added user inputs, but need to sanitize them