added url protection