Security fix http://drupal.org/node/406520