*security fixes
+setup.php
*works with post