fix major exploit that allowed partial shell control