Hi, This security hole is fixed in version 0.3c. The patch is automatically applied when DirectContact is restarted. Regards, Lionel Reyero