Fix glaring security flaw