fixed a potential security flaw