Fixed security issue in tour