Fixed security issues. Fixed ajax defect.