Fix confirmation security