fixed security issue again, thanks Niphlod