Make it a habit to always filter user input. Eg. Variables put into paths and SQL.
I have patched the path traversal security bug in production, just haven’t pushed to GitHub. This project was coded upwards of 6 months ago I’ve learned a lot since then.
https://github.com/DaltonWebDev/console.chat/blob/master/api...