fixed sec flaw