the captcha added, db::update fixed, security fixed