Security fault + user validatation