fixed information disclosure bug