What should happen to input that does not have leading digits plus a two character suffix? Will have you already screened such input out? If not, is stripping off the last two characters the right thing to do, or should something else happen?

The devil is in the details.