Prevented access to hidden folders through URL parameter

If hidden folder appears in the path specified in URL parameter "fldr", the path will be ignored