diff --git a/Admin/Routes/Web/Api.php b/Admin/Routes/Web/Api.php
index 490fb07..1f4f0bc 100755
--- a/Admin/Routes/Web/Api.php
+++ b/Admin/Routes/Web/Api.php
@@ -22,6 +22,7 @@ return [
         [
             'dest'       => '\Modules\Draw\Controller\ApiController:apiDrawCreate',
             'verb'       => RouteVerb::SET,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::CREATE,
diff --git a/Controller/BackendController.php b/Controller/BackendController.php
index 064c65e..2d64680 100755
--- a/Controller/BackendController.php
+++ b/Controller/BackendController.php
@@ -126,7 +126,7 @@ final class BackendController extends Controller
         $view->data['nav'] = $this->app->moduleManager->get('Navigation')->createNavigationMid(1005201001, $request, $response);
 
         /** @var \Modules\Draw\Models\DrawImage[] $images */
-        $images               = DrawImageMapper::getAll()->sort('id', OrderType::DESC)->limit(25);
+        $images               = DrawImageMapper::getAll()->sort('id', OrderType::DESC)->limit(25)->executeGetArray();
         $view->data['images'] = $images;
 
         return $view;
diff --git a/Theme/Backend/draw-create.tpl.php b/Theme/Backend/draw-create.tpl.php
index 377cc53..88344e8 100755
--- a/Theme/Backend/draw-create.tpl.php
+++ b/Theme/Backend/draw-create.tpl.php
@@ -92,7 +92,7 @@ echo $this->data['nav']->render(); ?>
                                     <option>
                                 </select>
                         <tr><td colspan="2"><label><?= $this->getHtml('GroupUser'); ?></label>
-                        <tr><td><input id="iPermission" name="group" type="text" placeholder=""><td><button><?= $this->getHtml('Add', '0', '0'); ?></button>
+                        <tr><td><input id="iPermission" name="group" type="text"><td><button><?= $this->getHtml('Add', '0', '0'); ?></button>
                     </table>
                 </form>
             </div>
diff --git a/Theme/Backend/draw-list.tpl.php b/Theme/Backend/draw-list.tpl.php
index 351607e..1799f63 100755
--- a/Theme/Backend/draw-list.tpl.php
+++ b/Theme/Backend/draw-list.tpl.php
@@ -36,12 +36,13 @@ echo $this->data['nav']->render(); ?>
                     <td><?= $this->getHtml('Creator'); ?>
                     <td><?= $this->getHtml('Created'); ?>
                 <tbody>
-                <?php $count = 0; foreach ($images as $key => $value) : ++$count;
-                $url         = \phpOMS\Uri\UriFactory::build('draw/view?{?}&id=' . $value->id); ?>
+                <?php $count = 0;
+                foreach ($images as $key => $value) : ++$count;
+                    $url = \phpOMS\Uri\UriFactory::build('draw/view?{?}&id=' . $value->id); ?>
                     <tr>
                         <td data-label="<?= $this->getHtml('Name'); ?>"><a href="<?= $url; ?>"><?= $this->printHtml($value->media->name); ?></a>
                         <td data-label="<?= $this->getHtml('Creator'); ?>"><a href="<?= $url; ?>"><?= $this->printHtml($value->media->createdBy->login); ?></a>
-                        <td data-label="<?= $this->getHtml('Created'); ?>"><a href="<?= $url; ?>"><?= $this->printHtml($value->media->createdAt->format('Y-m-d')); ?></a>
+                        <td data-label="<?= $this->getHtml('Created'); ?>"><a href="<?= $url; ?>"><?= $this->printHtml($value->media->createdAt?->format('Y-m-d')); ?></a>
                 <?php endforeach; ?>
                 <?php if ($count === 0) : ?>
                 <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', '0', '0'); ?>
diff --git a/Theme/Backend/draw-view.tpl.php b/Theme/Backend/draw-view.tpl.php
index 8da1cc9..8b4799f 100644
--- a/Theme/Backend/draw-view.tpl.php
+++ b/Theme/Backend/draw-view.tpl.php
@@ -94,7 +94,7 @@ echo $this->data['nav']->render(); ?>
                                     <option>
                                 </select>
                         <tr><td colspan="2"><label><?= $this->getHtml('GroupUser'); ?></label>
-                        <tr><td><input id="iPermission" name="group" type="text" placeholder=""><td><button><?= $this->getHtml('Add', '0', '0'); ?></button>
+                        <tr><td><input id="iPermission" name="group" type="text"><td><button><?= $this->getHtml('Add', '0', '0'); ?></button>
                     </table>
                 </form>
             </div>