Fixed major security vulnerability that allowed any file to be displayed via ajax_file.php