fixed edit update security bug