Cover local and remote files, but avoid LFI