fix protect from forgery