diff --git a/api/views.py b/api/views.py
index 275fa42..660e716 100644
--- a/api/views.py
+++ b/api/views.py
@@ -654,6 +654,9 @@ class API(object):
             if not len(spl) == 2:
                 return dumps({"success": False, "reason": f"malformed item: {item}"})
             net, num = spl
+            if not num.isdigit():
+                return dumps({"success": False, "reason": "invalid num: not a number."})
+            num = int(num)
             if token:
                 regproc.confirmAccount(net, num, token)
         return dumps({"success": True})