fixed fatal security flaw
removing DB arg, cleaning stuff up