trying to fix exploit of kcfinder