Security fixes for boomaga backend