query parameterization & user input safe handling
actually commit outcome handling files