fixed one security problem, two more need review