store 100 values as JSON "null" instead of emitting PHP warnings
never expose user-supplied string to printf; use str_replace instead