diff --git a/index.php b/index.php
index cc1be1e..9dffbf5 100644
--- a/index.php
+++ b/index.php
@@ -1191,7 +1191,7 @@ $EXT2MIME = [
 	"ice" => "x-conference/x-cooltalk",
 ];
 
-$path = $_SERVER['REQUEST_URI'];
+$path = explode('?', $_SERVER['REQUEST_URI'], 2)[0];
 $dir = realpath(__DIR__ . $path);
 if (strpos($dir, $ROOTPATH) !== 0) {
 	die("Access denied.");