Problem with apache

------=_NextPart_000_0059_01C52ADE.9A3D6BB0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I have noticed the following problem when using Apache with Windows XP =
or Windows 2000: the visitor of the site can get to the parent =
directory, of the Documentroot directory.
For instance, if in httpd.conf you declare ' DocumentRoot =
"c:/apache/htdocs/www" ', and there is a document called toto.html in =
the directory c:\apache\htdocs, the user could just go to toto.html by =
typing the following: http://your_web_site_url/./toto.html.
How can I restrict the visitor to the DocumentRoot directory and its =
children, and prevent his access to the parents in the disk hierarchy?
Your help would be greatly appreciated.

------=_NextPart_000_0059_01C52ADE.9A3D6BB0--