fix hash security