Working towards #10: add some parameter validation to Scanf