Security Fix: Don't allow downloading out of directory

This code removes a / so you cant download out of bounds based on /etc/* or such.You should also always have php in a strict mode to prevent this type of behavior