diff --git a/stratum/db.cpp b/stratum/db.cpp
index 3b34415..f8c513c 100644
--- a/stratum/db.cpp
+++ b/stratum/db.cpp
@@ -55,6 +55,19 @@ char *db_clean_string(YAAMP_DB *db, char *string)
 	return string;
 }
 
+// allow more chars without the most hurting ones (bench device names)
+static void clean_html(char* string)
+{
+	char *c = string;
+	size_t i, len = strlen(string) & 0x1FF;
+	for (i = 0; i < len; i++) {
+		if (c[i] == '<' || c[i] == '>' || c[i] == '%' || c[i] == '\\' || c[i] == '"' || c[i] == '\'') {
+			c[i] = '\0'; break;
+		}
+	}
+	if (strstr(string, "script")) strcpy(string, "");
+}
+
 void db_query(YAAMP_DB *db, const char *format, ...)
 {
 	va_list arglist;
@@ -536,7 +549,7 @@ static void _json_str_safe(YAAMP_DB *db, json_value *json, const char *key, size
 		char escaped[256] = { 0 };
 		snprintf(str, sizeof(str)-1, "%s", json_string_value(val));
 		str[maxlen-1] = '\0'; // truncate to dest len
-		//db_clean_string(db, str);
+		clean_html(str);
 		mysql_real_escape_string(&db->mysql, escaped, str, strlen(str));
 		snprintf(out, maxlen, "%s", escaped);
 		out[maxlen-1] = '\0';
diff --git a/web/yaamp/core/functions/yaamp.php b/web/yaamp/core/functions/yaamp.php
index 896ea76..0a9d691 100755
--- a/web/yaamp/core/functions/yaamp.php
+++ b/web/yaamp/core/functions/yaamp.php
@@ -278,7 +278,7 @@ function getAlgoPort($algo)
 function yaamp_fee($algo)
 {
 	$fee = controller()->memcache->get("yaamp_fee-$algo");
-	if($fee) return $fee;
+	if($fee && is_numeric($fee)) return (float) $fee;
 
 /*	$norm = yaamp_get_algo_norm($algo);
 	if($norm == 0) $norm = 1;