prevent $NMLANG path traversal - issue #52

and also a small fix: die(''), not die()