fix blacklist bug & parameterize NULL to ?