fixed major security bug

fixed major security bug