fixed an security vuln (thx to @pythech)