guard against input