fixed security bug on showImage page