code: check for suspicious user input