new_player href exploit fix