fixed a security bug
Merge branch 'master' of github.com:xinan/a-naive-mvc-blog