only allow numbers, letters, spaces, and commas~