server input validation