fixed critical security issue

Thx for report goes to Adrian Kühnis - Azular GmbH