escaped user string inputs