added xss_clean to input