added file path restrictions
(to prevent user of requesting files out of ./ folder)