fix security exploit