debugging, directory traversal added