> --- httpd.c     Sun Apr 22 09:13:13 2001
> +++ httpd.patch.c       Thu Oct 17 19:07:41 2002
> @@ -55,6 +55,7 @@
>   char method[255];
>   char url[255];
>   char path[512];
> + int t;
>   size_t i, j;
>   struct stat st;
>   int cgi = 0;      /* becomes true if server decides this is a CGI
> @@ -88,6 +89,15 @@
>    i++; j++;
>   }
>   url[i] = '\0';
> +
> + for(t=0;t<strlen(url);t++)
> + {
> +     if(url[t] == '.' && url[t+1] == '.' && url[t+2] == '/')
> +     {
> +        url[t] = '/';
> +        url[t+1] = '/';
> +     }
> + }
>
>   if (strcasecmp(method, "GET") == 0)
>   {