backups security fix
prevent directory traversal and deletion