security hole & installer update

Just filters out / characters to eliminate filesystem traversal. It's
pretty basic. Also updates the install script to install over an
existing install.