punish user for null