security bug fixed - strips user entry