check for injection