#6 Blocking files outside web tree not working

[Jim Hart]

The logic for checking whether a file is within the web
tree is still flawed. An include with a .. in it that
tries to get above the web tree does nothing in thttpd,
and gives no error in Apache.