fixing security hole