fixed security hole. i think? limited folders that get_file can access.