fixed some scripting attacks