committing like this, input validation filter disabled, still something wrong