secured command line scripts against web server invocation, plus a minor bug fix