unguarded files skip sub directories
needn't use MIME
debug sql