how to restrict the user to input data