Use REQUEST_URI and parse_url to properly handle paths Prevent directory traversal with stricter sanitization