diff --git a/server/http_upload.go b/server/http_upload.go
index 04019831ac07f8cc419725ffab3a690a09e440ac..b90219644b180a28ab9b19c1f84849bef12cf4a5 100644
--- a/server/http_upload.go
+++ b/server/http_upload.go
@@ -170,6 +170,7 @@ func (c *Server) upload(w http.ResponseWriter, r *http.Request) {
 		if Config().EnableCustomPath {
 			fileInfo.Path = r.FormValue("path")
 			fileInfo.Path = strings.Trim(fileInfo.Path, "/")
+			fileInfo.Path = strings.Replace(fileInfo.Path,"../","_",-1)
 		}
 		scene = r.FormValue("scene")
 		code = r.FormValue("code")