fixed security problem in write-ufo