Prevent reading of unintended files via id parameter.