handled malicious inputs