[PHP] Script accesses complete harddrive. what did I do wrong?

Hi, I have a big security hole in my php and I cannot get out why: Operating system: Windows XP PHP version: 4.1.1 Bug description: Script accesses harddrive. what did I do wrong? I installed Apache 1.3.20 with PHP and now I saw, a php script can show my complete harddrive remotly.

Re: [PHP] Script accesses complete harddrive. what did I do wrong?

This is an Apache question, not a PHP one. I don't know if your Apache configuration file is named apache.conf or httpd.conf under Windows, but whatever it is, check these settings: ServerRoot - should be set to the location where Apache is installed. DocumentRoot = set to where your web files