Directory Traversal for authorized and non-authorized fixed