What if "dir" is an empty string like `delete.php?dir=` ?