blocking some exploits in lvl16 -- close #127, close #125