diff --git a/website/public/API/loadMessages.php b/website/public/API/loadMessages.php
index fef9db7..1c6b942 100644
--- a/website/public/API/loadMessages.php
+++ b/website/public/API/loadMessages.php
@@ -3,11 +3,10 @@
 session_start();
 require_once("../../queries/connect.php");
 require_once("../../queries/private_message.php");
+require_once("../../queries/checkInput.php");
 
 if (isset($_POST["lastID"]) && $_POST["lastID"] != "") {
-
-    echo getNewChatMessages($_POST["lastID"], $_POST["destination"]);
-
+    echo getNewChatMessages(test_input($_POST["lastID"]), test_input($_POST["destination"]));
 } else {
-    echo getOldChatMessages($_POST["destination"]);
+    echo getOldChatMessages(test_input($_POST["destination"]));
 }
\ No newline at end of file
diff --git a/website/public/API/sendMessage.php b/website/public/API/sendMessage.php
index d1bc758..c5d47d1 100644
--- a/website/public/API/sendMessage.php
+++ b/website/public/API/sendMessage.php
@@ -3,16 +3,15 @@
 session_start();
 require_once("../../queries/connect.php");
 require_once("../../queries/private_message.php");
+require_once("../../queries/checkInput.php");
 
-if (isset($_POST["destination"]) &&
-    isset($_POST["content"])) {
-
-    if (sendMessage($_POST["destination"], $_POST["content"])) {
-        echo $_POST["content"] . " is naar " . $_POST["destination"] . " gestuurd";
+if (!empty(test_input($_POST["destination"])) &&
+    !empty(test_input($_POST["content"]))) {
+    if (sendMessage(test_input($_POST["destination"]), test_input($_POST["content"]))) {
+        echo 1;
     } else {
-        echo "YOU FAILED!!!";
+        echo 0;
     }
-
 } else {
-    echo "maybe dont try to hax the system?";
+    echo 0;
 }
\ No newline at end of file
diff --git a/website/public/js/chat.js b/website/public/js/chat.js
index 75eb32e..6c420a1 100644
--- a/website/public/js/chat.js
+++ b/website/public/js/chat.js
@@ -10,7 +10,6 @@ function loadMessages() {
         $("#lastIDForm").serialize()
     ).done(function(data) {
         if (data && data != "[]") {
-            console.log(data);
             messages = JSON.parse(data);
             addMessages(messages);
             $("#lastID").val(messages[messages.length - 1].messageID);
@@ -23,13 +22,10 @@ function loadMessages() {
 
 
 function sendMessage() {
-    console.log($("#sendMessageForm").serialize());
     $.post(
         "API/sendMessage.php",
         $("#sendMessageForm").serialize()
-    ).done(function( data ) {
-        console.log(data);
-    });
+    );
 
     $("#newContent").val("");
 }