fixes to nodejs, php, xmpp, ssh, defense