Update FilePage.php

made sure fid was numeric and if it isn't (attempted xss) then display default folder