improve protection
improve protection / sanity of vars POST GET