[cobalt-users] Cgi scripts allow browsing through virtual sites

["Kees Wakkerman" <wakkerm@xxxxxxxxxxxxxx>]

A customer wants to set up a search script that browses through his entire
(virtual) site on our RAQ4 for certain keywords. One of the parameters in
the cgi script is the local server path for his site
(/home/sites/www.xyz.com/web). The script runs without error.
Now we change the server localpath parameter to /home/sites and... the
script is suddenly allowed to browse through all the other virtual sites as
well. Same happens when changing the server localpath parameter to /. How to
prevent cgi scripts to browse every directory on the RAQ4? How to prevent
users to browse out of their virtual site context?