vuln to directory traversal attack - needs more love!
working on directory traversal