--- a/src/filters/rclflac
+++ b/src/filters/rclflac
@@ -9,6 +9,7 @@
 LC_ALL=C ; export LC_ALL
 progname="rclflac"
 filetype=media
+
 
 
 #RECFILTCOMMONCODE
@@ -34,10 +35,10 @@
     cmd=$1
     case $cmd in
     */*)
-	if test -x $cmd ; then return 0; else return 1; fi ;;
+	if test -x $cmd -a ! -d $cmd ; then return 0; else return 1; fi ;;
     *)
       oldifs=$IFS; IFS=":"; set -- $PATH; IFS=$oldifs
-      for d in $*;do test -x $d/$cmd && return 0;done
+      for d in $*;do test -x $d/$cmd -a ! -d $d/$cmd && return 0;done
       return 1 ;;
     esac
 }
@@ -69,6 +70,9 @@
 then
   senderror INPUTNOSUCHFILE "$infile"
 fi
+
+# protect access to our temp files and directories
+umask 77
 
 ##############################################################################
 # !! Leave the following line unmodified !