use check and sanitize to handle request param
add more status code
format code