!critical fix!

fixed possible injection