validation, security