this is not so security.just prototype...