diff --git a/admin/src/Controllers/Backup.php b/admin/src/Controllers/Backup.php
index 14057716..9e66e754 100644
--- a/admin/src/Controllers/Backup.php
+++ b/admin/src/Controllers/Backup.php
@@ -37,7 +37,7 @@ public function make(): void
     public function download(RouteParams $params): void
     {
         $this->ensurePermission('backup.download');
-        $file = $this->option('backup.path') . base64_decode($params->get('backup'));
+        $file = $this->option('backup.path') . basename(base64_decode($params->get('backup')));
         try {
             if (FileSystem::isFile($file, false)) {
                 HTTPResponse::download($file);