random: prevent invalid url