fixed security issue
and reworked the jfusionapi.php a bit