add input checks
add security checks