I think nobody replied because it's too hard to help you when you just give us a snippet of code and don't even explain why it didn't work, like what error did you get? And why do you think there must be a path traversal vulnerability in there? Also, if you have the code, can't you just run the code and debug it?

Anyway, I recommend reading this.