security of update and delete
require place name, add validation