looks like i have to be more careful with unsanitized input because we dont validate our data much