fixed security-related bug when using fastcgi