security fix in preloader.php