fix security bug - Fixed #133
Merge branch 'fix-campaign' into develop