security fix for getting data