fix security problem