diff --git a/src/sv_user.c b/src/sv_user.c
index 7ec206f..5023fc9 100644
--- a/src/sv_user.c
+++ b/src/sv_user.c
@@ -294,7 +294,7 @@ void SV_BeginDownload_f(void){
 		
 	// hacked by zoid to allow more conrol over download
 	// first off, no .. or global allow check
-	if(strstr(name, "..") || !allow_download->value
+	if(strstr(name, "..") || strstr(name, "\\/") || !allow_download->value
 			// leading dot is no good
 			|| *name == '.'
 			// leading slash bad as well, must be in subdir