1.0.6 change to 1.0.7 fixed possible exploit