adding directory traversal