no directory sniffing allowed