input validity is fixed and working, user input is escaped for XSS safety, error checking is working