Fix security hole