input validation, six years later