Okay while I'm still working on the metadata, I just noticed this flaw. eg full=../../../../../../../etc/passwd