Added some security (based on the default plugin config); fixed the plugin