finish new.php: form validation