fixed a security issue...sometime I think to be retarded...