sqli prevented; workaround for empty message bodys