Prevent opening other directories

Make sure you cannot do something ?id=../somefile