installer for my cli