fix security on video show page