http://www.bitrepository.com/prevent-directory-traversal-attacks-in-php-wordpress.html