better input injection for checkboxes