bugfix for security loophole