Fixed path separator and added some directory traversal sanitization.