Finished whoson, but still a hacking loophole
user test code