user input protection added, via loop limitation and confrimation of input