fixed a possible security hole.