another directory traversal method