validate and escape user input