check user input
parse user input
fix security err