protect against get vars